Opzyai Security Check runs on your own machine — the client starts it, so there is no endpoint to ping. 89 installs a week from npm.
Local-first security check for AI coding agents: secrets, .env exposure, git-history leaks, CVEs.
Today is the operative word: we check Opzyai Security Check every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp -- npx -y @opzyai/mcp
{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@opzyai/mcp"
]
}
}
}
[mcp_servers.mcp]
command = "npx"
args = ["-y", "@opzyai/mcp"]
{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@opzyai/mcp"
]
}
}
}
{
"servers": {
"mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@opzyai/mcp"
]
}
}
}
Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Domain security scanning for AI agents. A-F grades, 8 checks, fix snippets.
Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.
Local security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.
The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes
License check, outdated deps, security for AI agents
Answers built from our own checks of this server.