How do I install AI Scanner?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does AI Scanner need an API key?

No required environment variable is listed on this record.

What transport does AI Scanner use?

AI Scanner runs locally over stdio.

When was AI Scanner last checked?

Last checked 2026-11-08. Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.

AI Scanner MCP server

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Add to Cursor Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Local command

npx -y [email protected]

Claude Code has no install link for a local command. Copy the command below and run it in a terminal.

shClaude Code

1claude mcp add io.github.aakashbhardwaj27-ai-scanner -- npx -y ai-scanner-mcp@1.0.3

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.aakashbhardwaj27-ai-scanner": {4      "command": "npx",5      "args": [6        "-y",7        "[email protected]"8      ]9    }10  }11}

claude_desktop_config.json

Local · npmPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Local

Transport: stdio
Version: 1.0.6
Last checked

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

Tools

Tool	Description
`scan_directory`	Full scan — LLM SDKs, AI frameworks, exposed tokens, and hardcoded secrets with severity levels
`check_secrets`	Security check — pass/fail scan for exposed credentials only. Perfect for pre-commit checks
`ai_inventory`	AI stack overview — which SDKs, frameworks, models, and API endpoints are used (no secret detection)

Setup

Claude Code

claude mcp add ai-scanner npx ai-scanner-mcp

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "ai-scanner": {
      "command": "npx",
      "args": ["ai-scanner-mcp"]
    }
  }
}

Config file location:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json

Cursor

Add to .cursor/mcp.json in your project:

{
  "mcpServers": {
    "ai-scanner": {
      "command": "npx",
      "args": ["ai-scanner-mcp"]
    }
  }
}

Windsurf

Add to ~/.windsurf/mcp.json:

{
  "mcpServers": {
    "ai-scanner": {
      "command": "npx",
      "args": ["ai-scanner-mcp"]
    }
  }
}

Example Usage

Once connected, you can ask your AI agent:

"Scan this project for any exposed API keys"
"Check if there are any hardcoded secrets before I commit"
"What AI SDKs and frameworks does this codebase use?"
"Run a security scan on ./src and tell me if it's safe to push"
"Give me an AI inventory of this project"

Tool Details

scan_directory

Full scan with all detection categories. Parameters:

Parameter	Type	Default	Description
`directory`	string	required	Path to scan
`ai_only`	boolean	`false`	Skip generic secrets (Stripe, GitHub, etc.)
`scan_env`	boolean	`false`	Include .env files
`include_endpoints`	boolean	`true`	Detect LLM API endpoint URLs
`include_models`	boolean	`true`	Detect model name references

check_secrets

Security-focused pass/fail check. Parameters:

Parameter	Type	Default	Description
`directory`	string	required	Path to scan
`ai_only`	boolean	`false`	Only check AI tokens
`scan_env`	boolean	`false`	Include .env files

ai_inventory

AI stack awareness (no secret detection). Parameters:

Parameter	Type	Default	Description
`directory`	string	required	Path to scan

Detection Coverage

AI Tokens (20+) — OpenAI, Anthropic, Google, AWS, HuggingFace, Groq, Replicate, and more
Generic Secrets (59) — Stripe, Twilio, GitHub, Slack, Discord, database URIs, private keys, JWTs
LLM SDKs (23) — OpenAI, Anthropic, Google Gemini, LiteLLM, AWS Bedrock, and more
AI Frameworks (24) — LangChain, LlamaIndex, CrewAI, AutoGen, DSPy, Vercel AI SDK, and more
145 total detection patterns

License

MIT

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install AI Scanner?

Does AI Scanner need an API key?

What transport does AI Scanner use?

When was AI Scanner last checked?

Documentation

Tools

Setup

Claude Code

Claude Desktop

Cursor

Windsurf

Example Usage

Tool Details

scan_directory

check_secrets

ai_inventory

Detection Coverage

License