mcpbeat Sign in

AI Code Scanner MCP Server

local only

AI Code Scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 563 installs a week from npm. Last commit 23 Oct 2026.

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

Installs per day peak 534 · avg 42 · +1273% w/w
a month agotoday
563
Installs / week
npm · @guardbee/mcp-ai-code-scanner
1
Stars
14 open issues
23 Oct 2026
Last commit
11 releases in 90 days
MIT
License
TypeScript

Nothing serious here today

Today is the operative word: we check AI Code Scanner every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add ai-code-scanner -- npx -y @guardbee/mcp-ai-code-scanner
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "ai-code-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-ai-code-scanner"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.ai-code-scanner]
command = "npx"
args = ["-y", "@guardbee/mcp-ai-code-scanner"]
.cursor/mcp.json
{
  "mcpServers": {
    "ai-code-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-ai-code-scanner"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "ai-code-scanner": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-ai-code-scanner"
      ]
    }
  }
}

Alternatives to AI Code Scanner

same job, measured the same way
AI Code Scanner
by 4hmetuyar

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

local only
Code Guard MCP
by mlawsonking

Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.

33 installs/wk local only
GuardianShield
by sparkvibe-io

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

83 installs/wk local only
SecurityScan
by apisecurityscan

Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.

8 tools answering
Stripecheckup
by vercel-stripecheckup

Scan pasted Stripe webhook/checkout code for common integration bugs.

1 tools answering
Safeprompt
by safeprompt

Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM.

12 installs/wk local only
AI Scanner
by aakashbhardwaj27

Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.

38 installs/wk local only
LeakRank Guard
by prototeemo

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

21 installs/wk local only

AI Code Scanner — questions

Answers built from our own checks of this server.

Why is there no uptime for AI Code Scanner?
AI Code Scanner runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @guardbee/mcp-ai-code-scanner was installed 563 times last week.
How do I connect AI Code Scanner?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @guardbee/mcp-ai-code-scanner straight from npm; nothing to host, nothing to sign up for.
How many people use AI Code Scanner?
The npm package @guardbee/mcp-ai-code-scanner was installed 563 times in the last week. Week over week that is +1273%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is AI Code Scanner open source?
Yes — it is published under the MIT licence, written in TypeScript, 1 stars on GitHub and 14 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.