security-review-mcp

MCP serverMCP

MCP server for security code review: prompts, checklists, quick scans and persistent security reports

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"security-review-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availabilityno checks in window

30 days agotoday

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

![Security Review MCP: a finding reported in the code](https://raw.githubusercontent.com/cyr-ius/security-review-mcp/master/docs/assets/banner.svg) # Security Review MCP ![licence] ![Python] ![Angular] [![ci::status]][ci::github] [![pypi::version]][pypi::web] [![docker::pulls]][docker::hub] [![documentation::badge]][documentation::web] [licence]: https://img.shields.io/github/license/cyr-ius/security-review-mcp?label=Licence&color=blue [python]: https://img.shields.io/badge/Python-3.14%2B-blue?logo=python [angular]: https://img.shields.io/badge/Angular-22-blue?logo=angular [ci::status]: https://img.shields.io/github/actions/workflow/status/cyr-ius/security-review-mcp/tests.yml?branch=dev&label=Tests&color=blue&logo=github [ci::github]: https://github.com/cyr-ius/security-review-mcp/actions [pypi::version]: https://img.shields.io/pypi/v/security-review-mcp?color=blue&logo=pypi&logoColor=white [pypi::web]: https://pypi.org/project/security-review-mcp/ [docker::pulls]: https://img.shields.io/docker/pulls/cyrius44/security-review-mcp.svg?logo=docker [docker::hub]: https://hub.docker.com/r/cyrius44/security-review-mcp [documentation::badge]: https://img.shields.io/badge/Documentation-MkDocs-green?logo=materialformkdocs [documentation::web]: https://cyr-ius.github.io/security-review-mcp/ MCP server for **security-oriented code review** (vulnerabilities and misconfigurations), usable from VS Code / Copilot, Claude or a CI/CD agent. It provides review prompts, checklists, a pattern scan with focused Tree-sitter checks for request-to-SQL flows (Python, Java, Go, C#, Rust, Node.js), Angular DOM flows and unchecked message origins, an offline dependency analysis and a report database (SQLite or PostgreSQL) usable in pipelines. 📖 **Full documentation: <https://cyr-ius.github.io/security-review-mcp/>** 🇫🇷 [Version française](README.fr.md) ## Capabilities | | | |---|---| | **Prompts** | `security-review`, `api-security-review`, `configuration-review`, `codebase-review…

mcp

kind PyPI

name PyPI

repoUrl PyPI

summary PyPI

version PyPI

description PyPI

homepageUrl PyPI

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

PyPIsecurity-review-mcp

first seen 3 d ago · fetched 3 d agoopen ↗

Field history (7 recent events)

3 d ago · declared · summary → "MCP server for security code review: prompts, checklists, quick scans and persistent security reports"
3 d ago · declared · description → "![Security Review MCP: a finding reported in the code](https://raw.githubusercontent.com/cyr-ius/security-review-mcp/ma
3 d ago · declared · homepageUrl → "https://cyr-ius.github.io/security-review-mcp/"
3 d ago · declared · repoUrl → "https://github.com/cyr-ius/security-review-mcp"
3 d ago · declared · version → "2.0.0"
3 d ago · declared · protocols → ["mcp"]
3 d ago · observed · packageFacts → {"name":"security-review-mcp","registry":"pypi","publishedAt":"2026-10-24T11:30:02.824142Z","latestVersion":"2.0.0"}