Husk MCP Server - install, status & alternatives [2026]

01 · Install Husk

Claude Code

claude mcp add husk-security-husk -- npx -y husk-sec

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "husk-security-husk": {
      "command": "npx",
      "args": [
        "-y",
        "husk-sec"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-08-26 - young repo, little track record yet

license MIT - declared in the repository

npm package husk-sec - unscoped; check the name against the project README before installing

registry namespace io.github.husk-security is GitHub-verified and matches the repo owner

03 · What Husk can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.1.2 · 2026-09-11

Pick a scan folder with your machine's own folder dialog, or keep browsing in Husk's picker · Say where feedback goes, and link the privacy notice, before you send it · Filter findings by repo, either from the toolbar…

v0.1.1 · 2026-08-27

A local-first security scanner for developers. One binary, no account. · The first public release of husk. It scans your machine for compromised · packages, leaked secrets, risky install scripts, and unsafe AI/MCP…

v0.1.0 · 2026-08-26

A local-first security scanner for developers. One binary, no account. · The first public release of husk. It scans your machine for compromised · packages, leaked secrets, risky install scripts, and unsafe AI/MCP…

04 · Who maintains Husk

Husk is maintained by husk-security. It's the only MCP server we track from this author; the repo dates to Aug 2026.

05 · Facts

repository: github.com/husk-security/husk
website: https://husk-security.dev/
category: security - ranked #50 of 204 actively-maintained security servers as of 2026-09-18.
release cadence: 3 releases in the last 90 days (latest 2026-09-11)
registry: io.github.husk-security/husk (active, first published 2026-08-27 · 2 versions)
packages: npm:husk-sec · cargo:husk-sec

06 · Husk FAQ

What is Husk?

A local-first security scanner for developers. One binary, no account. Install · Quickstart · Usage · Commands · How it works

Is Husk still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-14 and it shipped 3 releases in the last 90 days. We re-verify nightly.

How do I install Husk?

Run `npx -y husk-sec`. You can also paste the ready-made client config above.

Does Husk run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Husk

Alternatives to Husk

Maintained security servers if Husk isn't the fit.

Pairs well with

Servers that cover what Husk doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Pkgtruth · Q Ring · IdentArk Gateway · Thumb Gate · Inkog

More Rust MCP servers · Par CAD · Svipall · IWE · Codebase Synapse · Ferritin - Rust documentation · see all