Husk

Overview

Husk is a Model Context Protocol server that scans your projects for vulnerable dependencies, leaked secrets, and risky agent configurations. Running entirely on your machine, it lets AI assistants call Husk as a set of tools rather than requiring manual copying between applications.

The server installs locally via npx -y husk-sec and runs over stdio on your machine with no authentication required. It works out of the box without external credentials. Husk is published under the MIT license at version v0.1.1, with source code available at husk-security/husk on GitHub.

Husk belongs in the Security category on mcp.site and works with any MCP client including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain Husk for husk-security, you can claim this listing to verify ownership and keep the information up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "husk": {
      "command": "npx",
      "args": [
        "-y",
        "husk-sec"
      ]
    }
  }
}