MCPs › Security › Compuute MCP Security Scanner

Compuute MCP Security Scanner● live

Static security scanner for MCP servers. POST a public GitHub URL, get severity counts, a score, and the top findings with file+line back. 37 rules across TypeScript, JavaScript, Python, Go, Rust, C#, Java, and Kotlin — every language with an official MCP SDK. Detects argument injection for npx/uvx/pipx/pnpx runner binaries (CWE-88), known CVEs in 40+ top packages, and the usual L0 discovery (transport, tool inventory, dependency pinning). This is a pattern detector, not an exploitability oracle. Around 90% raw false-positive rate on unfiltered output — triage is on you, and the response says so explicitly. POST /v1/scan is free with no API key. POST /v1/scan/pay charges $0.10 USDC per scan via x402 on Base. Manual L2-L4 audits at compuute.se/audit when you need dataflow review. Wraps compuute-scan (MIT, zero deps). Per-rule false-positive rates and the methodology paper live in the repo.

listed on

Smithery

Not monetized yet

Turn Compuute MCP Security Scanner’s tool calls into revenue: one disclosed sponsored slot, 70% revenue share, fail-open by design.

Add monetization →

Install Compuute MCP Security Scanner

For anyone using Compuute MCP Security Scanner — no Lulu account needed

npx -y @smithery/cli@latest install daniel-abbay/compuute-scan-api --client claude

weather-mcp — free forecasts, rendered as native cards

Real-time weather for any city, built on the lulu-ads widget gallery. First-party, free forever.

View server →

FAQ

How do I install Compuute MCP Security Scanner in Claude Code?

Compuute MCP Security Scanner installs from source — follow the repository README.

Which registries list Compuute MCP Security Scanner?

smithery

What is Compuute MCP Security Scanner's trust score?

22 out of 100, computed from cross-registry traction signals (installs, stars, registry presence) — never influenced by sponsorship.

Similar servers

Eemblem-mcp29# EmblemAI MCP EmblemAI is a hosted Model Context Protocol server that gives AI agents a full-featured crypto wallet plus **200+ tools** for trading, DeFi, NFTs, and on-chain analytics across **7 blockchains**: - **Bitcoin** — native BTC, Ordinals inscriptions, Runes, BRC-20, Stamps / SRC-20, Alkanes, rare sats - **Solana** — SOL + SPL tokens, Jupiter-routed swaps, Solana memecoin discovery, RugCheck - **Ethereum** — native ETH, ERC-20, ERC-721 / ERC-1155 NFTs, ETH swaps - **Base** — native ETH on L2, ERC-20, NFTs, Clanker discovery - **BSC** — native BNB, BEP-20, FourMeme bonding-curve discovery and trading - **Polygon** — native MATIC, ERC-20, swaps - **Hedera** — HBAR, HTS tokens, MemeJob discovery and trading Plus prediction markets via **Polymarket**, market research, conditional orders (limit / stop-loss / take-profit) on supported chains, and on-chain analytics. ## Quick start The Smithery deployment connects directly to the hosted EmblemAI MCP at `https://emblemvault.ai/api/mcp`. You only need an API key: 1. Sign in at [emblemvault.ai](https://emblemvault.ai). 2. Open **Settings → Vault Access Key** and copy your key. 3. Paste it as the `apiKey` parameter in the Smithery connection form. Browsing tools (`tools/list`) works anonymously, so you can inspect the catalog before authenticating. ## Auth modes | Mode | When to use | Scope | | --- | --- | --- | | **API key** (`x-api-key`) | Unattended agents, cron jobs, server-to-server, any workflow that mints tokens or sends transactions | Full read + write, no expiry until revoked | | **OAuth 2.0 + PKCE** (RFC 7591 Dynamic Client Registration) | Interactive sessions where a human can click a browser popup | Read-only `vault:read`, short-lived JWT | | **x402 micropayments** | Pay-per-call across the public catalog without an account | Per-tool-call USDC settlement | The Smithery deployment defaults to the API-key path, configured via the `apiKey` parameter (sent to the upstream as the `x-api-key` header). ## Enabling transactional tools State-changing tools (sends, swaps, mints, conditional-trade creates) are hidden by default. Opt in by setting the `enableTransactions` parameter to `enabled` — Smithery's gateway forwards it as the `x-mcp-transactions: enabled` header. Transactional tools then surface in `tools/list` with a `-transaction` suffix, which makes them easy to allow- or block-list with wildcard rules in the host client. Note: transactional tools also require API-key auth — OAuth bearers do not pass the `vault:write` gate. ## Specialized listings (filter) The full 200-tool surface is wide. For Bitcoin-only, Solana-only, or any other curated slice, use the stdio bridge `@emblemvault/mcp` (npm) and set: ``` EMBLEMAI_TOOLS_FILTER="bitcoin*,*Rune*,*Inscription*" ``` The bridge applies the glob filter to both `tools/list` and `tools/call`, exposing only the matching subset to the host LLM. The hosted Smithery deployment always exposes the full catalog; the filter is a stdio-side feature. ## Categories Trading · DeFi · NFTs · Wallet · Bitcoin Ordinals · Polymarket prediction markets · Cross-chain · Market analytics · Research / web search. ## Links - Hosted MCP: `https://emblemvault.ai/api/mcp` - Stdio bridge: `@emblemvault/mcp` ([github](https://github.com/EmblemCompany/Agent-skills/tree/main/mcp-bridge)) - Repo: [EmblemCompany/Agent-skills](https://github.com/EmblemCompany/Agent-skills) - Web app: [emblemvault.ai](https://emblemvault.ai) - Glama listing: [glama.ai/mcp/servers/EmblemCompany/Agent-skills](https://glama.ai/mcp/servers/EmblemCompany/Agent-skills) - Docs: [emblemvault.ai/docs/mcp](https://emblemvault.ai/docs/mcp) ## License MIT (stdio bridge + documentation). Hosted MCP is managed SaaS.

trust & traction

Installs (all sources)1.6k

GitHub stars—

License—

Transporthttp

Last synced4h ago

Links

Smithery listing

Your server?

This is for the person who owns Compuute MCP Security Scanner — adds Lulu Ads to your own code. Not the install steps above, those are for your users.

Monetize it — your agent does the work

Copies a ready prompt: your coding agent installs the lulu-ads SDK, wires the slot, and applies the widget design guide.

or set up manually at getlulu.dev/publishers

Claim this listing

Get verified so you can edit the page. Your badge is already live below — no claim needed for that.

Host with Lulu

Managed hosting with monetization built in — waitlist.

Your README badge — links here, updates live. Copy it straight into your README:

[![Lulu MCPs](https://getlulu.dev/api/mcps/badge/compuute-mcp-security-scanner-f4062f)](https://getlulu.dev/mcps/compuute-mcp-security-scanner-f4062f)