CodeVulnerability
Let your agent run OWASP-oriented threat scans on the codebase to catch safety leaks before release.
Overview
CodeVulnerability is a MCP server for the Ship phase that provides OWASP-oriented codebase threat scanning for coding agents via remote SSE.
What is this MCP server?
- CodeVulnerability MCP audits codebases for safety leaks with OWASP-oriented threat scanning
- Remote SSE endpoint at codevulnerability-mcp.vercel.app/api/mcp
- Security & Pentesting category fit for pre-release appsec passes
- Premium remote access may require EIP-3009 payment-signature header
- MCP security scanner integration—not a hosted WAF or dependency-only bot
- MCP server schema 2025-12-11
- Server version 1.0.0
- Single remote SSE endpoint (codevulnerability-mcp.vercel.app)
What problem does it solve?
Shipping fast with AI assistance makes it easy to miss injection, auth, and data-handling flaws until someone else finds them.
Who is it for?
Indie developers preparing a first production release who want agent-assisted security passes on their own source tree.
Skip if: Organizations needing formal pentests, compliance sign-off, or air-gapped scanning with no remote MCP.
What do I get? / Deliverables
After you add CodeVulnerability to your MCP client, your agent can trigger OWASP-style audits and surface safety issues to fix before launch.
- OWASP-oriented threat and safety findings returned through MCP tools
- Prioritized security fix backlog for pre-ship hardening
- Configured CodeVulnerability remote server in your agent setup
Recommended MCP Servers
Journey fit
How it compares
OWASP-oriented codebase audit MCP, not infrastructure load simulation or catalog structuring.
Common Questions / FAQ
Who is CodeVulnerability for?
Solo builders and small teams using AI coding agents who need MCP-connected OWASP-style scanning on application code before ship.
When should I use CodeVulnerability?
Use it in the ship phase during security work—after core features are built and before production deploy—to catch safety leaks early.
How do I add CodeVulnerability to my agent?
Install the remote MCP server at https://codevulnerability-mcp.vercel.app/api/mcp with SSE transport and configure the payment-signature secret if premium settlement is required.