AI Code Scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 563 installs a week from npm. Last commit 23 Oct 2026.
Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection
Today is the operative word: we check AI Code Scanner every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add ai-code-scanner -- npx -y @guardbee/mcp-ai-code-scanner
{
"mcpServers": {
"ai-code-scanner": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-ai-code-scanner"
]
}
}
}
[mcp_servers.ai-code-scanner]
command = "npx"
args = ["-y", "@guardbee/mcp-ai-code-scanner"]
{
"mcpServers": {
"ai-code-scanner": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-ai-code-scanner"
]
}
}
}
{
"servers": {
"ai-code-scanner": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-ai-code-scanner"
]
}
}
}
Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection
Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.
AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
Scan pasted Stripe webhook/checkout code for common integration bugs.
Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM.
Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.
Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.
Answers built from our own checks of this server.