加载中…
Grade a URL as an attacker and a customer would see it; scan a repo; check Supabase, Stripe, Vercel.
Securealy 是 ChatHome Skills 收录的 MCP 条目，来源为 Official MCP Registry，质量分 78/100。 作为 Model Context Protocol 服务器，它向 Claude、Cursor、Copilot 等兼容 MCP 的 LLM 客户端暴露可直接调用的工具，让 agent 的能力超出模型内置范围。 该条目由 ChatHome Skills 的每日抓取从官方 registry 和 GitHub 发现查询中收录，每次运行都会重新核验仓库事实、新鲜度信号和安装元数据。 质量分综合了官方 registry 收录情况、可用安装命令、许可证完整性、仓库活跃度和 GitHub star 趋势，完整算法说明见来源页。安装命令已列于上方，可直接复制使用。 在将 Securealy 加入生产 agent 工作流前，请核对上方的最近更新日期和仓库状态——下方事实快照是最近一次抓取的时点值。
npx -y securealy-mcp@0.1.6运行此命令前，请先核对上游源码。
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-10-14T22:23:05.715368Z",
"publishedAt": "2026-10-14T22:23:05.715368Z",
"statusChangedAt": "2026-10-14T22:23:05.715368Z"
}
},
"server": {
"name": "com.securealy/mcp",
"title": "Securealy",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.1.6",
"packages": [
{
"version": "0.1.6",
"transport": {
"type": "stdio"
},
"identifier": "securealy-mcp",
"runtimeHint": "npx",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org",
"environmentVariables": [
{
"name": "SUPABASE_URL",
"format": "string",
"description": "Optional. Your Supabase project URL, read by check_rls. Sent only to that project."
},
{
"name": "SUPABASE_SERVICE_KEY",
"format": "string",
"isSecret": true,
"description": "Optional. Service role key for check_rls. Sent only to your Supabase project, never printed."
},
{
"name": "SUPABASE_MGMT_TOKEN",
"format": "string",
"isSecret": true,
"description": "Optional. Supabase management token for check_rls and the auth config check. Sent only to the Supabase management API."
},
{
"name": "SUPABASE_PROJECT_REF",
"format": "string",
"description": "Optional. Supabase project ref, used with SUPABASE_MGMT_TOKEN."
},
{
"name": "STRIPE_SECRET_KEY",
"format": "string",
"isSecret": true,
"description": "Optional. Stripe secret key for check_stripe. Sent only to api.stripe.com, never printed."
},
{
"name": "VERCEL_TOKEN",
"format": "string",
"isSecret": true,
"description": "Optional. Project-scoped Vercel token for check_vercel_env. Sent only to api.vercel.com, never printed."
},
{
"name": "VERCEL_PROJECT_ID",
"format": "string",
"description": "Optional. Vercel project id for check_vercel_env."
},
{
"name": "SECUREALY_VERCEL_DECRYPT",
"format": "string",
"description": "Optional. Set to 1 to let check_vercel_env fetch decrypted variable values from api.vercel.com for the trailing-newline and live-key checks. Without it only names and targets are read and those checks are reported as skipped."
},
{
"name": "SECUREALY_SUPABASE_HOST_OVERRIDE",
"format": "string",
"description": "Optional. Set to 1 to let check_rls send the service key to a self-hosted Supabase URL. Without it the key is sent only to an https URL on a Supabase-hosted domain."
},
{
"name": "SECUREALY_SCAN_ROOTS",
"format": "string",
"description": "Optional. Folders, separated by the OS path delimiter, that scan_repo may read in addition to the server's working directory. Anything outside is refused."
},
{
"name": "SECUREALY_NO_HISTORY",
"format": "string",
"description": "Optional. Set to 1 to stop the server appending each run (grade, score, counts, failing check ids; never evidence) to .securealy/history.json in its working directory."
},
{
"name": "SECUREALY_TELEMETRY",
"format": "string",
"description": "Optional, off by default. Set to 1 to send an anonymous aggregate of each run (command, grade, counts, stack kind, failing check ids; no URL, host or evidence) to securealy.com."
}
]
}
],
"repository": {
"url": "https://github.com/securealy/securealy",
"source": "github",
"subfolder": "packages/mcp"
},
"websiteUrl": "https://securealy.com",
"description": "Grade a URL as an attacker and a customer would see it; scan a repo; check Supabase, Stripe, Vercel."
}
}