Data Hogo is a local-first security scanner CLI that reads a project on your machine, detects vulnerabilities and secrets, and prints findings to the terminal. It can also output SARIF/JSON for CI, scan deployed URLs, and use an optional Anthropic API key for AI-generated explanations and fixes.
From the registry: Scan a project for security issues locally with the open-source Data Hogo engine.
Please install the `datahogo` MCP server into my current AI client (that's you).
Required prerequisites (do these first if not already done):
- **Install Node.js 18 or newer** — Node.js is required to run the MCP server via npx. The README indicates Node >= 18. (https://nodejs.org/)
Canonical MCP server config (stdio transport):
- command: `npx`
- args: ["-y","@datahogo/mcp"]
Note: The README explicitly says to use the MCP server with the command `npx -y @datahogo/mcp` over stdio. No environment variables are required for the MCP server in the documented setup. The separate CLI supports `ANTHROPIC_API_KEY` for `--explain`, but the MCP section says the agent writes explanations/fixes itself at no AI cost, so no env var is documented as required for MCP.
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.ANTHROPIC_API_KEYrequiredEnables AI explanations and fix suggestions via AnthropicDead code, security, secrets detection and code quality for Python, TypeScript, Go.