Pantheon-Security/medusaMCPMCP Server

medusa

AI-first security scanner with 76 analyzers, 9,600+ detection rules, and repo poisoning detection for AI/ML, LLM agents, and MCP servers. Scan any GitHub repo with: medusa scan --git user/repo

592stars

107forks

Python

agent-securityai-securitycode-analysiscve-detectiondevsecopsllm-securitymcpnextjsopen-sourcepythonreactsast

Quality signals

ActiveNo testsNo CIThin docsNo licensePopular

Open Repository Download ZIP

AI summary

Auto-generated overview of what this skill does and when to reach for it.

AI-powered security scanner that finds AI supply-chain attacks, leaked secrets, and 40,000+ vulnerabilities in AI/ML code, repos, and chat histories.

Use this when

You need to scan a GitHub repo for AI poisoning or prompt injection
You want to check AI chat histories for accidentally leaked API keys
You're auditing LLM agents, MCP servers, or RAG pipelines
You need to detect 200+ known CVEs in AI/ML code
You want fast, parallelized security scanning across platforms

Don't use when

Scanning non-AI codebases without LLM/agent dependencies
You need compliance reporting for traditional software (use SAST/DAST tools)
You require real-time runtime protection (use WAF/IPS)

Capabilities

Scans GitHub repos for AI supply-chain attacks (repo poisoning, prompt injection)
Detects leaked API keys in AI chat histories (Claude, Cursor, Copilot, shell)
Finds 40,000+ AI-specific vulnerabilities and 200+ CVEs (Log4Shell, XZ backdoor)
Supports 28+ AI editor configs (Cursor, Cline, Copilot, Claude Code)
Exports reports in JSON, HTML, Markdown, and SARIF formats
Uses parallel processing for 10-40x faster scans on macOS/Windows/Linux

InstallMCPRun via uvx (Python)

Universal installANY TOOL

$ npx skillcity@latest Pantheon-Security/medusa

Auto-detects the skill or MCP server in this repo and installs it for Claude Code, Codex, Cursor, Cline, OpenCode, Gemini CLI, Anti-Gravity, OpenClaw and Hermes.

Requires Node.js 18+ (ships with npx).

Or install manually

uvx medusa

MCP Configuration

Add this to your claude_desktop_config.json

{
  "mcpServers": {
    "medusa": {
      "command": "uvx",
      "args": [
        "medusa"
      ]
    }
  }
}

Loading README…

Discover the toolingbehind modern intelligence

Discover the toolingbehind modern intelligence

medusa