AI-Surface

active

Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS, runs offline.

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Repository: github.com/apisec-inc/AI-Surface
License: MIT
Last update: 2026-10-08
GitHub stars: ★ 144
Homepage: apisec.ai

ai-agents ai-bom ai-coding ai-governance ai-security appsec attack-surface claude-code cursor devops devsecops github-action

Listed in

github · source

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.