CyberLens
Gives Claude security scanning tools for websites, public GitHub repos, and Open CLAW skill packages. The skill scanner downloads and unpacks the package locally, then checks for hardcoded secrets, dangerous eval calls, shell execution, and permission issues before you install. Website scans run 15 checks locally without an account (HTTPS, headers, server disclosure), or 70+ checks through the CyberLens cloud API if you connect one. Repository scans always need the cloud. Free tier is 5 scans per month. When quota runs out, it opens the pricing page and falls back to local mode for websites. All the remediation guides and CWE playbooks run locally, so you can ask for fix steps without burning API credits.
- tools
- 10
- auth
- Secret needed
- transport
- STDIO
- env vars
- 2
- last updated
- Mar 29, 2026
Tools
10 toolsPublic tool metadata for what this MCP can expose to an agent.
connect_accountOpens browser to sign up/log in and saves your API key locally
Opens browser to sign up/log in and saves your API key locally
No parameter schema in public metadata yet.
get_account_quotaShows your current plan and remaining website/repository scan quota; auto-connects on first use if needed
Shows your current plan and remaining website/repository scan quota; auto-connects on first use if needed
No parameter schema in public metadata yet.
scan_claw_skillDownload and analyse a CLAW Hub or direct skill package for security issues
Download and analyse a CLAW Hub or direct skill package for security issues
No parameter schema in public metadata yet.
validate_claw_skillValidate a skill manifest against security best practices
Validate a skill manifest against security best practices
No parameter schema in public metadata yet.
scan_websiteLocal quick website scan without an account; full cloud scan when connected; local fallback if website cloud quota is exhausted
Local quick website scan without an account; full cloud scan when connected; local fallback if website cloud quota is exhausted
No parameter schema in public metadata yet.
scan_repositoryPublic repository security scan for GitHub, GitLab, Bitbucket, and supported ZIP targets; auto-connects on first use if needed
Public repository security scan for GitHub, GitLab, Bitbucket, and supported ZIP targets; auto-connects on first use if needed
No parameter schema in public metadata yet.
get_scan_resultsRetrieve detailed findings from a completed cloud scan; auto-connects on first use if needed
Retrieve detailed findings from a completed cloud scan; auto-connects on first use if needed
No parameter schema in public metadata yet.
get_security_scoreLocal quick website score without an account; full cloud score when connected
Local quick website score without an account; full cloud score when connected
No parameter schema in public metadata yet.
get_remediation_guideBuilt-in local remediation playbooks for common CWEs and vulnerability classes
Built-in local remediation playbooks for common CWEs and vulnerability classes
No parameter schema in public metadata yet.
get_scan_transparencyHonest report of the MCP server's local checks and live cloud endpoints
Honest report of the MCP server's local checks and live cloud endpoints
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
CYBERLENS_API_KEYsecretCyberLens API key. Optional if you use the connect_account browser flow.
CYBERLENS_API_BASE_URLOptional override for the CyberLens public scan API base URL.
Readme
Cyber Lens AI MCP Server
Security scanning for AI assistants and agentic coding workflows.
A Model Context Protocol (MCP) server that gives AI assistants the ability to scan websites, public repositories, and Open CLAW skills for security vulnerabilities. It's purpose-built for the agentic coding era, with native support for scanning skill packages before you install them.
What It Does
When connected to an AI assistant (Claude Desktop, VS Code, etc.), this MCP server adds security scanning tools that the assistant can use during your conversation:
Details
- Repository
- github.com/shadoprizm/cyberlens-mcp-server
- Category
- Security & Pentesting
- Package
@shadoprizm/cyberlens-mcp-server- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
Related Security & Pentesting MCP servers
View all
AEGIS Eventsinttech-solutions/events-mcpRead-only search of security events from the news by place, point and radius, category and date.0stars
Freshdeps Mcpsolvohq/freshdeps-mcpLive npm/PyPI dependency-health verdicts so AI agents stop recommending stale or CVE'd packages0stars
MCP Shieldsophiacave/mcp-shieldSecurity scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.0stars
Hive Cdnsrotzin/hive-mcp-cdnEdge content delivery for autonomous agents — signed manifests, A2A authentication0stars
GitHub Actions Auditunbearabledev/github-actions-auditGitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.0stars