Securealy

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-14T22:23:05.715368Z",
      "publishedAt": "2026-10-14T22:23:05.715368Z",
      "statusChangedAt": "2026-10-14T22:23:05.715368Z"
    }
  },
  "server": {
    "name": "com.securealy/mcp",
    "title": "Securealy",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.1.6",
    "packages": [
      {
        "version": "0.1.6",
        "transport": {
          "type": "stdio"
        },
        "identifier": "securealy-mcp",
        "runtimeHint": "npx",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "SUPABASE_URL",
            "format": "string",
            "description": "Optional. Your Supabase project URL, read by check_rls. Sent only to that project."
          },
          {
            "name": "SUPABASE_SERVICE_KEY",
            "format": "string",
            "isSecret": true,
            "description": "Optional. Service role key for check_rls. Sent only to your Supabase project, never printed."
          },
          {
            "name": "SUPABASE_MGMT_TOKEN",
            "format": "string",
            "isSecret": true,
            "description": "Optional. Supabase management token for check_rls and the auth config check. Sent only to the Supabase management API."
          },
          {
            "name": "SUPABASE_PROJECT_REF",
            "format": "string",
            "description": "Optional. Supabase project ref, used with SUPABASE_MGMT_TOKEN."
          },
          {
            "name": "STRIPE_SECRET_KEY",
            "format": "string",
            "isSecret": true,
            "description": "Optional. Stripe secret key for check_stripe. Sent only to api.stripe.com, never printed."
          },
          {
            "name": "VERCEL_TOKEN",
            "format": "string",
            "isSecret": true,
            "description": "Optional. Project-scoped Vercel token for check_vercel_env. Sent only to api.vercel.com, never printed."
          },
          {
            "name": "VERCEL_PROJECT_ID",
            "format": "string",
            "description": "Optional. Vercel project id for check_vercel_env."
          },
          {
            "name": "SECUREALY_VERCEL_DECRYPT",
            "format": "string",
            "description": "Optional. Set to 1 to let check_vercel_env fetch decrypted variable values from api.vercel.com for the trailing-newline and live-key checks. Without it only names and targets are read and those checks are reported as skipped."
          },
          {
            "name": "SECUREALY_SUPABASE_HOST_OVERRIDE",
            "format": "string",
            "description": "Optional. Set to 1 to let check_rls send the service key to a self-hosted Supabase URL. Without it the key is sent only to an https URL on a Supabase-hosted domain."
          },
          {
            "name": "SECUREALY_SCAN_ROOTS",
            "format": "string",
            "description": "Optional. Folders, separated by the OS path delimiter, that scan_repo may read in addition to the server's working directory. Anything outside is refused."
          },
          {
            "name": "SECUREALY_NO_HISTORY",
            "format": "string",
            "description": "Optional. Set to 1 to stop the server appending each run (grade, score, counts, failing check ids; never evidence) to .securealy/history.json in its working directory."
          },
          {
            "name": "SECUREALY_TELEMETRY",
            "format": "string",
            "description": "Optional, off by default. Set to 1 to send an anonymous aggregate of each run (command, grade, counts, stack kind, failing check ids; no URL, host or evidence) to securealy.com."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/securealy/securealy",
      "source": "github",
      "subfolder": "packages/mcp"
    },
    "websiteUrl": "https://securealy.com",
    "description": "Grade a URL as an attacker and a customer would see it; scan a repo; check Supabase, Stripe, Vercel."
  }
}