{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"com.securealy/mcp","description":"Grade a URL as an attacker and a customer would see it; scan a repo; check Supabase, Stripe, Vercel.","title":"Securealy","repository":{"url":"https://github.com/securealy/securealy","source":"github","subfolder":"packages/mcp"},"version":"0.1.4","websiteUrl":"https://securealy.com","packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"securealy-mcp","version":"0.1.4","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Optional. Your Supabase project URL, read by check_rls. Sent only to that project.","format":"string","name":"SUPABASE_URL"},{"description":"Optional. Service role key for check_rls. Sent only to your Supabase project, never printed.","format":"string","isSecret":true,"name":"SUPABASE_SERVICE_KEY"},{"description":"Optional. Supabase management token for check_rls and the auth config check. Sent only to the Supabase management API.","format":"string","isSecret":true,"name":"SUPABASE_MGMT_TOKEN"},{"description":"Optional. Supabase project ref, used with SUPABASE_MGMT_TOKEN.","format":"string","name":"SUPABASE_PROJECT_REF"},{"description":"Optional. Stripe secret key for check_stripe. Sent only to api.stripe.com, never printed.","format":"string","isSecret":true,"name":"STRIPE_SECRET_KEY"},{"description":"Optional. Project-scoped Vercel token for check_vercel_env. Sent only to api.vercel.com, never printed.","format":"string","isSecret":true,"name":"VERCEL_TOKEN"},{"description":"Optional. Vercel project id for check_vercel_env.","format":"string","name":"VERCEL_PROJECT_ID"},{"description":"Optional. Set to 1 to let check_vercel_env fetch decrypted variable values from api.vercel.com for the trailing-newline and live-key checks. Without it only names and targets are read and those checks are reported as skipped.","format":"string","name":"SECUREALY_VERCEL_DECRYPT"},{"description":"Optional. Set to 1 to let check_rls send the service key to a self-hosted Supabase URL. Without it the key is sent only to an https URL on a Supabase-hosted domain.","format":"string","name":"SECUREALY_SUPABASE_HOST_OVERRIDE"},{"description":"Optional. Folders, separated by the OS path delimiter, that scan_repo may read in addition to the server's working directory. Anything outside is refused.","format":"string","name":"SECUREALY_SCAN_ROOTS"},{"description":"Optional. Set to 1 to stop the server appending each run (grade, score, counts, failing check ids; never evidence) to .securealy/history.json in its working directory.","format":"string","name":"SECUREALY_NO_HISTORY"},{"description":"Optional, off by default. Set to 1 to send an anonymous aggregate of each run (command, grade, counts, stack kind, failing check ids; no URL, host or evidence) to securealy.com.","format":"string","name":"SECUREALY_TELEMETRY"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-10-14T05:16:48.106582Z","publishedAt":"2026-10-14T05:16:48.106582Z","updatedAt":"2026-10-14T05:16:48.106582Z","isLatest":true}}}