
Code Pattern Risk Scanner
Let your coding agent scan repos for risky code patterns before merge or deploy without running a local security CLI.
Overview
io.github.lazymac2x/code-pattern-risk-scanner is an MCP server for the Ship phase that lets agents scan code for risky patterns over a remote Cloudflare Workers endpoint.
What is this MCP server?
- Remote MCP server on Cloudflare Workers via streamable HTTP at api.lazy-mac.com
- Exposes code-pattern-risk-scanner tools for agent-driven repository review
- Version 1.0.0 with open GitHub source (code-pattern-risk-scanner-api)
- No local install beyond registering the MCP remote in Claude Code or Cursor
- Fits pre-release and PR-review workflows alongside human code review
- Server version 1.0.0 per server.schema.json metadata
- Single streamable-http remote URL on api.lazy-mac.com
- Hosted on Cloudflare Workers; source on GitHub (code-pattern-risk-scanner-api)
What problem does it solve?
You cannot easily ask your agent to run a consistent pattern-risk pass across the repo without custom scripts or leaving the IDE.
Who is it for?
Indie builders who want agent-triggered pattern-risk checks during PR review or pre-deploy hardening without maintaining a local scanner.
Skip if: Teams that need certified SAST, license compliance, or air-gapped scanning with no third-party HTTP remotes.
What do I get? / Deliverables
After you register the remote MCP URL, your agent can invoke scanner tools during review and security prep with one configured connection.
- Agent-callable MCP tools for pattern-risk scanning
- Repeatable remote security checks without local scanner install
- Documented v1.0.0 remote endpoint for team MCP configs
Recommended MCP Servers
Journey fit
How it compares
MCP security integration on Workers, not a bundled agent skill or full IDE plugin suite.
Common Questions / FAQ
Who is code-pattern-risk-scanner for?
Solo and small-team builders using Claude Code, Cursor, or other MCP clients who want remote pattern-risk tooling during Ship and security workflows.
When should I use code-pattern-risk-scanner?
Use it before merging risky changes, after large refactors, or when an agent is doing a security pass before you ship to production.
How do I add code-pattern-risk-scanner to my agent?
Add the streamable-http remote https://api.lazy-mac.com/code-pattern-risk-scanner/mcp in your MCP client config per Claude Code or Cursor remote-server docs.