Draugr
Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
- Transport
- Not stated
- Package
- —
- Registry id
- dev.draugr/draugr
No install snippet on purpose. A working MCP config is a command, its arguments and an environment block — the last two are where API keys live, so this catalogue never stores them and cannot publish them. Follow the link above for the authors' own instructions.
Draugr runs multiple security scanners from a single file and consolidates findings. Draugr ranks findings using risk signals like KEV and EPSS. Draugr is open source, requires no account, and does not upload code.
Draugr integrates with GitHub Actions, GitLab CI, and Azure Pipelines. Draugr supports the Model Context Protocol for AI assistant integration. Draugr provides a server version in early access for organizational history.
Summary drafted from the project's own website. Every sentence is backed by text on that page and was reviewed before publishing.