Flagrix MCP Server

by flagrix-ioio.github.flagrix-io/flagrixv0.1.0

Scan GitHub repos and profiles for malware before you clone — CLI and MCP server for the Flagrix scanner

2Node.jsstdioofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Maintained3mo ago

Install Flagrix MCP server

claude mcp add flagrix -e GITHUB_TOKEN='<github-token>' -- npx -y flagrix mcp

{
  "mcpServers": {
    "flagrix": {
      "command": "npx",
      "args": [
        "-y",
        "flagrix",
        "mcp"
      ],
      "env": {
        "GITHUB_TOKEN": "<github-token>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "flagrix": {
      "command": "npx",
      "args": [
        "-y",
        "flagrix",
        "mcp"
      ],
      "env": {
        "GITHUB_TOKEN": "<github-token>"
      }
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "flagrix": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "flagrix",
        "mcp"
      ],
      "env": {
        "GITHUB_TOKEN": "<github-token>"
      }
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "flagrix": {
      "command": "npx",
      "args": [
        "-y",
        "flagrix",
        "mcp"
      ],
      "env": {
        "GITHUB_TOKEN": "<github-token>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Configuration

Variable	Required	Secret	Description
GITHUB_TOKEN	—	yes	Optional GitHub token — raises API rate limits and enables private-repo scans

Freshness

Maintained — last maintenance signal 3mo ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-07-13 · 3mo ago · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
2026-07-08 · 3mo ago · official registry · v0.1.0

FAQ

›How do I install the Flagrix MCP server in Claude Code?

Run: claude mcp add flagrix -e GITHUB_TOKEN='<github-token>' -- npx -y flagrix mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Flagrix require an API key?

Yes. It expects GITHUB_TOKEN, of which 1 is a secret.

›Can I use Flagrix as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is Flagrix in the official MCP registry?

Yes, as io.github.flagrix-io/flagrix.