Grade a URL as an attacker and a customer would see it; scan a repo; check Supabase, Stripe, Vercel.
To add Securealy to Claude, run the install command below or copy the ready-made config for Claude Code, Claude Desktop, Cursor and VS Code further down. Restart your client after adding it and its tools show up in your next conversation. It needs 12 environment variables, listed below.
Install
npx -y securealy-mcp@0.1.6Environment variables
SUPABASE_URLSet in your MCP configSUPABASE_SERVICE_KEYSet in your MCP configSUPABASE_MGMT_TOKENSet in your MCP configSUPABASE_PROJECT_REFSet in your MCP configSTRIPE_SECRET_KEYSet in your MCP configVERCEL_TOKENSet in your MCP configVERCEL_PROJECT_IDSet in your MCP configSECUREALY_VERCEL_DECRYPTSet in your MCP configSECUREALY_SUPABASE_HOST_OVERRIDESet in your MCP configSECUREALY_SCAN_ROOTSSet in your MCP configSECUREALY_NO_HISTORYSet in your MCP configSECUREALY_TELEMETRYSet in your MCP configInstall with your client
claude mcp add securealy --env SUPABASE_URL=<YOUR_SUPABASE_URL> --env SUPABASE_SERVICE_KEY=<YOUR_SUPABASE_SERVICE_KEY> --env SUPABASE_MGMT_TOKEN=<YOUR_SUPABASE_MGMT_TOKEN> --env SUPABASE_PROJECT_REF=<YOUR_SUPABASE_PROJECT_REF> --env STRIPE_SECRET_KEY=<YOUR_STRIPE_SECRET_KEY> --env VERCEL_TOKEN=<YOUR_VERCEL_TOKEN> --env VERCEL_PROJECT_ID=<YOUR_VERCEL_PROJECT_ID> --env SECUREALY_VERCEL_DECRYPT=<YOUR_SECUREALY_VERCEL_DECRYPT> --env SECUREALY_SUPABASE_HOST_OVERRIDE=<YOUR_SECUREALY_SUPABASE_HOST_OVERRIDE> --env SECUREALY_SCAN_ROOTS=<YOUR_SECUREALY_SCAN_ROOTS> --env SECUREALY_NO_HISTORY=<YOUR_SECUREALY_NO_HISTORY> --env SECUREALY_TELEMETRY=<YOUR_SECUREALY_TELEMETRY> -- npx -y securealy-mcp@0.1.6
Run this in a terminal to add the server to Claude Code.
What this does
Securealy exposes a set of tools to Claude over the Model Context Protocol. After you add it to claude_desktop_config.json (snippet above) and restart Claude Desktop, those tools become callable inside any conversation.
Requirements
This server needs the following environment variables to be set before it can run:
SUPABASE_URL SUPABASE_SERVICE_KEY SUPABASE_MGMT_TOKEN SUPABASE_PROJECT_REF STRIPE_SECRET_KEY VERCEL_TOKEN VERCEL_PROJECT_ID SECUREALY_VERCEL_DECRYPT SECUREALY_SUPABASE_HOST_OVERRIDE SECUREALY_SCAN_ROOTS SECUREALY_NO_HISTORY SECUREALY_TELEMETRY
Set these via the env object in your MCP config (see claude_desktop_config.json snippet above).
Frequently asked questions
How do I install Securealy?
Run the Claude Code command in the install section to add Securealy to Claude Code, or copy the ready-made config for your client from the install section on this page. Restart your client afterwards and the tools appear in your next conversation.
Which clients work with Securealy?
This page carries setup and config for Claude Code, Claude Desktop, Cursor and VS Code. Any other MCP client that accepts a standard server config can connect to Securealy as well.
Does Securealy need an API key?
Yes. Before it can run, set these environment variables: SUPABASE_URL, SUPABASE_SERVICE_KEY, SUPABASE_MGMT_TOKEN, SUPABASE_PROJECT_REF, STRIPE_SECRET_KEY, VERCEL_TOKEN, VERCEL_PROJECT_ID, SECUREALY_VERCEL_DECRYPT, SECUREALY_SUPABASE_HOST_OVERRIDE, SECUREALY_SCAN_ROOTS, SECUREALY_NO_HISTORY, SECUREALY_TELEMETRY. They go in the env block of your MCP config.
Imported from the Official MCP Registry. The details above come from the registry entry; the maker can claim this listing to correct them, add docs, and see its traffic.
Is this your MCP server?
Claim this listing to see its traffic, fix details yourself, and skip the review queue on future updates.
Add this badge to your README
Show visitors this server is listed in the ClaudeRules directory. The badge links straight to this listing.
[](https://clauderules.net/mcp/com-securealy-mcp)<a href="https://clauderules.net/mcp/com-securealy-mcp" target="_blank" rel="noopener noreferrer"><img src="https://clauderules.net/api/badge/com-securealy-mcp" alt="Listed on clauderules.net" /></a>