supership-mcp

MCP server for supership -- predeploy security scanner for the agent economy.

Scan code for exposed secrets, auth holes, injection vulnerabilities, and misconfigurations. Code is analyzed via the supership API. Free tier returns score + grade. Paid tiers return detailed findings with fixes.

Install

Claude Desktop / Claude Code

Add to your MCP config (~/.claude/claude_desktop_config.json):

{
  "mcpServers": {
    "supership": {
      "command": "npx",
      "args": ["@crestdeploymentsystems/supership-mcp"]
    }
  }
}

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "supership": {
      "command": "npx",
      "args": ["@crestdeploymentsystems/supership-mcp"]
    }
  }
}

Tools

scan_directory

Scan a local directory for security vulnerabilities.

scan_directory({ path: "/path/to/project" })
scan_directory({ path: "/path/to/project", tier: "full" })

scan_code

Scan code snippets directly.

scan_code({ files: { "app.js": "eval(req.body.code);" } })

attest

Get a witnessed attestation (signed, chain-anchored proof).

attest({ input_hash: "sha256:...", score: 85, grade: "B" })

Pricing

• Free: score + grade (all 6 categories)
• Quick ($1 USDC): secrets + config findings
• Full ($5 USDC): all categories + fixes
• Attestation ($0.01 USDC): signed proof

Payment via x402 on Base mainnet. No API keys. No signup.

Built by

Crest Deployment Systems