Securealy MCP Server

What the code does

We read the source, 1 d ago · rules 995398eba69f

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

  exec(cmd: string, args: string[], opts?: { maxBuffer?: number }): Promise<ExecResult>;

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add mcp -- npx -y securealy-mcp

{
  "mcpServers": {
    "mcp": {
      "command": "npx",
      "args": [
        "-y",
        "securealy-mcp"
      ]
    }
  }
}

[mcp_servers.mcp]
command = "npx"
args = ["-y", "securealy-mcp"]

{
  "mcpServers": {
    "mcp": {
      "command": "npx",
      "args": [
        "-y",
        "securealy-mcp"
      ]
    }
  }
}

{
  "servers": {
    "mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "securealy-mcp"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: SUPABASE_URL (Optional. Your Supabase project URL, read by check_rls. Sent only to that project), SUPABASE_SERVICE_KEY (Optional. Service role key for check_rls. Sent only to your Supabase project, never printed), SUPABASE_MGMT_TOKEN (Optional. Supabase management token for check_rls and the auth config check. Sent only to the Supabase management API), SUPABASE_PROJECT_REF (Optional. Supabase project ref, used with SUPABASE_MGMT_TOKEN), STRIPE_SECRET_KEY (Optional. Stripe secret key for check_stripe. Sent only to api.stripe.com, never printed), VERCEL_TOKEN (Optional. Project-scoped Vercel token for check_vercel_env. Sent only to api.vercel.com, never printed), VERCEL_PROJECT_ID (Optional. Vercel project id for check_vercel_env), SECUREALY_VERCEL_DECRYPT (Optional. Set to 1 to let check_vercel_env fetch decrypted variable values from api.vercel.com for the trailing-newline and live-key checks. Without it only names and targets are read and those checks are reported as skipped), SECUREALY_SUPABASE_HOST_OVERRIDE (Optional. Set to 1 to let check_rls send the service key to a self-hosted Supabase URL. Without it the key is sent only to an https URL on a Supabase-hosted domain), SECUREALY_SCAN_ROOTS (Optional. Folders, separated by the OS path delimiter, that scan_repo may read in addition to the server's working directory. Anything outside is refused), SECUREALY_NO_HISTORY (Optional. Set to 1 to stop the server appending each run (grade, score, counts, failing check ids; never evidence) to .securealy/history.json in its working directory), SECUREALY_TELEMETRY (Optional, off by default. Set to 1 to send an anonymous aggregate of each run (command, grade, counts, stack kind, failing check ids; no URL, host or evidence) to securealy.com).