Get deterministic code security findings and fix guidance for GitHub repositories.
Copy the install command and let the AI configure it · recommended for beginners
Please install the "io.github.Toraastrta/sphior-code-mcp" MCP server from askskill: Run: claude mcp add 'io-github-toraastrta-sphior-code-mcp' -- npx -y sphior-code-mcp
Developers can use it while working on GitHub repositories to obtain deterministic SAST/SCA findings and remediation guidance. This helps them identify security issues faster and plan fixes.
DevOps teams can pass repository security findings to an AI agent for risk summarization and follow-up guidance. It fits workflows that want to integrate security checks into automation.
It provides deterministic SAST and SCA findings for GitHub repositories, along with fix guidance for use by an AI agent. The provided materials do not specify additional features.
Based on the description, it targets GitHub code repositories and returns security findings related to code and dependencies. For more specific coverage details, see the source repository.
The available information only shows that it is an MCP tool related to GitHub repositories and AI agents. Installation steps, key requirements, and runtime details are not provided; see the source repository.
Scan AI-generated code for injections, secrets, SSRF, and risky patterns.
Review repositories in natural language for security, performance, and code quality issues
Search and navigate multiple code repositories with natural language understanding.
Clone GitHub repos, audit code, scan security issues, and explain code intelligently.
Safely retrieve, search, and analyze repository code structure for coding agents.
Scan codebases for LLM usage, AI frameworks, and exposed secrets.