README Excerpt
Local **Model Context Protocol (MCP)** server that helps coding agents run defensive, remediation-focused secure code review of source repositories. - Focus (v1): TypeScript / Next.js, Swift / SwiftUI, and Expo / React Native - Transport: stdio only, running as a local subprocess of the agent client - License: [Apache-2.0](LICENSE)
Tools (15)
SECURE_MCP_ALLOWED_ROOTSSECURE_MCP_MAX_DEPTHSECURE_MCP_MAX_FILESSECURE_MCP_MAX_FILE_BYTESSECURE_MCP_MAX_TOTAL_BYTESnpxsecure_mcp_analyze_architecturesecure_mcp_analyze_injection_riskssecure_mcp_build_remediation_threat_modelsecure_mcp_check_authenticationsecure_mcp_get_audit_guidancesecure_mcp_get_knowledge_packsecure_mcp_list_project_structuresecure_mcp_produce_findingssecure_mcp_review_secrets