An agent can connect on its own if it already holds REPO_SECURITY_SCANNER_TOKEN.Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.
tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
n/a
stability.changes, stability.rug_pulltool list unknown
dependenciesn/a · weight 15
n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package
Tool list unknown · checked 2026-10-20 12:45 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
Official server.json
{
"name": "io.github.eltociear/repo-security-scanner",
"title": "Repo Security Scanner — Malicious Code & Supply Chain",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner",
"type": "streamable-http",
"headers": [
{
"name": "Authorization",
"isSecret": true,
"isRequired": true,
"description": "Apify API token, sent as `Bearer <token>`. The endpoint answers 401 without one. Runs are billed to YOUR Apify account at this Actor's pay-per-event price — there is no free tier here and no charge to us."
}
]
}
],
"version": "0.1.0",
"repository": {
"url": "https://github.com/eltociear/my-molt-agent",
"source": "github"
},
"websiteUrl": "https://apify.com/eltociear/mcp-server-security-scanner",
"description": "Audit GitHub repos for malicious and supply-chain code before you depend on them."
}