Keep Me Secure MCP Server

by robertkeus Your server? Claim it

answering

Keep Me Secure is answering right now. Last checked 5 min ago. It exposes 4 tools. Last commit 6 Nov 2026.

Tells your coding agent whether your installed packages need patching, with advice on what to do.

Uptime history 65 hours of history

65 hours agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

249 ms

Response time

average over 24h

Stars

last commit 6 Nov 2026

What changed 5

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 6 November 2026. No other catalogue keeps this.

6 Nov a tool changed version3 times that day

6 Nov a tool appeared check_runtime

6 Nov a tool description was rewritten check_packages

and 2 more, back to 6 November 2026

What the code does

We read the source, 1 d ago · tools taken from the live server · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Touches key and credential files src/upkeep.ts:51

    setting: "Add min-release-age=2 to .npmrc. The value is in days, and it needs npm 11.10 or newer.",

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 5 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add keep-me-secure-mcp --transport http https://mcp.keepmesecure.dev/mcp

Settings → Connectors → Add custom connector, then paste this address

https://mcp.keepmesecure.dev/mcp

~/.codex/config.toml

[mcp_servers.keep-me-secure-mcp]
url = "https://mcp.keepmesecure.dev/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "keep-me-secure-mcp": {
      "url": "https://mcp.keepmesecure.dev/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "keep-me-secure-mcp": {
      "type": "http",
      "url": "https://mcp.keepmesecure.dev/mcp"
    }
  }
}

Available tools 4

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

package

check_package

Checks one exact package version against public security advisories.

packages

check_packages

Use for questions like 'is my stack secure?' or 'do we have vulnerable packages?'. Checks a list of exact installed package versions against public security advisories. Read them from the project's lockfiles, including transitive packages. Up to 500 per call; call again for more. verdict is yes, no or unknown; unknown means the check was incomplete, so never report it as safe. Does not cover OS packages, Docker base images or your own code. Use check_runtime for Node.js and PHP versions.

platform

check_platform

Lists known security incidents at hosting, deployment and AI platforms, with what to do and a link to the source. Use when the user asks about a platform or breach. Omit name to list all. The list is curated and not complete, so no result doesn't mean a platform is safe.

runtime

check_runtime

Checks a Node.js or PHP version against known security flaws in the runtime itself. Use with the exact version, for example from `node --version` or `php --version`. The list is curated, so no findings doesn't prove a version is safe.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.keepmesecure.dev/mcp	streamable-http	answering	275 ms	5 min ago

Alternatives to Keep Me Secure

same job, measured the same way

Security Engineer

by guardbee

Fix GuardBee AI Security Engineer findings in your repo with your coding agent, then verify

local only

pkgxray

by adamsjack711-ux

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

84 installs/wk local only

MateMCP

by vrassouli

Your agent hit a limit? Keep working. MateMCP securely connects AI chats to your computer via MCP.

answering

Conning

by eranyonai

Run commands on your remote test machines over SSH without the agent ever seeing a secret.

448 installs/wk local only

Fulcra

by fulcradynamics

Use your Fulcra secure context lake to collaborate with other agents, read and write data, and more

2 072 installs/wk answering

Golem Security

by golem

Threat-intelligence verdicts on a URL, domain or IP before a coding agent connects to it.

answering

seekrit — secrets for agents

by seekrit

Encrypted store for API keys and database URLs your code needs. Use them without reading them.

40 tools answering

WolfSMS

by usewolfsms

Let AI agents securely read the text messages on your phone.

answering

Keep Me Secure — questions

Answers built from our own checks of this server.

What can Keep Me Secure do?

It exposes 4 tools, read directly from the server on our last check. Among them: check_package, check_packages, check_platform, check_runtime. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Keep Me Secure working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 249 ms. The bar chart above shows every period we have measured.

How do I connect Keep Me Secure?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Keep Me Secure need an API key?

No. Keep Me Secure completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 4 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Keep Me Secure?

It answers our handshake in 249 ms on average, which is faster than 54% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Keep Me Secure open source?

The code is open source: it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The licence covers the code in the repository, not the hosted service at mcp.keepmesecure.dev, which runs on its operator's own terms.