XploitScan

Overview

XploitScan is a Model Context Protocol server that scans AI-generated code for security vulnerabilities, explains the rules behind findings, and provides a grade before deployment. By speaking MCP, it lets AI assistants call XploitScan as a native tool instead of juggling separate applications.

The server runs entirely on your local machine via the npm package xploitscan-mcp, communicating over stdio. No authentication is required — install and start scanning immediately. The latest release is v1.5.2.

XploitScan belongs to the Security category on mcp.site and works with any MCP client including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain XploitScan, claim this listing to verify your ownership and keep details up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "xploitscan": {
      "command": "npx",
      "args": [
        "-y",
        "xploitscan-mcp"
      ]
    }
  }
}