Inkog runs on your own machine — the client starts it, so there is no endpoint to ping. 127 installs a week from npm. Last commit 16 Sep 2026.
Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
Today is the operative word: we check Inkog every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add inkog -e 'INKOG_API_KEY=<INKOG_API_KEY>' -- npx -y @inkog-io/mcp
{
"mcpServers": {
"inkog": {
"command": "npx",
"args": [
"-y",
"@inkog-io/mcp"
],
"env": {
"INKOG_API_KEY": "<INKOG_API_KEY>"
}
}
}
}
[mcp_servers.inkog]
command = "npx"
args = ["-y", "@inkog-io/mcp"]
env = { INKOG_API_KEY = "<INKOG_API_KEY>" }
{
"mcpServers": {
"inkog": {
"command": "npx",
"args": [
"-y",
"@inkog-io/mcp"
],
"env": {
"INKOG_API_KEY": "<INKOG_API_KEY>"
}
}
}
}
{
"servers": {
"inkog": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@inkog-io/mcp"
],
"env": {
"INKOG_API_KEY": "<INKOG_API_KEY>"
}
}
}
}
Put your own value in place of
<INKOG_API_KEY> (Your Inkog API key from https://app.inkog.io (free tier available)).
The author’s registry entry marks it as required.
Runtime proxy for MCP security, cost governance & audit
Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
BridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...
Scan installed MCP servers for security vulnerabilities with 16 detection engines.
Security scanner for AI agent skills and MCP servers
FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
Answers built from our own checks of this server.