Tools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.
About
CodeInspectus, by Synvoya — a local-first security MCP server and CLI with CI policy, versioned exports, evidence bundles, history, baselines, and approval-gated agent workflows. Zero network egress at scan time.
FAQ
What is CodeInspectus?
Local-first MCP security scanner and CLI for AI-generated applications.
How do I install CodeInspectus?
Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.
Is CodeInspectus official?
No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.
How is the trust score calculated?
This listing scores 21 (Limited). The formula is published on the methodology page.