mcp server
assurly
Pre-deploy ship gate for AI-generated code — scan Next.js/Supabase/Stripe/Vercel projects before you ship. CLI + MCP server.
Set up
Runs on your computer. Pick your agent and operating system.
Before you start
- Node.js 20 or newer
{
"mcpServers": {
"assurly-assurly": {
"command": "npx",
"args": [
"-y",
"@assurly/mcp-server"
]
}
}
}same format Cursor, GitHub Copilot CLI, Junie, JetBrains AI Assistant, Augment (Auggie CLI), Factory Droid, Kiro, Devin CLI +12
Values in angle brackets are placeholders. Restart Claude Desktop after editing its config.Claude Desktop docs
README
synced Oct 14, 2026Assurly Monorepo
Assurly is a professional production-readiness verifier designed to scan B2B SaaS applications for configuration, security, and integration errors, especially those introduced by AI code generators.
Structure
This project is organized as a monorepo utilizing npm workspaces:
packages/cli: The core local static analysis CLI tool (npx assurly).packages/mcp-server: MCP server exposing Assurly Ship Gate scans to AI agents (npx @assurly/mcp-server). See the MCP page orpackages/mcp-server/README.md.packages/vscode-extension: Paused — VS Code editor integration (not actively maintained; target users scan via URL, MCP, or dashboard).apps/web: The Next.js landing page, documentation, and web audit portal.
Getting Started
- Install dependencies from the root directory:
npm install - Copy
apps/web/.env.exampletoapps/web/.env.localand configure Supabase, Stripe, and the GitHub App. Provider redirects always useAPP_URL; Stripe and GitHub webhook endpoints reject requests when their signing secrets are absent. For local GitHub OAuth, addhttp://localhost:3000/api/auth/callbackto the Supabase Auth redirect allow list. Open the app athttp://localhost:3000so the OAuth PKCE cookie and callback share the same browser origin. - Build the CLI package:
npm run build:cli - Run the Next.js web application locally:
npm run dev:web
Development and Guidelines
Please refer to requirements.md for strict senior coding guidelines, security specifications, and testing strategies.