mcpbeat Sign in

Code Guard MCP Server

local only

Code Guard MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 87 installs a week from npm. Last commit 1 Nov 2026.

Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.

Installs per day peak 31 · avg 7 · +164% w/w
a month agotoday
87
Installs / week
npm · @mlawsonking/code-guard-mcp
1
Stars
0 open issues
1 Nov 2026
Last commit
2 releases in 90 days
MIT
License
JavaScript

What the code does

We read the source, 20 h ago · rules 995398eba69f

In the project's build, not in the package

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

    const r = spawnSync(comspec, ['/d', '/s', '/c', line], {
    out.innerHTML = head + "\n\n" + JSON.stringify(j,null,2);

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Nothing serious here today

Today is the operative word: we check Code Guard MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add code-guard-mcp -- npx -y @mlawsonking/code-guard-mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "code-guard-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@mlawsonking/code-guard-mcp"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.code-guard-mcp]
command = "npx"
args = ["-y", "@mlawsonking/code-guard-mcp"]
.cursor/mcp.json
{
  "mcpServers": {
    "code-guard-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@mlawsonking/code-guard-mcp"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "code-guard-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@mlawsonking/code-guard-mcp"
      ]
    }
  }
}

Alternatives to Code Guard MCP

same job, measured the same way
GuardianShield
by sparkvibe-io

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

84 installs/wk local only
AI Code Scanner
by guardbee

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

298 installs/wk local only
AI Code Scanner
by 4hmetuyar

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

local only
Sentrint
by sentrint

Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs

answering
MCP Codeaudit
by infoinlet-marketplace

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

51 installs/wk local only
CodeInspectus
by synvoya

Local-first MCP security scanner and CLI for AI-generated applications.

211 installs/wk local only
SafeWeave
by safeweave

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

140 installs/wk answering
valvur
by maverickhq

Offline security scanning for AI-generated code: seven open-source scanners in one MCP server.

1 286 installs/wk local only

Code Guard MCP — questions

Answers built from our own checks of this server.

Why is there no uptime for Code Guard MCP?
Code Guard MCP runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @mlawsonking/code-guard-mcp was installed 87 times last week.
How do I connect Code Guard MCP?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @mlawsonking/code-guard-mcp straight from npm; nothing to host, nothing to sign up for.
How many people use Code Guard MCP?
The npm package @mlawsonking/code-guard-mcp was installed 87 times in the last week. Week over week that is +164%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Code Guard MCP open source?
Yes — it is published under the MIT licence, written in JavaScript and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.