io.github.andysalvo/supership-scan

supership-scan

Predeploy security scanner. 80+ patterns. Runs locally. Optional x402 attestation.

76/wk GitHub npm

1 open CVE

No license

Maintained

Last commit 83d ago

Works with most clients

Transport: stdio, sse

0 tools

Grade F

MCPpedia last refreshed this data 21h ago

Edit this pageView history

io.github.andysalvo/supership-scan is an MCP server that predeploy security scanner. 80+ patterns. Runs locally. Optional x402 attestation. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 48/100 on MCPpedia's security, maintenance and efficiency rubric.

DevOps Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "supership": {
      "args": [
        "-y",
        "-p",
        "supership-scan",
        "supership-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-andysalvo-supership-scan)](https://mcppedia.org/s/io-github-andysalvo-supership-scan)

Read me

What io.github.andysalvo/supership-scan does

Predeploy security scanner for the agent economy. Built by Crest Deployment Systems.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'supership-scan' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

48/100across 5 weighted dimensions

How we score →

0255075100

−52

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 open

MAL-2026-4675info

Malicious code in supership-scan (npm)

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (0aebde5ba55a72b6d4c6917ccf22db1427d434fed04cecc22dd16844e2d39033) The package advertises itself as a local-only static analyzer (README: "Runs locally. Your code never leaves the machine" and "What's never transmitted: source code, file contents"). The actual implementation in src/cli.mjs and src/server.mjs walks the target directory, reads file contents — explicitly including any file whose name starts wi

source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.andysalvo/supership-scan safe to use?: io.github.andysalvo/supership-scan has 1 known CVE tracked by MCPpedia. You can verify these on OSV.dev by searching for "supership-scan". Review the Security section above for details before installing.
How do I install io.github.andysalvo/supership-scan?: io.github.andysalvo/supership-scan supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.andysalvo/supership-scan?: io.github.andysalvo/supership-scan is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is io.github.andysalvo/supership-scan actively maintained?: io.github.andysalvo/supership-scan is recently maintained — last commit was 83 days ago.

Similar servers

Others in devops / security

View all →

Mcp Gitlab96

MCP server for using the GitLab API

1.9k 12

io.github.KryptosAI/mcp-observatory94

Regression testing for MCP servers. Checks capabilities, invokes tools, detects schema drift.

158 4

Komodo MCP Server93

MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI

19 11

Tachyon93

💫 Tachyon MCP Runtime for Java and Kotlin - Model Context Protocol (MCP) server with Streamable HTTP, native Netty transports, tools, tasks, resources, prompts, completions, resumable sessions, and stateless deployment support.

30 6

MCP Security Weekly

Get CVE alerts and security updates for io.github.andysalvo/supership-scan and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Frequently Asked Questions

Is io.github.andysalvo/supership-scan safe to use?

io.github.andysalvo/supership-scan has 1 known CVE tracked by MCPpedia. You can verify these on OSV.dev by searching for "supership-scan". Review the Security section above for details before installing.

How do I install io.github.andysalvo/supership-scan?

io.github.andysalvo/supership-scan supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.andysalvo/supership-scan?

io.github.andysalvo/supership-scan is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is io.github.andysalvo/supership-scan actively maintained?

io.github.andysalvo/supership-scan is recently maintained — last commit was 83 days ago.