XploitScan MCP Server

by bgage72590 Your server? Claim it

local only

XploitScan runs on your own machine — the client starts it, so there is no endpoint to ping. 163 installs a week from npm.

Security scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.

Installs per day peak 507 · avg 57 · +196% w/w

a month agotoday

163

Installs / week

npm · xploitscan-mcp

—

Stars

on GitHub

—

Last commit

15 releases in 90 days

—

License

language unknown

Nothing serious here today

Today is the operative word: we check XploitScan every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add xploitscan-mcp -- npx -y xploitscan-mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "xploitscan-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "xploitscan-mcp"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.xploitscan-mcp]
command = "npx"
args = ["-y", "xploitscan-mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "xploitscan-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "xploitscan-mcp"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "xploitscan-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "xploitscan-mcp"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: XPLOITSCAN_API_KEY (Optional. An xpls_ API key from a paid-plan account. Without it, the 30 free rules run; with it, all 223).

Alternatives to XploitScan

same job, measured the same way

CodeInspectus

by synvoya

Local-first MCP security scanner and CLI for AI-generated applications.

405 installs/wk local only

Judges Panel

by kevinrabun

45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.

160 installs/wk local only

valvur

by maverickhq

Offline security scanning for AI-generated code: seven open-source scanners in one MCP server.

445 installs/wk local only

Vibescan

by bigfloppy-vibescan

Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.

1 tools answering

Code Guard MCP

by mlawsonking

Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.

71 installs/wk local only

Python Code Validator

by jkanselaar

Validates AI-generated Python: syntax, lint, security scan and deterministic repair.

3 tools answering

AEO Scanner

by convrgent

AI visibility for ChatGPT/Perplexity/Claude — triple score (AEO+GEO+Agent) with fix code. Free.

290 installs/wk 4 tools answering

Arcjet

by arcjet

An MCP server for Arcjet - the runtime security platform that ships with your AI code.

answering

XploitScan — questions

Answers built from our own checks of this server.

Why is there no uptime for XploitScan?

XploitScan runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package xploitscan-mcp was installed 163 times last week.

How do I connect XploitScan?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls xploitscan-mcp straight from npm; nothing to host, nothing to sign up for.

How many people use XploitScan?

The npm package xploitscan-mcp was installed 163 times in the last week. Week over week that is +196%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.