How do I install Compuute MCP Security Scanner?

Copy the http config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Compuute MCP Security Scanner need an API key?

No required environment variable is listed on this record.

What transport does Compuute MCP Security Scanner use?

Compuute MCP Security Scanner is reached over HTTP.

When was Compuute MCP Security Scanner last checked?

Last checked 2026-11-09. Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.

Compuute MCP Security Scanner MCP server

Power your agent

Add this server

The publisher's own URL. Not a PlugMCP endpoint.

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Server URL

https://scan.compuute.se/mcp/

The Claude button above opens Claude with the name and URL filled in. You still confirm it there.

shClaude Code

1claude mcp add --transport http io.github.compuute-compuute-scan-api https://scan.compuute.se/mcp/

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.compuute-compuute-scan-api": {4      "command": "npx",5      "args": [6        "-y",7        "mcp-remote",8        "https://scan.compuute.se/mcp/"9      ]10    }11  }12}

claude_desktop_config.json

Remote · HTTPPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Live

Transport: http
Version: 0.3.0
Last checked

1 tool

Tools

tools/listVoice mode preview

Tool	What it does
scan_mcp_server	Scan a public GitHub MCP-server repository for security issues. Clones the repo (shallow, <60s, <200 MB), runs compuute-scan v0.6.2 in static analysis mode (no code execution from the target), and returns a structured report with severity counts, a 0-100 score, and the 10 most sever

compuute-scan-api

Scan-as-a-Service for MCP servers. HTTP + MCP wrapper around compuute-scan — the MCP-specific static security scanner. Designed for agent-callable consumption.

POST a public GitHub repo URL → get a structured security report scored against 38 MCP-specific rules across 8 languages (TS/JS, Python, Go, Rust, C#, Java, Kotlin).

Honesty note (read first): compuute-scan is a pattern-breadth detector, not an exploitability oracle. Historic false-positive rate after manual validation is ~90% on raw output (verified against modelcontextprotocol/servers: 138 raw findings → 13 confirmed). Every response carries a _disclaimer field stating this explicitly. Use findings as a triage queue, not as a list of confirmed vulnerabilities. See docs/FP-RATES.md for per-rule transparency.

Live at https://scan.compuute.se. Service version reported by /v1/health.

Endpoints

Core scan

Method	Path	Purpose	Auth
POST	`/v1/scan`	Scan a public GitHub MCP-server repo (free tier, rate-limited)	none
POST	`/v1/scan/pay`	Same as above via x402 micropayment ($0.10 USDC on Base L2)	`X-Payment` header

POST /v1/scan/pay with no body to read the payment requirements without paying — the request body is optional precisely so discovery probes reach the 402 instead of body validation. Verify with the Coinbase Agentic Wallet CLI:

npx awal x402 details https://scan.compuute.se/v1/scan/pay

Machine-readable contracts

Method	Path	Purpose
GET	`/openapi.json`	OpenAPI v3 spec with per-field descriptions
GET	`/docs`	Swagger UI for the OpenAPI spec

MCP server (live)

Endpoint	Tool	Transport
`/mcp/`	`scan_mcp_server(github_url)`	Streamable HTTP

Install in Claude Code: claude mcp add compuute-scan --transport http --url https://scan.compuute.se/mcp/

Discovery (`/.well-known/`)

Path	Format	Consumer
`/.well-known/agent-card.json`	A2A v1.0 Agent Card (canonical)	A2A protocol clients
`/.well-known/agent.json`	A2A Agent Card (alias)	pre-1.0 A2A clients/crawlers
`/.well-known/ai-plugin.json`	OpenAI plugin manifest	ChatGPT / OpenAI tools
`/.well-known/x402.json`	x402 payment manifest	Coinbase Agent.market crawlers, x402 aggregators
`/.well-known/x402`	Alias of `x402.json`	x402 probes without `.json` suffix
`/llms.txt`	markdown summary	LLM-driven agent-search crawlers (Exa, Perplexity-style) per llmstxt.org
`/robots.txt`	crawler policy	search engines
`/sitemap.xml`	URL index	search engines

Example

curl -X POST https://scan.compuute.se/v1/scan \
  -H 'Content-Type: application/json' \
  -H 'Idempotency-Key: 00000000-0000-0000-0000-000000000001' \
  -d '{"repo_url": "https://github.com/modelcontextprotocol/servers"}'

Response (truncated):

{
  "repo_url": "https://github.com/modelcontextprotocol/servers",
  "scanner": {"name": "compuute-scan", "version": "0.6.2", "layers_covered": ["L0", "L1"]},
  "summary": {"critical": 1, "high": 94, "medium": 22, "low": 0, "files_scanned": 77},
  "score": 0,
  "recommendation": "AVOID — 1 critical and 94 high finding(s)...",
  "top_findings": [...],
  "performance": {"clone_seconds": 1.2, "scan_seconds": 0.5, "repo_size_bytes": 41234},
  "_disclaimer": "PATTERN MATCH — compuute-scan is a static analyzer..."
}

Agent-shaped API features

Feature	How
Idempotent retries (24h cache)	`Idempotency-Key` header
HTTP cache	`ETag` + `Cache-Control: public, max-age=1800`
Conditional GET	`If-None-Match` → 304 Not Modified
Rate-limit headers	`X-RateLimit-Limit/Remaining/Reset`
Strict input validation	Pydantic `extra="forbid"`, GitHub-HTTPS-only
OWASP security headers	HSTS / X-Frame-Options / X-Content-Type-Options / CSP / Referrer-Policy / Permissions-Policy
OpenAPI for discovery	`GET /openapi.json` with descriptions on every field
MCP for agent discovery	`/mcp/` exposes `scan_mcp_server` tool
x402 for autonomous purchase	`/v1/scan/pay` returns 402 with USDC/Base payment requirements
Honest framing	Every response carries `_disclaimer` — pattern match, not exploitability claim

Pricing

Tier	Audience	Price
Open Source CLI	Indie devs, agent builders	$0 — `npx compuute-scan ./repo`
Hosted API (free)	Agent operators evaluating MCP servers	$0 — `POST /v1/scan`, rate-limited
Hosted API (x402)	Autonomous agents in Agent.market ecosystem	$0.10 USDC/scan — `POST /v1/scan/pay`
MCP Security Audit	Enterprises shipping MCP to production	$5K–$30K SoW
AI Procurement Risk Audit	CFO/CTO/CISO buying enterprise AI capacity	$5K–$15K SoW

Full breakdown with JSON-LD: https://compuute.se/pricing.

Local development

python3 -m venv venv && source venv/bin/activate
pip install -r requirements.txt
export COMPUUTE_SCAN_PATH=$HOME/compuute-scan/compuute-scan.js
uvicorn main:app --reload

x402 payment env vars (all optional locally; /v1/scan/pay returns 503 until the wallet is set):

Var	Purpose	Default
`X402_WALLET_ADDRESS`	Base L2 address receiving USDC	unset (x402 disabled)
`X402_NETWORK`	CAIP-2 network id — `eip155:8453` (Base mainnet) or `eip155:84532` (Base Sepolia)	`eip155:8453`
`X402_PRICE_USD`	Price per scan	`0.10`
`X402_FACILITATOR_URL`	Facilitator base URL	CDP facilitator (serves both networks)
`CDP_API_KEY_ID` / `CDP_API_KEY_SECRET`	CDP API key for facilitator verify/settle auth	unset (verify will be rejected)

Rehearsing payments on testnet

Set X402_NETWORK=eip155:84532 to quote prices in Base Sepolia USDC, which is free from a faucet. The CDP facilitator serves Sepolia too, so a testnet payment exercises the real verify/settle path and your real CDP API keys — without moving real money.

Asset address and EIP-712 domain are selected together per network: Base mainnet USDC signs as "USD Coin", Base Sepolia as "USDC". Mixing them fails every signature with an error that looks like a bad API key, which is why they live in one NETWORKS table rather than separate env vars.

Mainnet is the default and an unknown value falls back to it, so a typo can never silently ask real agents to pay in worthless testnet USDC. Check which mode is live with curl -s https://scan.compuute.se/v1/health — the x402 block reports network and testnet.

Tests

pytest tests/ -v
# 34 tests covering scan, x402, MCP, discovery, OpenAPI

Scripts

Script	What it does
`scripts/precheck.sh`	Start-of-session check: branch, working tree, tests, live state, next backlog item
`scripts/postcheck.sh`	End-of-session check: committer hygiene, tests, append to `docs/PROGRESS.md`
`scripts/status.sh`	30-second live-state check against scan.compuute.se (4 probes)
`scripts/sbom.sh`	Generate CycloneDX SBOM, optionally upload to a GitHub Release
`scripts/prospect-research.sh`	Pull qualified prospects from GitHub + Anthropic Registry, draft DM angles
`scripts/measure-tiers.sh`	T0/T1/T2 distribution snapshot per docs/agent-economy-strategy.md §5 — reach, engagement, conversion measured against Railway logs + Base RPC + GitHub stars

Architecture

api/services/scan.py — clone + sandbox + scan + parse. Pure functions.
api/services/x402_service.py — x402 v2 verify / settle on the official x402 SDK; CDP facilitator (Base mainnet) by default; Bazaar discovery extension in 402 bodies.
api/services/cdp_auth.py — minimal CDP API-key JWT auth for the facilitator (PyJWT + cryptography; avoids the full cdp-sdk).
api/serializers/scan_serializer.py — Pydantic models, strict validation.
api/routes/scan.py — HTTP layer for /v1/scan: idempotency, cache, ETag.
api/routes/scan_x402.py — HTTP layer for /v1/scan/pay.
api/routes/discovery.py — /.well-known/*, /robots.txt, /sitemap.xml.
api/mcp_server.py — FastMCP server exposing scan_mcp_server.
main.py — FastAPI wiring + middleware (security headers, CORS).

Bundled compuute-scan version is pinned in the Dockerfile (ARG COMPUUTE_SCAN_REF=v0.6.2).

Documentation

Doc	For
docs/agent-economy-strategy.md	The strategic doc — a16z-verified data, the 11-signal buyer-agent model, two-track strategy, 30-day pivot trigger. Read first if you're trying to understand the company.
docs/STRATEGY.md	Position, pricing tiers, roadmap, decision log
docs/ARCHITECTURE.md	Component diagram, request flow, threat model, deployment topology
docs/DEVELOPMENT.md	Local setup, layout, code style, common pitfalls — onboard a new dev in 30 min
docs/MONITORING.md	Endpoints to watch, automated checks, runbook for failures
docs/FP-RATES.md	Per-rule false-positive transparency
docs/scan-self-triage.md	What this scanner reports when run against its own code
docs/whitepaper/	MCP Security Methodology v1.0 (Markdown + PDF)
docs/case-studies/	Three anonymized engagement reports from the May 2026 batch
docs/advisories/	Public advisories under the `COMPUUTE-YYYY-NNN` numbering
docs/security/	Self-pentest reports (90-day cadence)

Security

Found a vulnerability? See SECURITY.md — email [email protected]. We follow a 90-day coordinated disclosure window.

License

MIT (matches compuute-scan).

Author

Compuute AB — [email protected]

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install Compuute MCP Security Scanner?

Does Compuute MCP Security Scanner need an API key?

What transport does Compuute MCP Security Scanner use?

When was Compuute MCP Security Scanner last checked?

Documentation

compuute-scan-api

Endpoints

Core scan

Machine-readable contracts

MCP server (live)

Discovery (/.well-known/)

Example

Agent-shaped API features

Pricing

Local development

Rehearsing payments on testnet

Tests

Scripts

Architecture

Documentation

Security

License

Author

Discovery (`/.well-known/`)