Plain-English security checks for AI-built apps (Trivy + Opengrep), with fix requests for agents
Connect Runs on your machine
claude mcp add appledger -e APPLEDGER_MODE=<APPLEDGER_MODE> -e APPLEDGER_KEY=<APPLEDGER_KEY> -- uvx appledger==0.2.5
{
"mcpServers": {
"appledger": {
"command": "uvx",
"args": [
"appledger==0.2.5"
],
"env": {
"APPLEDGER_MODE": "<APPLEDGER_MODE>",
"APPLEDGER_KEY": "<APPLEDGER_KEY>"
}
}
}
}
{
"mcpServers": {
"appledger": {
"command": "uvx",
"args": [
"appledger==0.2.5"
],
"env": {
"APPLEDGER_MODE": "<APPLEDGER_MODE>",
"APPLEDGER_KEY": "<APPLEDGER_KEY>"
}
}
}
}
{
"servers": {
"appledger": {
"type": "stdio",
"command": "uvx",
"args": [
"appledger==0.2.5"
],
"env": {
"APPLEDGER_MODE": "<APPLEDGER_MODE>",
"APPLEDGER_KEY": "<APPLEDGER_KEY>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
APPLEDGER_MODEOptional | hosted (default): files Git would commit are sent to appledger.net, scanned and deleted. local: Trivy and Opengrep run on this machine. |
APPLEDGER_KEYOptional, secret | Optional dashboard connection key (al_...). Without it, nothing goes to a dashboard; a hosted check returns a link that saves its result to a free account (the summary is kept up to 24 hours). |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 14 Oct 2026 |
| Last updated | 14 Oct 2026 |
| Registry name | net.appledger/appledger |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
