Repo Security Scanner — Malicious Code & Supply Chain is answering right now. Last checked 3 min ago.
Audit GitHub repos for malicious and supply-chain code before you depend on them.
The linked repository no longer exists on GitHub — it was deleted or made private.
Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 3 min ago.
claude mcp add repo-security-scanner --transport http https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner
{
"mcpServers": {
"repo-security-scanner": {
"url": "https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner"
}
}
}
[mcp_servers.repo-security-scanner]
url = "https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner"
{
"mcpServers": {
"repo-security-scanner": {
"url": "https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner"
}
}
}
{
"mcpServers": {
"repo-security-scanner": {
"url": "https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner"
}
}
}
This endpoint answered with an authorization challenge. The server is running, but you need an API key from its owner to call it.
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner | streamable-http | needs key | 310 ms | 3 min ago |
Audit GitHub repos for security, compliance, and EU AI Act exposure from Claude or Cursor.
FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
Agent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.
Codebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.
Scan GitHub repos and profiles for malware before cloning — commit-pinned risk verdicts for agents
MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.
Pre-deploy security auditor for AI agent code — the risks generic SAST misses.
Answers built from our own checks of this server.