hacki-mcp 0.1.0

MCP server for HackiAI security code analysis

hacki-mcp

Security code analysis for your IDE, powered by the HackiAI API.

hacki-mcp is a Model Context Protocol (MCP) server that brings HackiAI's security analysis directly into Claude Desktop, Cursor, VS Code, Claude Code, and any other MCP-compatible client.

Tools

Tool	Description
hacki_review_file	Analyze a single file for security vulnerabilities
hacki_review_files	Analyze a list of files together
hacki_review_directory	Analyze a directory recursively
hacki_commit	Analyze staged files and generate a suggested commit message
hacki_get_history	List past reviews with filters and pagination
hacki_get_findings	Get the findings for a specific review
hacki_update_finding_status	Mark a finding as resolved, ignored, or pending

Requirements

A HackiAI API key. Get one at hacki.ai.

Installation

uvx — recommended, no install needed

uvx runs the server on demand without polluting your Python environment:

{
  "mcpServers": {
    "hacki": {
      "command": "uvx",
      "args": ["hacki-mcp"],
      "env": { "HACKI_API_KEY": "hacki_xxxx" }
    }
  }
}

pip

pip install hacki-mcp

Docker

docker pull hackiai/hacki-mcp

Configuration

Claude Desktop

Edit your config file:

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "hacki": {
      "command": "uvx",
      "args": ["hacki-mcp"],
      "env": {
        "HACKI_API_KEY": "hacki_xxxx"
      }
    }
  }
}

Claude Code

claude mcp add hacki -- uvx hacki-mcp

Then add your API key in .claude/settings.json:

{
  "mcpServers": {
    "hacki": {
      "command": "uvx",
      "args": ["hacki-mcp"],
      "env": {
        "HACKI_API_KEY": "hacki_xxxx"
      }
    }
  }
}

Cursor / VS Code

Add to your MCP settings:

{
  "mcpServers": {
    "hacki": {
      "command": "uvx",
      "args": ["hacki-mcp"],
      "env": {
        "HACKI_API_KEY": "hacki_xxxx"
      }
    }
  }
}

Docker (any IDE)

Use this variant if you prefer not to install Python:

{
  "mcpServers": {
    "hacki": {
      "command": "docker",
      "args": ["run", "--rm", "-i", "-e", "HACKI_API_KEY", "hackiai/hacki-mcp"],
      "env": {
        "HACKI_API_KEY": "hacki_xxxx"
      }
    }
  }
}

Already using the HackiAI CLI?

If you have run hacki login, your credentials are already stored at ~/.hacki_cli/config.json. The MCP reads them automatically — no HACKI_API_KEY needed in the config.

Code Graph

hacki-mcp automatically generates AST, IR, CFG, and DFG graphs (via hacki-graph) when analyzing multiple files. This significantly improves cross-file vulnerability detection.

Supported languages: Python, JavaScript, TypeScript, Java, C#, Go, PHP.

License

MIT