Repo Security Scanner — Malicious Code & Supply Chain

Name: Repo Security Scanner — Malicious Code & Supply Chain MCP Server
Author: Repo Security Scanner — Malicious Code & Supply Chain

remote

Audit GitHub repos for malicious and supply-chain code before you depend on them.

Getting Started

npx @getmcp/cli add io.github.eltociear/repo-security-scanner

Requires Node.js 18+. Community-contributed server. Review source before installing.

Claude Desktopguide →Vscodeguide →Cursorguide →Windsurfguide →

Required Environment Variables

Authorization
Apify API token, sent as `Bearer <token>`. The endpoint answers 401 without one. Runs are billed to YOUR Apify account at this Actor's pay-per-event price — there is no free tier here and no charge to us.

Configuration

Config file: ~/Library/Application Support/Claude/claude_desktop_config.json

JSON

{
  "mcpServers": {
    "io.github.eltociear/repo-security-scanner": {
      "url": "https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner",
      "transport": "streamable-http",
      "headers": {
        "Authorization": ""
      }
    }
  }
}

Claude Desktop MCP documentation