2 months ago
Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with precise code remediation steps to resolve identified risks and improve security posture.
Overview
AI-native security scanner with 8 MCP tools for Claude
Code and Cursor.
Features
- URL Scan: DAST vulnerability detection with 5,000+ Nuclei templates
- GitHub Repo Scan: SAST (Semgrep) + Secrets (Gitleaks) + SCA (npm audit)
- AI Analysis: Root cause analysis with before/after fix code
- Auto-Fix PR: One-click GitHub PR creation from AI-analyzed vulnerabilities
Available Tools
scan_and_wait— Scan website and wait for resultsscan_url— Start async website scanget_scan_result— Get scan resultsscan_repo_and_wait— Scan GitHub repo and wait for resultsscan_repo— Start async repo scanget_repo_scan_result— Get repo scan resultsanalyze_code_security— Analyze code for vulnerabilities (37+ patterns)check_secrets— Detect exposed API keys and passwords (20+ patterns)
Install (Claude Code)
claude mcp add --transport http trust-security "https://t rust-mcp-144011703035.asia-northeast3.run.app/mcp"
Free to use. No signup required for basic scans.
Website: https://www.trust-scan.me
Server Config
{
"mcpServers": {
"trust-security": {
"type": "http",
"url": "https://trust-mcp-144011703035.asia-northeast3.run.app/mcp"
}
}
}