CodeInspectus

Overview

CodeInspectus is a local-first MCP security scanner and CLI designed for AI-generated applications. It plugs directly into AI assistants as an MCP server, exposing security scanning capabilities as tools that models can invoke to analyze code for vulnerabilities and security issues.

The server runs entirely on your machine via the npm package codeinspectus, communicating over stdio with no external dependencies or credentials required. Version v3.1.0 is available now under the Apache-2.0 license, with full source code hosted at Synvoya/codeinspectus on GitHub where it has gathered 44 stars.

CodeInspectus is listed in the Development category on mcp.site and works with MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed, and others. If you maintain this project for Synvoya, you can claim this listing to verify ownership, earn a Verified badge, and ensure the information stays up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "codeinspectus": {
      "command": "npx",
      "args": [
        "-y",
        "codeinspectus"
      ]
    }
  }
}