Securealy

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

• Connection: Runs on your computer
• Transport: stdio
• Category: Online shops & payments
• You need to fill in: SUPABASE_SERVICE_KEY, SUPABASE_MGMT_TOKEN, STRIPE_SECRET_KEY, VERCEL_TOKEN

Install

Pick the AI app you use, then copy the settings.

You need

• npmNode.js installed (for the npx command)

Which app do you use?

{
  "mcpServers": {
    "securealy": {
      "command": "npx",
      "args": [
        "-y",
        "securealy-mcp"
      ],
      "env": {
        "SUPABASE_URL": "your-value",
        "SUPABASE_SERVICE_KEY": "your-value",
        "SUPABASE_MGMT_TOKEN": "your-value",
        "SUPABASE_PROJECT_REF": "your-value",
        "STRIPE_SECRET_KEY": "your-value",
        "VERCEL_TOKEN": "your-value",
        "VERCEL_PROJECT_ID": "your-value",
        "SECUREALY_VERCEL_DECRYPT": "your-value",
        "SECUREALY_SUPABASE_HOST_OVERRIDE": "your-value",
        "SECUREALY_SCAN_ROOTS": "your-value",
        "SECUREALY_NO_HISTORY": "your-value",
        "SECUREALY_TELEMETRY": "your-value"
      }
    }
  }
}

claude mcp add securealy --env SUPABASE_URL=your-value --env SUPABASE_SERVICE_KEY=your-value --env SUPABASE_MGMT_TOKEN=your-value --env SUPABASE_PROJECT_REF=your-value --env STRIPE_SECRET_KEY=your-value --env VERCEL_TOKEN=your-value --env VERCEL_PROJECT_ID=your-value --env SECUREALY_VERCEL_DECRYPT=your-value --env SECUREALY_SUPABASE_HOST_OVERRIDE=your-value --env SECUREALY_SCAN_ROOTS=your-value --env SECUREALY_NO_HISTORY=your-value --env SECUREALY_TELEMETRY=your-value -- npx -y securealy-mcp

{
  "mcpServers": {
    "securealy": {
      "command": "npx",
      "args": [
        "-y",
        "securealy-mcp"
      ],
      "env": {
        "SUPABASE_URL": "your-value",
        "SUPABASE_SERVICE_KEY": "your-value",
        "SUPABASE_MGMT_TOKEN": "your-value",
        "SUPABASE_PROJECT_REF": "your-value",
        "STRIPE_SECRET_KEY": "your-value",
        "VERCEL_TOKEN": "your-value",
        "VERCEL_PROJECT_ID": "your-value",
        "SECUREALY_VERCEL_DECRYPT": "your-value",
        "SECUREALY_SUPABASE_HOST_OVERRIDE": "your-value",
        "SECUREALY_SCAN_ROOTS": "your-value",
        "SECUREALY_NO_HISTORY": "your-value",
        "SECUREALY_TELEMETRY": "your-value"
      }
    }
  }
}

{
  "servers": {
    "securealy": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "securealy-mcp"
      ],
      "env": {
        "SUPABASE_URL": "your-value",
        "SUPABASE_SERVICE_KEY": "your-value",
        "SUPABASE_MGMT_TOKEN": "your-value",
        "SUPABASE_PROJECT_REF": "your-value",
        "STRIPE_SECRET_KEY": "your-value",
        "VERCEL_TOKEN": "your-value",
        "VERCEL_PROJECT_ID": "your-value",
        "SECUREALY_VERCEL_DECRYPT": "your-value",
        "SECUREALY_SUPABASE_HOST_OVERRIDE": "your-value",
        "SECUREALY_SCAN_ROOTS": "your-value",
        "SECUREALY_NO_HISTORY": "your-value",
        "SECUREALY_TELEMETRY": "your-value"
      }
    }
  }
}

Your choice stays on this device in a cookie; no account needed.

Values you fill in

• SUPABASE_URL env
  Optional. Your Supabase project URL, read by check_rls. Sent only to that project.
• SUPABASE_SERVICE_KEY secret env
  Optional. Service role key for check_rls. Sent only to your Supabase project, never printed.
• SUPABASE_MGMT_TOKEN secret env
  Optional. Supabase management token for check_rls and the auth config check. Sent only to the Supabase management API.
• SUPABASE_PROJECT_REF env
  Optional. Supabase project ref, used with SUPABASE_MGMT_TOKEN.
• STRIPE_SECRET_KEY secret env
  Optional. Stripe secret key for check_stripe. Sent only to api.stripe.com, never printed.
• VERCEL_TOKEN secret env
  Optional. Project-scoped Vercel token for check_vercel_env. Sent only to api.vercel.com, never printed.
• VERCEL_PROJECT_ID env
  Optional. Vercel project id for check_vercel_env.
• SECUREALY_VERCEL_DECRYPT env
  Optional. Set to 1 to let check_vercel_env fetch decrypted variable values from api.vercel.com for the trailing-newline and live-key checks. Without it only names and targets are read and those check…
• SECUREALY_SUPABASE_HOST_OVERRIDE env
  Optional. Set to 1 to let check_rls send the service key to a self-hosted Supabase URL. Without it the key is sent only to an https URL on a Supabase-hosted domain.
• SECUREALY_SCAN_ROOTS env
  Optional. Folders, separated by the OS path delimiter, that scan_repo may read in addition to the server's working directory. Anything outside is refused.
• SECUREALY_NO_HISTORY env
  Optional. Set to 1 to stop the server appending each run (grade, score, counts, failing check ids; never evidence) to .securealy/history.json in its working directory.
• SECUREALY_TELEMETRY env
  Optional, off by default. Set to 1 to send an anonymous aggregate of each run (command, grade, counts, stack kind, failing check ids; no URL, host or evidence) to securealy.com.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026

• ✓ Pass

  Maker matches the repo

  The registry name was verified against the domain securealy.com (the registry checks domain ownership)

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• – Not applicable

  Endpoint responds

  This one runs on your computer; there is no internet endpoint

• – Not applicable

  Sign-in with OAuth

  Runs on your computer and uses local settings instead

• … Not checked yet

  No hidden instructions in tool descriptions

  Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Online shops & paymentsi

• More stars than 0% of the other 1744 servers in this category
• Published to the registry more recently than 58% of the other 1744 servers in this category
• Basic checks equal to or better than 100% of the other 1744 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

README from the maker

No README found in the repo