RugSnare MCP Server

What the code does

We read the source, 5 h ago · rules 995398eba69f

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

    const child = spawn(command, args, {

  const pkgDir = path.join(dir, server.name);

  { id: 'R03', weight: 3, test: /\.(ssh\/id_rsa|\.env|aws_secret|api_key|credentials?\.(json|yml|txt))/i, desc: 'response references credentials or private keys' },

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

d.text((x, 155), "and rm -rf", font=f_big, fill=RED)

    {"A02", 3, regexp.MustCompile(`(?i)\.(ssh|id_rsa|id_ed25519|aws_secret|api_key|\.env|credentials?)`)},

        document.getElementById('scanArchive').innerHTML = card('#fef2f2,#dc2626', 'Archive unavailable: ' + esc(a.error));

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add rugsnare -- npx -y rugsnare

{
  "mcpServers": {
    "rugsnare": {
      "command": "npx",
      "args": [
        "-y",
        "rugsnare"
      ]
    }
  }
}

[mcp_servers.rugsnare]
command = "npx"
args = ["-y", "rugsnare"]

{
  "mcpServers": {
    "rugsnare": {
      "command": "npx",
      "args": [
        "-y",
        "rugsnare"
      ]
    }
  }
}

{
  "servers": {
    "rugsnare": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "rugsnare"
      ]
    }
  }
}