Happy slice of mcp pizzaMCP.pizza

rigour

MCP.Pizza Chef: rigour-labs

Rigour acts like an immune system for your AI coding assistant by scanning code for security risks, bugs, and style problems as you write. It works inside popular apps like Claude Desktop, ChatGPT, VS Code, and more, providing real-time alerts and automatic fix instructions without needing accounts or complex setup. It learns your code patterns over time to reduce false alarms and helps your AI assistant self-correct code errors safely and efficiently.

Coding
Other

Use This MCP server To

Scan my codebase for hardcoded secrets instantly Find and fix security vulnerabilities automatically Monitor code quality with real-time feedback Detect AI-generated code errors and hallucinations Track code complexity and structural issues Watch my AI coding assistant self-correct mistakes Learn and adapt to my project’s coding patterns

README

Rigour

npm version cli downloads mcp downloads License: MIT MCP Registry OWASP

Your AI agent just tried to commit an AWS secret. Rigour blocked it in <100ms.

Try it now (zero config)

npx rigour-scan

Works on any repo. No init, no config, no setup. Instant results in your terminal:

  HARDCODED SECRET DETECTED
  AWS_SECRET_ACCESS_KEY found in src/config.ts:23

  + 22 more violations across 847 files (2.1s)

  Score        ████░░░░░░░░░░░░░░░░  34/100
  AI Health    ███░░░░░░░░░░░░░░░░░░  28/100

  Gates:  ✅ file-size  ❌ security  ❌ ast  ✅ deps

  Brain: learned 12 patterns · trend: improving ↑

Add to your AI IDE (30 seconds)

{ "mcpServers": { "rigour": { "command": "npx", "args": ["-y", "@rigour-labs/mcp@5.3.2"] } } }

rigour FAQ

Can I use Rigour to detect hardcoded secrets in my code?
Yes — Rigour scans your code and quickly finds hardcoded secrets like AWS keys, helping keep your code secure.
Can Rigour help me catch security issues like SQL injection or XSS?
Yes — it detects many security risks including SQL injection, cross-site scripting, and other vulnerabilities in your code.
Which apps support Rigour integration?
Rigour works with Claude Desktop, ChatGPT, Cursor, VS Code, Cline, Goose, Windsurf, and more.
Do I need an API key or account to use Rigour?
No — Rigour runs locally with zero telemetry and requires no account or API key.
How hard is it to set up Rigour?
Setup is simple — just add a small config snippet or run a one-line command; no complex installation needed.