Skip to content
Conduit

mcp server

assurly

Pre-deploy ship gate for AI-generated code — scan Next.js/Supabase/Stripe/Vercel projects before you ship. CLI + MCP server.

assurly/assurlycommunitylistedunreviewed

Set up

Runs on your computer. Pick your agent and operating system.

Before you start

  • Node.js 20 or newer
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "assurly-assurly": {
      "command": "npx",
      "args": [
        "-y",
        "@assurly/mcp-server"
      ]
    }
  }
}

same format Cursor, GitHub Copilot CLI, Junie, JetBrains AI Assistant, Augment (Auggie CLI), Factory Droid, Kiro, Devin CLI +12

Values in angle brackets are placeholders. Restart Claude Desktop after editing its config.Claude Desktop docs

README

synced Oct 14, 2026

Assurly Monorepo

Assurly is a professional production-readiness verifier designed to scan B2B SaaS applications for configuration, security, and integration errors, especially those introduced by AI code generators.

Structure

This project is organized as a monorepo utilizing npm workspaces:

  • packages/cli: The core local static analysis CLI tool (npx assurly).
  • packages/mcp-server: MCP server exposing Assurly Ship Gate scans to AI agents (npx @assurly/mcp-server). See the MCP page or packages/mcp-server/README.md.
  • packages/vscode-extension: Paused — VS Code editor integration (not actively maintained; target users scan via URL, MCP, or dashboard).
  • apps/web: The Next.js landing page, documentation, and web audit portal.

Getting Started

  1. Install dependencies from the root directory:
    npm install
    
  2. Copy apps/web/.env.example to apps/web/.env.local and configure Supabase, Stripe, and the GitHub App. Provider redirects always use APP_URL; Stripe and GitHub webhook endpoints reject requests when their signing secrets are absent. For local GitHub OAuth, add http://localhost:3000/api/auth/callback to the Supabase Auth redirect allow list. Open the app at http://localhost:3000 so the OAuth PKCE cookie and callback share the same browser origin.
  3. Build the CLI package:
    npm run build:cli
    
  4. Run the Next.js web application locally:
    npm run dev:web
    

Development and Guidelines

Please refer to requirements.md for strict senior coding guidelines, security specifications, and testing strategies.

↑↓ navigate openesc close