SafeWeave
Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.
What it does
SafeWeave is an MCP server, a connector that lets an AI assistant use it as a tool. It can be used hosted (nothing to install) or installed locally.
From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as scan code for vulnerabilities or review pull requests.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence) and are not a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · not tested by Electra IndexHosted endpoint
https://mcp.safeweave.dev/mcpstreamable-http
In Claude Code: claude mcp add --transport http safeweave https://mcp.safeweave.dev/mcp
Install package
- NPM
safeweave-mcpv0.7.4 · runs locally (stdio)
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"safeweave": {
"url": "https://mcp.safeweave.dev/mcp"
}
}
}Live check
Electra Index connected to the hosted endpoint 3h agoREACHABLE The endpoint answered but asks for an API key or a sign-in before connecting. Electra Index never sends credentials, so the tool list is not visible here.
How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method
Tasks it helps with
Share of each task's required capabilities it covers| Scan code for vulnerabilities Security Scanning | 50% |
| Review pull requests Security Scanning | 50% |
Similar tools
Listed for the same task: scan code for vulnerabilities- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- SkillTotalREMOTELOCALDeterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally
- ReadoREMOTELOCALYour code review comments from Reado, the read-first IDE, as context and tools for your agent
- Fairquery Agent Trust & Data SafetyREMOTELOCALPII/secret redaction, email checks, sanctions screening and OSV vulnerability lookups for AI agents
Ready-made AI agents
- $20/mo
- $24/mo · free plan
- Cursor53$20/mo · free plan
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Install package | safeweave-mcp | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Hosted endpoint | https://mcp.safeweave.dev/mcp | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Package registries | npm | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Local install (package) | yes | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Website | https://safeweave.dev | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Repository | https://github.com/nickfluxk/safeweave | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Version | 0.7.4 | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 3h ago |
Change history
- NEW19 Oct 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is SafeWeave still online?
Free alerts · no accountQuestions about SafeWeave
How do I connect SafeWeave?
Use the hosted endpoint https://mcp.safeweave.dev/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What can I use SafeWeave for?
Based on its description, it is most relevant to: scan code for vulnerabilities, review pull requests.