Flare runs on your own machine — the client starts it, so there is no endpoint to ping. 51 installs a week from npm.
Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys
Today is the operative word: we check Flare every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add security -- npx -y flarehq-mcp
{
"mcpServers": {
"security": {
"args": [
"-y",
"flarehq-mcp"
],
"command": "npx"
}
}
}
[mcp_servers.security]
command = "npx"
args = ["-y", "flarehq-mcp"]
{
"mcpServers": {
"security": {
"args": [
"-y",
"flarehq-mcp"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"security": {
"args": [
"-y",
"flarehq-mcp"
],
"command": "npx"
}
}
}
Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.
Security scanning for websites, public repositories, and Open CLAW skills.
Secure MCP runtime server for scanning and autofixing code issues
Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes
Encrypted store for API keys and database URLs your code needs. Use them without reading them.
Answers built from our own checks of this server.