Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.
Runs on your machine from its package; the steps are below.
At most: moves money, runs code or commands, deletes data, or sends messages for you.
Odel charges nothing per call. The publisher may charge for its own service.
Runs locally over stdio
This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).
Run
npx -y @arcwall/mcp-server
MCP client config
{
"mcpServers": {
"arcwall-security": {
"command": "npx",
"args": [
"-y",
"@arcwall/mcp-server"
]
}
}
}Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.
Get your free API key at https://arcwall.io
Add to your MCP config:
Claude Code (~/.claude/mcp.json):
{
"mcpServers": {
"arcwall": {
"command": "npx",
"args": ["@arcwall/mcp-server"],
"env": { "ARCWALL_API_KEY": "your-key-here" }
}
}
}
Cursor (.cursor/mcp.json): Same config. Windsurf: Add via MCP settings panel.
arcwall_scan_secrets — hardcoded credentialsarcwall_scan_mcp — MCP config vulnerabilitiesarcwall_scan_agent_instructions — CLAUDE.md, .cursorrules securityarcwall_threat_model — STRIDE analysisarcwall_check_prompt — prompt injection testingarcwall_pre_commit — pre-commit security checkarcwall_scan_dependencies — known CVEs in packagesAsk your AI assistant: