Skip to contentValca MCP Server — Install for Claude, Cursor & VS Code | MCPpediaVValca MCP Server
Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.
55FairInstall
~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"pranlabs-valca": {
"command": "uvx",
"args": [
"valca"
]
}
}
}
Environment
This server does not declare environment variables.
Related servers
XReal-time data-breach lookup and analytics for emails and domains from XposedOrNot.
Tools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.
About
Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.
FAQ
- What is Valca?
- Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.
- How do I install Valca?
- Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.
- Is Valca official?
- No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.
- How is the trust score calculated?
- This listing scores 55 (Fair). The formula is published on the methodology page.
Reviews
0 published · no average
Sign in to review this server.
Good
GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more.

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
NReact Native and Expo health check: upgrade blockers, store rules, crash risks, security findings
FFederated messaging with your fmsg hosting provider. Connect with OAuth or an API key.
SDeterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.