vetkit runs on your own machine — the client starts it, so there is no endpoint to ping.
Audit repos for security, code quality and AI code risks; read findings and open fix PRs.
Nothing serious here today
Today is the operative word: we check vetkit every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp -e 'VETKIT_API_KEY=<VETKIT_API_KEY>' -- npx -y @vetkit/mcp{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@vetkit/mcp"
],
"env": {
"VETKIT_API_KEY": "<VETKIT_API_KEY>"
}
}
}
}[mcp_servers.mcp]
command = "npx"
args = ["-y", "@vetkit/mcp"]
env = { VETKIT_API_KEY = "<VETKIT_API_KEY>" }{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@vetkit/mcp"
],
"env": {
"VETKIT_API_KEY": "<VETKIT_API_KEY>"
}
}
}
}{
"servers": {
"mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@vetkit/mcp"
],
"env": {
"VETKIT_API_KEY": "<VETKIT_API_KEY>"
}
}
}
}Put your own value in place of
<VETKIT_API_KEY> (vetkit API key from app.vetkit.dev/settings/api-keys).
The author’s registry entry marks it as required.
Optional settings from the registry entry, left out of the block above:
VETKIT_ORG_ID (Organization ID, only needed when the key can access several organizations).
Alternatives to vetkit
same job, measured the same wayPre-deploy security auditor for AI agent code — the risks generic SAST misses.
Audit GitHub repos for security, compliance, and EU AI Act exposure from Claude or Cursor.
Local code-quality rules, findings, preview-first safe fixes and gate results for coding agents.
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.
FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality
Audit GitHub repos for malicious and supply-chain code before you depend on them.
vetkit — questions
Answers built from our own checks of this server.