PYRESEC AI Code Security Auditing

AI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

One-click editor setup isn’t available for this listing yet — we don’t have a confirmed install command, and we’d rather show nothing than point your editor at the wrong package or host. Follow the project’s own setup instructions, linked above.

Manual Client & Custom JSON ConfigExpand JSON ▾

No confirmed setup config for this listing yet. We only publish a config block when the install details come from the project itself — its README, its docs, or a verified owner. We haven’t found those for PYRESEC - AI Code Security Auditing, and we’d rather show nothing than a guess you’d paste into your client. Follow the project’s own setup instructions for the current steps.

Documentation Overview

PYRESEC — AI Code Security Engine

Autonomous SAST/SCA security auditing via x402 USDC micropayments on Base. No subscriptions. No accounts. Just code in, findings out.

Live Instance

Endpoint	URL
Landing	pyresec-agent-519576377065.us-central1.run.app
Swagger UI	/swagger
Health	/health
MCP Manifest	/mcp/manifest.json
OpenAPI Spec	/openapi.json

Quick Start

Option 1: x402 Python Client (Recommended)

Terminal

pip install x402

Dockerfile

import x402

client = x402.Client(wallet_key="your-base-private-key")
response = client.post(
    "https://pyresec-agent-519576377065.us-central1.run.app/v1/audit/quick-scan",
    json={"code": "def login(u,p): return db.query(f\"SELECT * FROM users WHERE name={u} AND pass={p}\")"}
)
print(response.json())

Option 2: curl (Manual x402 Flow)

Dockerfile

# Step 1: Send request (returns 402 with payment requirements)
curl -X POST https://pyresec-agent-519576377065.us-central1.run.app/v1/audit/quick-scan \
  -H "Content-Type: application/json" \
  -d '{"code": "def login(u,p): return db.query(f\"SELECT * FROM users WHERE name={u} AND pass={p}\")"}'

# Step 2: Pay $0.01 USDC on Base using x402 protocol

# Step 3: Resubmit with X-PAYMENT header
curl -X POST https://pyresec-agent-519576377065.us-central1.run.app/v1/audit/quick-scan \
  -H "Content-Type: application/json" \
  -H "X-PAYMENT: <payment-proof>" \
  -d '{"code": "..."}'

Option 3: GitHub Action (CI/CD)

yaml

- name: PYRESEC Security Scan
  uses: nanoclone-ltd/pyresec-scan-action@main
  with:
    code-path: ./src
    tier: quick-scan
    x402-wallet-key: ${{ secrets.X402_WALLET_KEY }}

Option 4: MCP-Compatible Agent (Claude, Cursor, etc.)

PYRESEC is a registered MCP tool. Any MCP-compatible client discovers it automatically:

config.json

{
  "mcpServers": {
    "pyresec": {
      "url": "https://pyresec-agent-519576377065.us-central1.run.app/mcp"
    }
  }
}

Service Tiers

Tier	Price	Endpoint	Description	Model
Quick Scan	$0.01	`POST /v1/audit/quick-scan`	Top 3 findings by severity, CWE IDs, line numbers	qwen3.6-27b
Deep Audit	$0.50	`POST /v1/audit/deep-repo`	OWASP Top 10, SCA dependency scanning, logic flaws, gas optimization	qwen3.8-27b
Remediation	$5.00	`POST /v1/audit/remediate`	Full patched code with change explanations and security notes	qwen3.8-27b

x402 Payment Flow

PYRESEC uses the x402 protocol for permissionless micropayments on Base. No accounts, no API keys, no subscriptions.

Code

┌──────────┐     POST /v1/audit/quick-scan     ┌──────────┐
│  Client   │ ───────────────────────────────▶  │  PYRESEC │
│ (x402)    │ ◀──── 402 Payment Required ─────  │  Agent   │
│           │       { amount, network, to }     │          │
│           │                                   │          │
│           │ ──── X-PAYMENT (proof) ─────────▶ │          │
│           │ ◀──── 200 + Scan Results ──────── │          │
└──────────┘                                   └──────────┘

How it works:

Client sends a POST request to any audit endpoint
PYRESEC returns 402 Payment Required with payment details (amount, recipient address, network)
Client signs and submits a USDC transfer on Base mainnet
Client resubmits the original request with the X-PAYMENT header containing the payment proof
PYRESEC verifies the payment on-chain and returns the scan results

No wallet? Use the x402 Python SDK or any x402-compatible client.

Architecture

Code

                         ┌─────────────────────────────────┐
                         │          Client Layer            │
                         │  x402 SDK / curl / MCP Client    │
                         └──────────────┬──────────────────┘
                                        │
                              ┌─────────▼─────────┐
                              │   FastAPI Server   │
                              │   (Cloud Run)      │
                              │                    │
                              │  ┌──────────────┐  │
                              │  │ x402 Payment │  │
                              │  │  Middleware   │  │
                              │  └──────┬───────┘  │
                              └─────────┼──────────┘
                                        │
                    ┌───────────────────┼───────────────────┐
                    │                   │                   │
          ┌─────────▼─────────┐ ┌───────▼───────┐ ┌───────▼───────┐
          │  Agent Controller │ │  Population   │ │   Wallet      │
          │  (SAST + LLM)     │ │  Controller   │ │  Interface    │
          └─────────┬─────────┘ └───────────────┘ └───────────────┘
                    │
          ┌─────────▼─────────┐
          │   Groq LLM        │
          │   (qwen models)   │
          └─────────┬─────────┘
                    │
          ┌─────────▼─────────┐
          │  Security Findings │
          │  JSON Response     │
          └───────────────────┘

Supported Vulnerability Types

#	Type	CWE	Severity
1	SQL Injection	CWE-89	HIGH
2	Cross-Site Scripting (XSS)	CWE-79	HIGH
3	Command Injection	CWE-78	CRITICAL
4	Path Traversal	CWE-22	MEDIUM
5	Hardcoded Secrets	CWE-798	CRITICAL
6	Weak Cryptography	CWE-327	MEDIUM
7	SSRF	CWE-918	HIGH
8	Insecure Deserialization	CWE-502	HIGH
9	Authentication Bypass	CWE-287	CRITICAL
10	Improper Input Validation	CWE-20	MEDIUM

For AI Agents (MCP Integration)

PYRESEC is discoverable by any MCP-compatible agent. When an agent needs to audit code, it can find PYRESEC automatically through:

MCP Registry: registry.modelcontextprotocol.io
Smithery.ai: smithery.ai/server/@renaat-s/pyresec-agent
Direct manifest: /mcp/manifest.json

Tool Definitions

Tool	Description	Cost
`quick_scan`	Fast SAST scan, top 3 findings by severity with CWE IDs	$0.01 USDC
`deep_audit`	Full OWASP Top 10, SCA, logic flaws, gas optimization	$0.50 USDC
`remediate_code`	Auto-patched code with change explanations, ready for PR	$5.00 USDC

Agent Discovery Flow

Code

1. Agent queries MCP Registry for "security audit" tools
2. PYRESEC appears in results with tool schemas
3. Agent calls quick_scan with source code
4. PYRESEC returns 402 with x402 payment requirements
5. Agent's x402 wallet pays USDC on Base
6. Agent resubmits with payment proof
7. PYRESEC returns findings as structured JSON

Self-Sustaining Agent

PYRESEC runs as an autonomous agent on Base Mainnet:

Heartbeat every 30 min — checks balance, reports health
Death — shuts down if balance < $0.05
Replication — sends 50% surplus to dev wallet when balance > $20
Kill switch — admin can halt all instances remotely

Deployment

Docker

Terminal

docker build -t pyresec-agent .
docker run -p 8080:8080 --env-file .env pyresec-agent

Google Cloud Run

bash

gcloud run deploy pyresec-agent \
  --source . \
  --platform managed \
  --region us-central1 \
  --allow-unauthenticated \
  --set-env-vars "CDP_WALLET_SECRET=$CDP_WALLET_SECRET,GROQ_API_KEY=$GROQ_API_KEY"

Company

NanoClone Life Sciences Ltd. (UK) Website: nanoclonesystems.com

License

Proprietary. See LICENSE for details.

Read the full README →View source on GitHub →

Related MCP Servers

View all in Finance & Fintech View all alternatives

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about PYRESEC AI Code Security Auditing

We don't have a confirmed install command for PYRESEC - AI Code Security Auditing yet, so we don't publish a generated one — a guessed package name would point at the wrong package or none at all. Follow the project's own README or setup instructions (https://github.com/renaat-s/pyresec-agent) for the current steps.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

PYRESEC AI Code Security Auditing AllMCPs Directory Badge

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/pyresec-ai-code-security-auditing?style=directory)](https://allmcps.com/mcp/pyresec-ai-code-security-auditing)

HTML Embed

<a href="https://allmcps.com/mcp/pyresec-ai-code-security-auditing"><img src="https://allmcps.com/api/badge/pyresec-ai-code-security-auditing?style=directory" alt="PYRESEC   AI Code Security Auditing on AllMCPs" /></a>

Technical Specs & Signals

CategoryFinance & Fintech

27Quality signal: Emerging · 27/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership8/20

Documentation & tools11/30

Adoption & activity1/15

Community engagement0/10

A guidance signal from public completeness & health data — not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.

★ Featured

Moxie Docs MCP

MCP & Agent Skills for Automated Documentation, and codebase conventions + context

Explore Server →

Own this project?

This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to unlock edit access and the Official badge — proof is checked automatically, then reviewed by our team.

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in 💰 Finance & Fintech →Best MCP servers for Finance & Fintech →Alternatives to PYRESEC AI Code Security Auditing →Install in Claude Desktop Install in Cursor Install in VS Code Setup guides for all 13 MCP clients

PYRESEC AI Code Security Auditing

AI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Manual Client & Custom JSON ConfigExpand JSON ▾

Documentation Overview

PYRESEC — AI Code Security Engine

Autonomous SAST/SCA security auditing via x402 USDC micropayments on Base. No subscriptions. No accounts. Just code in, findings out.

Live Instance

Endpoint	URL
Landing	pyresec-agent-519576377065.us-central1.run.app
Swagger UI	/swagger
Health	/health
MCP Manifest	/mcp/manifest.json
OpenAPI Spec	/openapi.json

Quick Start

Option 1: x402 Python Client (Recommended)

Terminal

pip install x402

Dockerfile

import x402

client = x402.Client(wallet_key="your-base-private-key")
response = client.post(
    "https://pyresec-agent-519576377065.us-central1.run.app/v1/audit/quick-scan",
    json={"code": "def login(u,p): return db.query(f\"SELECT * FROM users WHERE name={u} AND pass={p}\")"}
)
print(response.json())

Option 2: curl (Manual x402 Flow)

Dockerfile

# Step 1: Send request (returns 402 with payment requirements)
curl -X POST https://pyresec-agent-519576377065.us-central1.run.app/v1/audit/quick-scan \
  -H "Content-Type: application/json" \
  -d '{"code": "def login(u,p): return db.query(f\"SELECT * FROM users WHERE name={u} AND pass={p}\")"}'

# Step 2: Pay $0.01 USDC on Base using x402 protocol

# Step 3: Resubmit with X-PAYMENT header
curl -X POST https://pyresec-agent-519576377065.us-central1.run.app/v1/audit/quick-scan \
  -H "Content-Type: application/json" \
  -H "X-PAYMENT: <payment-proof>" \
  -d '{"code": "..."}'

Option 3: GitHub Action (CI/CD)

yaml

- name: PYRESEC Security Scan
  uses: nanoclone-ltd/pyresec-scan-action@main
  with:
    code-path: ./src
    tier: quick-scan
    x402-wallet-key: ${{ secrets.X402_WALLET_KEY }}

Option 4: MCP-Compatible Agent (Claude, Cursor, etc.)

PYRESEC is a registered MCP tool. Any MCP-compatible client discovers it automatically:

config.json

{
  "mcpServers": {
    "pyresec": {
      "url": "https://pyresec-agent-519576377065.us-central1.run.app/mcp"
    }
  }
}

Service Tiers

Tier	Price	Endpoint	Description	Model
Quick Scan	$0.01	`POST /v1/audit/quick-scan`	Top 3 findings by severity, CWE IDs, line numbers	qwen3.6-27b
Deep Audit	$0.50	`POST /v1/audit/deep-repo`	OWASP Top 10, SCA dependency scanning, logic flaws, gas optimization	qwen3.8-27b
Remediation	$5.00	`POST /v1/audit/remediate`	Full patched code with change explanations and security notes	qwen3.8-27b

x402 Payment Flow

PYRESEC uses the x402 protocol for permissionless micropayments on Base. No accounts, no API keys, no subscriptions.

Code

┌──────────┐     POST /v1/audit/quick-scan     ┌──────────┐
│  Client   │ ───────────────────────────────▶  │  PYRESEC │
│ (x402)    │ ◀──── 402 Payment Required ─────  │  Agent   │
│           │       { amount, network, to }     │          │
│           │                                   │          │
│           │ ──── X-PAYMENT (proof) ─────────▶ │          │
│           │ ◀──── 200 + Scan Results ──────── │          │
└──────────┘                                   └──────────┘

How it works:

Client sends a POST request to any audit endpoint
PYRESEC returns 402 Payment Required with payment details (amount, recipient address, network)
Client signs and submits a USDC transfer on Base mainnet
Client resubmits the original request with the X-PAYMENT header containing the payment proof
PYRESEC verifies the payment on-chain and returns the scan results

No wallet? Use the x402 Python SDK or any x402-compatible client.

Architecture

Code

                         ┌─────────────────────────────────┐
                         │          Client Layer            │
                         │  x402 SDK / curl / MCP Client    │
                         └──────────────┬──────────────────┘
                                        │
                              ┌─────────▼─────────┐
                              │   FastAPI Server   │
                              │   (Cloud Run)      │
                              │                    │
                              │  ┌──────────────┐  │
                              │  │ x402 Payment │  │
                              │  │  Middleware   │  │
                              │  └──────┬───────┘  │
                              └─────────┼──────────┘
                                        │
                    ┌───────────────────┼───────────────────┐
                    │                   │                   │
          ┌─────────▼─────────┐ ┌───────▼───────┐ ┌───────▼───────┐
          │  Agent Controller │ │  Population   │ │   Wallet      │
          │  (SAST + LLM)     │ │  Controller   │ │  Interface    │
          └─────────┬─────────┘ └───────────────┘ └───────────────┘
                    │
          ┌─────────▼─────────┐
          │   Groq LLM        │
          │   (qwen models)   │
          └─────────┬─────────┘
                    │
          ┌─────────▼─────────┐
          │  Security Findings │
          │  JSON Response     │
          └───────────────────┘

Supported Vulnerability Types

#	Type	CWE	Severity
1	SQL Injection	CWE-89	HIGH
2	Cross-Site Scripting (XSS)	CWE-79	HIGH
3	Command Injection	CWE-78	CRITICAL
4	Path Traversal	CWE-22	MEDIUM
5	Hardcoded Secrets	CWE-798	CRITICAL
6	Weak Cryptography	CWE-327	MEDIUM
7	SSRF	CWE-918	HIGH
8	Insecure Deserialization	CWE-502	HIGH
9	Authentication Bypass	CWE-287	CRITICAL
10	Improper Input Validation	CWE-20	MEDIUM

For AI Agents (MCP Integration)

PYRESEC is discoverable by any MCP-compatible agent. When an agent needs to audit code, it can find PYRESEC automatically through:

MCP Registry: registry.modelcontextprotocol.io
Smithery.ai: smithery.ai/server/@renaat-s/pyresec-agent
Direct manifest: /mcp/manifest.json

Tool Definitions

Tool	Description	Cost
`quick_scan`	Fast SAST scan, top 3 findings by severity with CWE IDs	$0.01 USDC
`deep_audit`	Full OWASP Top 10, SCA, logic flaws, gas optimization	$0.50 USDC
`remediate_code`	Auto-patched code with change explanations, ready for PR	$5.00 USDC

Agent Discovery Flow

Code

1. Agent queries MCP Registry for "security audit" tools
2. PYRESEC appears in results with tool schemas
3. Agent calls quick_scan with source code
4. PYRESEC returns 402 with x402 payment requirements
5. Agent's x402 wallet pays USDC on Base
6. Agent resubmits with payment proof
7. PYRESEC returns findings as structured JSON

Self-Sustaining Agent

PYRESEC runs as an autonomous agent on Base Mainnet:

Heartbeat every 30 min — checks balance, reports health
Death — shuts down if balance < $0.05
Replication — sends 50% surplus to dev wallet when balance > $20
Kill switch — admin can halt all instances remotely

Deployment

Docker

Terminal

docker build -t pyresec-agent .
docker run -p 8080:8080 --env-file .env pyresec-agent

Google Cloud Run

bash

gcloud run deploy pyresec-agent \
  --source . \
  --platform managed \
  --region us-central1 \
  --allow-unauthenticated \
  --set-env-vars "CDP_WALLET_SECRET=$CDP_WALLET_SECRET,GROQ_API_KEY=$GROQ_API_KEY"

Company

NanoClone Life Sciences Ltd. (UK) Website: nanoclonesystems.com

License

Proprietary. See LICENSE for details.

Read the full README →View source on GitHub →

Related MCP Servers

View all in Finance & Fintech View all alternatives

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about PYRESEC AI Code Security Auditing

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/pyresec-ai-code-security-auditing?style=directory)](https://allmcps.com/mcp/pyresec-ai-code-security-auditing)

HTML Embed

<a href="https://allmcps.com/mcp/pyresec-ai-code-security-auditing"><img src="https://allmcps.com/api/badge/pyresec-ai-code-security-auditing?style=directory" alt="PYRESEC   AI Code Security Auditing on AllMCPs" /></a>

Technical Specs & Signals

CategoryFinance & Fintech

27Quality signal: Emerging · 27/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership8/20

Documentation & tools11/30

Adoption & activity1/15

Community engagement0/10

★ Featured

Moxie Docs MCP

MCP & Agent Skills for Automated Documentation, and codebase conventions + context

Explore Server →

Own this project?

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.