halyx

ham7a311/halyx

★ 0 stars TypeScript Security Updated today

Local MCP security reviewer for AI coding agents — catches NEXT_PUBLIC_ secret leaks, missing RLS, unauth server actions, and verbose error leaks

View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "halyx": {
      "command": "npx",
      "args": [
        "-y",
        "ham7a311/halyx"
      ]
    }
  }
}

README Excerpt

A security reviewer for AI coding agents. ```bash npx halyx ``` That starts the local MCP server (stdio). Wire it into Cursor with the config below — no signup, nothing leaves your machine. Synthetic fixture (not copied from a Day 0 corpus repo) — the pattern halyx is built to catch: ```ts // lib/supabase.ts

Tools (8)

client_exposed_secretexplain_findingrls_disabledscan_diffscan_filescan_projectunauth_server_actionverbose_error_leak

Topics

ai-securityclaude-codeclicursordev-toolsdeveloper-toolsmcpnextjssecret-detectionsecret-keyssecret-scanningsecuritystatic-analysissupabasetypescript

halyx

Quick Install

README Excerpt

Tools (8)

Topics

Related Security Servers