Oxvault Oxvault
Try us
Integrations

Run Oxvault wherever your agents run

One engine, four surfaces: scan from your terminal, wire it into CI, block threats at runtime, and push results to a shared dashboard. Pick what fits your stack.

Scanner CLI

GA
Free

The open-source engine. One command, zero telemetry, no account. Scan every MCP server and ML model already on your machine — or any target before it loads.

curl -fsSL https://oxvault.dev/install.sh | sh
View on GitHub

GitHub Action

GA
Free

Drop scanning into CI. Fails the build on findings and uploads SARIF to the GitHub Security tab as code-scanning alerts.

- uses: oxvault/scan-action@v1
  with:
    target: .
    fail-on: critical
    format: sarif
    upload-sarif: 'true'
View on GitHub

Gateway

Beta
Pro

Runtime MCP proxy, live in Beta. Wraps your MCP clients and inspects every JSON-RPC call over stdio or HTTP, blocking injection, SSRF, and rug-pulls at the boundary.

oxvault-gw wrap
Read the docs

Console + API key

Beta
Free

The free hosted dashboard, live in Beta. Create an API key, push your scans, and see findings, overview, and recent history from a solo workspace.

Open the Console

Homebrew, VS Code, Docker, and npm are on the way. Tell us which you need next.