Claude MarketplacesSubmit
compuute avatar

Compuute MCP Security Scanner

compuute/compuute-scan-api

Wraps the compuute-scan static analyzer in an HTTP endpoint that agents can call directly. POST a public GitHub repo URL and get back a structured JSON report with security findings scored against 37 MCP-specific rules covering TypeScript, Python, Go, Rust, C#, Java, and Kotlin. The team is transparent about limitations: historic false positive rate runs around 90% on raw output, so treat findings as a triage queue rather than confirmed exploits. Every response includes an explicit disclaimer field. Supports idempotent retries via Idempotency-Key headers, ETag-based caching, and ships with full OpenAPI specs for agent discovery. Useful when you're vetting third-party MCP servers before deployment or want automated security checks in a CI pipeline without running local scanners.

tool
1
transport
HTTP
last updated
May 23, 2026
View on GitHub

Install

From registry metadata
$ npx add-mcp https://scan.compuute.se/mcp/ --name compuute-scan-api

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http compuute-scan-api https://scan.compuute.se/mcp/

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 1 tools

Verified live against the running server on Nov 6, 2026.

scan_mcp_serverScan a public GitHub MCP-server repository for security issues. Clones the repo (shallow, <60s, <200 MB), runs compuute-scan v0.6.2 in static analysis mode (no code execution from the target), and returns a structured report with severity counts, a 0-100 score, and the 10 most...1 params

Scan a public GitHub MCP-server repository for security issues. Clones the repo (shallow, <60s, <200 MB), runs compuute-scan v0.6.2 in static analysis mode (no code execution from the target), and returns a structured report with severity counts, a 0-100 score, and the 10 most...

Parameters* required
github_url*string

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Readme

compuute-scan-api

Scan-as-a-Service for MCP servers. HTTP + MCP wrapper around compuute-scan — the MCP-specific static security scanner. Designed for agent-callable consumption.

POST a public GitHub repo URL → get a structured security report scored against 38 MCP-specific rules across 8 languages (TS/JS, Python, Go, Rust, C#, Java, Kotlin).

Honesty note (read first): compuute-scan is a pattern-breadth detector, not an exploitability oracle. Historic false-positive rate after manual validation is ~90% on raw output (verified against modelcontextprotocol/servers: 138 raw findings → 13 confirmed). Every response carries a _disclaimer field stating this explicitly. Use findings as a triage queue, not as a list of confirmed vulnerabilities. See docs/FP-RATES.md for per-rule transparency.

Live at https://scan.compuute.se. Service version reported by /v1/health.

Endpoints

Core scan

View the full README on GitHub

Details

Repository
github.com/compuute/compuute-scan-api
Website
scan.compuute.se
Categories
Developer Tools, Security & Pentesting
Transport
HTTP
Registry
MCP registry, active
Tools verified
Nov 6, 2026

More from compuute

Related Developer Tools MCP servers

View all
1deepthi-04 avatarDeltaprobedeepthi-04/deltaprobeReview GitHub pull requests: diffs, summaries, risk checks and inline review comments.0stars
2detailobsessed avatarCodereviewbuddydetailobsessed/codereviewbuddyMCP server that helps AI coding agents interact with AI code reviewers on GitHub PRs0stars
3finishkit avatarMcpfinishkit/mcpFinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality0stars
4flow-84 avatarn8n-guardflow-84/n8n-guardRead-only health checks for self-hosted n8n: datastore growth, stuck runs, retention, git drift.0stars
5gitlumen-team avatarGitLumen MCPgitlumen-team/gitlumen-mcpScreens public GitHub repos and PRs to generate risk maps, findings, and merge-readiness signals.0stars
6gitwhy-cli avatarGitWhy — The Context Layer for Gitgitwhy-cli/gitwhyThe shared AI context engine for git — save, search, and share the reasoning behind code changes.0stars