{"id":"b566cdad-ebda-48d3-8587-81cc038fa36e","slug":"assurly-assurly","kind":"mcp","name":"assurly","summary":"Pre-deploy ship gate for AI-generated code — scan Next.js/Supabase/Stripe/Vercel projects before you ship. CLI + MCP server.","owner":"assurly","repoUrl":"https://github.com/assurly/assurly","license":"MIT","licenseTier":"permissive","trust":"community","stars":1,"match":null,"fewStars":true,"format":"mcp","createdAt":"2026-06-28T07:59:17.000Z","addedAt":"2026-10-14T10:54:10.142Z","logoUrl":"https://avatars.githubusercontent.com/u/300890433?v=4","linkOnly":false,"collection":null,"skillPath":null,"categories":["databases","cloud-infra","developer-tools"],"tags":["ai","cli","devtools","nextjs","security","sql","static-analysis","stripe"],"runtime":"node","local":true,"cloudCapable":false,"cloudCapability":"unknown","cloudReadyOnPlatform":false,"needsApiKey":false,"reviewed":false,"syncedAt":"2026-10-14T20:17:21.641Z","sample":false,"url":"https://conduits.dev/tools/assurly-assurly","language":"TypeScript","transports":["stdio"],"install":{"npm":"@assurly/mcp-server"},"requirements":{"env":[],"upstreamMayCharge":false},"tools":null,"readme":"# Assurly Monorepo\n\nAssurly is a professional production-readiness verifier designed to scan B2B SaaS applications for configuration, security, and integration errors, especially those introduced by AI code generators.\n\n## Structure\n\nThis project is organized as a monorepo utilizing npm workspaces:\n\n- `packages/cli`: The core local static analysis CLI tool (`npx assurly`).\n- `packages/mcp-server`: MCP server exposing Assurly Ship Gate scans to AI agents (`npx @assurly/mcp-server`). See [the MCP page](https://assurly.dev/mcp) or `packages/mcp-server/README.md`.\n- `packages/vscode-extension`: **Paused** — VS Code editor integration (not actively maintained; target users scan via URL, MCP, or dashboard).\n- `apps/web`: The Next.js landing page, documentation, and web audit portal.\n\n## Getting Started\n\n1. Install dependencies from the root directory:\n   ```bash\n   npm install\n   ```\n2. Copy `apps/web/.env.example` to `apps/web/.env.local` and configure Supabase,\n   Stripe, and the GitHub App. Provider redirects always use `APP_URL`; Stripe and\n   GitHub webhook endpoints reject requests when their signing secrets are absent.\n   For local GitHub OAuth, add\n   `http://localhost:3000/api/auth/callback` to the Supabase Auth redirect allow\n   list. Open the app at `http://localhost:3000` so the OAuth PKCE cookie and\n   callback share the same browser origin.\n3. Build the CLI package:\n   ```bash\n   npm run build:cli\n   ```\n4. Run the Next.js web application locally:\n   ```bash\n   npm run dev:web\n   ```\n\n## Development and Guidelines\n\nPlease refer to [requirements.md](./requirements.md) for strict senior coding guidelines, security specifications, and testing strategies.\n"}