Arcwall Security

by rom-baro

265 downloads

Not rated

GitHub

About

Security scanning for Claude Code, Cursor, Windsurf. Detects secrets, scans MCP configs, generates threat models.

Details

Author: rom-baro
Downloads: 265
Categories: Developer Tools, Security

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below

Plugin Name Arcwall Security

Command (node, npx, python, etc.)

Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

From the repository

Get a free API key at https://arcwall.io, then add the server configuration to your AI tool’s MCP config file (e.g., ~/.claude/mcp.json for Claude Code) with the command npx @arcwall/mcp-server and the ARCWALL_API_KEY environment variable. Restart the AI tool to enable scanning commands.

`arcwall_scan_secrets`

Scan workspace for hardcoded API keys, passwords, private keys, tokens, and credentials. Run before committing or deploying.

`arcwall_scan_mcp`

Scan MCP server configurations for prompt injection, excessive permissions, and unverified server origins. Scans .cursor/mcp.json, .vscode/mcp.json, .claude/mcp.json and other MCP config files.

`arcwall_scan_agent_instructions`

Scan agent instruction files for security vulnerabilities. Covers CLAUDE.md, .cursorrules, .windsurfrules, AGENTS.md and other formats. Detects prompt injection, sensitive data, and missing guardrails.

`arcwall_threat_model`

Generate a STRIDE threat model for the current codebase. Identifies trust boundary gaps, authorization issues, data flow exposures, and architectural risks. Results saved to Arcwall dashboard.

`arcwall_check_prompt`

Test a system prompt for injection vulnerabilities, jailbreak susceptibility, missing guardrails, and excessive agency. Include test messages to check multi-turn vulnerabilities.

`arcwall_pre_commit`

Security check before committing. Scans staged files for secrets and checks MCP configs. Returns CLEAR TO COMMIT or BLOCKED with issues to fix.

`arcwall_scan_dependencies`

Check dependencies for known CVEs. Scans package.json for vulnerable packages with safe version recommendations.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "arcwall security": {
            "arcwall": {
                "command": "npx",
                "args": [
                    "@arcwall/mcp-server"
                ],
                "env": {
                    "ARCWALL_API_KEY": "your-key-here"
                }
            }
        }
    }
}

McpServers

{
    "arcwall": {
        "command": "npx",
        "args": [
            "@arcwall/mcp-server"
        ],
        "env": {
            "ARCWALL_API_KEY": "your-key-here"
        }
    }
}

@arcwall/mcp-server

Security scanning for Claude Code, Cursor, Windsurf,
and any MCP-compatible AI coding tool.

Setup

1. Get your free API key at https://arcwall.io

2. Add to your MCP config:

Claude Code (~/.claude/mcp.json):

{

  "mcpServers": {

    "arcwall": {

      "command": "npx",

      "args": ["@arcwall/mcp-server"],

      "env": { "ARCWALL_API_KEY": "your-key-here" }

    }

  }

}

Cursor (.cursor/mcp.json): Same config.
Windsurf: Add via MCP settings panel.

3. Restart your AI tool — Arcwall is ready.

Tools

- arcwall_scan_secrets — hardcoded credentials
- arcwall_scan_mcp — MCP config vulnerabilities
- arcwall_scan_agent_instructions — CLAUDE.md, .cursorrules security
- arcwall_threat_model — STRIDE analysis
- arcwall_check_prompt — prompt injection testing
- arcwall_pre_commit — pre-commit security check
- arcwall_scan_dependencies — known CVEs in packages

Usage

Ask your AI assistant:
- "Scan this repo for secrets"
- "Check my MCP configs for vulnerabilities"
- "Is my CLAUDE.md safe?"
- "Generate a threat model for this project"
- "Run a security check before I commit"
- "Are there vulnerable packages in this project?"

Links

- Website: https://arcwall.io
- Dashboard: https://arcwall.io/app.html
- Docs: https://arcwall.io/docs.html
- GitHub: https://github.com/rom-baro/arcwall-mcp
- Support: hello@arcwall.io

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

arcwall_scan_secrets

arcwall_scan_mcp

arcwall_scan_agent_instructions

arcwall_threat_model

arcwall_check_prompt

arcwall_pre_commit

arcwall_scan_dependencies

Claude Desktop / Cursor

McpServers

@arcwall/mcp-server

Setup

Tools

Usage

Links

Install

More like this

Sentry

Github

Git

GitLab

Context 7

Playwright

`arcwall_scan_secrets`

`arcwall_scan_mcp`

`arcwall_scan_agent_instructions`

`arcwall_threat_model`

`arcwall_check_prompt`

`arcwall_pre_commit`

`arcwall_scan_dependencies`