Skarn MCP server
{
"mcpServers": {
"getskarn-skarn": {
"command": "npx",
"args": [
"-y",
"@skarn-security/skarn@latest"
]
}
}
}{
"mcpServers": {
"getskarn-skarn": {
"command": "npx",
"args": [
"-y",
"@skarn-security/skarn@latest"
]
}
}
}{
"mcpServers": {
"getskarn-skarn": {
"command": "npx",
"args": [
"-y",
"@skarn-security/skarn@latest"
]
}
}
}{
"servers": {
"getskarn-skarn": {
"command": "npx",
"args": [
"-y",
"@skarn-security/skarn@latest"
]
}
}
}{
"mcpServers": {
"getskarn-skarn": {
"command": "npx",
"args": [
"-y",
"@skarn-security/skarn@latest"
]
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y @skarn-security/skarnversion 0.31.0
What it does
Skarn is a security scanner that detects leaked secrets and risky hooks in AI coding sessions and assistant configurations. It runs locally and redacts sensitive information, designed for developers who work with AI assistants and want to prevent credential exposure.
- Scan AI chat history and conversation logs to find accidentally exposed API keys, passwords, or tokens before sharing sessions.
- Audit assistant configuration files and automation hooks for security risks or unintended credential leakage.
- Review coding sessions with AI tools to identify and redact sensitive data before archiving or sharing session records.
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.