AI Surface MCP Server

How to install AI Surface

Built from the start command in the project's README: uvx --from apisec-ai-surface ai-surface scan .. Check the README for required keys or settings.

claude mcp add ai-surface -- uvx --from apisec-ai-surface ai-surface scan .

{
  "mcpServers": {
    "ai-surface": {
      "command": "uvx",
      "args": [
        "--from",
        "apisec-ai-surface",
        "ai-surface",
        "scan",
        "."
      ]
    }
  }
}

{
  "mcpServers": {
    "ai-surface": {
      "command": "uvx",
      "args": [
        "--from",
        "apisec-ai-surface",
        "ai-surface",
        "scan",
        "."
      ]
    }
  }
}

code --add-mcp '{"name":"ai-surface","command":"uvx","args":["--from","apisec-ai-surface","ai-surface","scan","."]}'

What AI Surface can touch

• Our checks did not find this. The tool may still do it.Run shell commandsNot seen in this scan
• Our checks did not find this. The tool may still do it.Run dynamic codeNot seen in this scan
• Our checks did not find this. The tool may still do it.Read or write filesNot seen in this scan
• Our checks did not find this. The tool may still do it.Read environment and secretsNot seen in this scan
• Our checks did not find this. The tool may still do it.Control a web browserNot seen in this scan
• Our checks did not find this. The tool may still do it.Connect to databasesNot seen in this scan
• Our checks did not find this. The tool may still do it.Read or send messagesNot seen in this scan
• Our checks did not find this. The tool may still do it.Touch money or tradingNot seen in this scan
• Our checks did not find this. The tool may still do it.Connect to the internetNot run in this scan

"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 7e57dc9, Nov 5, 2026. See the scan policy.