Draugr
Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
Install
unavailable — hosted endpoints aren’t versioned
mcpb
https://github.com/draugr-dev/draugr/releases/download/v0.157.0/draugr-0.157.0.mcpb
Setup by client
Pick your client — the config below is generated for this server. Copy respects the “Pin version” switch above.
This server ships as a downloadable bundle: https://github.com/draugr-dev/draugr/releases/download/v0.157.0/draugr-0.157.0.mcpb
Format verified against the official Claude Desktop docs ↗.
This server ships as a downloadable bundle: https://github.com/draugr-dev/draugr/releases/download/v0.157.0/draugr-0.157.0.mcpb
Format verified against the official Claude Code docs ↗.
This server ships as a downloadable bundle: https://github.com/draugr-dev/draugr/releases/download/v0.157.0/draugr-0.157.0.mcpb
Format verified against the official Cursor docs ↗.
This server ships as a downloadable bundle: https://github.com/draugr-dev/draugr/releases/download/v0.157.0/draugr-0.157.0.mcpb
Format verified against the official VS Code docs ↗.
This server ships as a downloadable bundle: https://github.com/draugr-dev/draugr/releases/download/v0.157.0/draugr-0.157.0.mcpb
Format verified against the official Windsurf docs ↗.
GitHub
⭐ 7 stars · 最近更新于 16 天前 · Apache-2.0 license
About this server
Draugr Security scanning for CI from one file, with every finding ranked by exposure, criticality, exploitability and reachability. Describe your app. Draugr figures out the rest. Every application carries problems nobody put there on purpose: a library that turned out to have a hole in it, a passwo…
Summary from the project README — github.com/draugr-dev/draugr
Distributed as mcpb, listed under AI Agents. Review our MCP security guide before granting access to real data.
Frequently asked questions
What does the Draugr MCP server do?
Draugr Security scanning for CI from one file, with every finding ranked by exposure, criticality, exploitability and reachability. Describe your app. Draugr figures out the rest. Every application carries problems nobody put there on purpose: a library that turned out to have a hole in it, a passwo
How do I install Draugr?
Run the install command shown above, then paste the config for your client (Claude Desktop, Claude Code, Cursor, VS Code or Windsurf) into its MCP settings and restart the client.
Is Draugr free to use?
The MCP server itself is free to install. The source is public on https://github.com/draugr-dev/draugr. Any third-party service it calls may require its own API key and account.
Which clients support Draugr?
Any MCP-compatible client can use it, including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and custom agents.
Add this badge
Publish this server? Link back with a badge on your README or site — copy either snippet.
Markdown
[](https://mcpnav.net/server/draugr/)
HTML
<a href="https://mcpnav.net/server/draugr/"><img src="https://mcpnav.net/badge/draugr.svg" alt="Listed on MCPNav" height="20"></a>