Skip to content
Home Products
Tools
mpx-scan mpx-api mpx-db mpx-secrets-audit Compare Pricing Docs About GitHub

Developer tools that don't suck.

AI-native CLI tools for developers and AI agents. Built for the terminal. Powered by MCPMCP (Model Context Protocol) โ€” lets AI assistants like Claude and GPT use CLI tools directly. Think of it as plugins for AI..

Free to start. No account needed. Works with Claude, GPT, Copilot, Cursor, and any MCP-compatible AI.

npm i -g mpx-scan
Terminal โ€” mpx-scan
$ npx mpx-scan https://example.com
๐Ÿ”’ Scanning https://example.com...
โœ“ SSL Certificate: Valid (expires in 87 days)
โœ— HSTS Header: Missing
โœ— CSP Header: Not configured
โœ“ X-Frame-Options: SAMEORIGIN
โš  Cookies: 2 missing Secure flag
โœ“ DNS: SPF record found
Security Score: 68/100
Grade: C+ โ€” Run with --fixes for server configs

Four tools. Zero bloat.

Each tool does one thing well. No 200MB Electron apps. No mandatory accounts. Just npm install and go.

mpx-scan

Find security holes before hackers do. Headers, SSL, cookies, DNS โ€” scanned in seconds, not hours.

npm version monthly downloads GitHub stars
npm i -g mpx-scan
Free AI-Native MCP
mpx-api

We think Postman is bloated. You probably do too. Test APIs from your terminal in one command.

npm version monthly downloads GitHub stars
npm i -g mpx-api
Free AI-Native MCP
mpx-db

One CLI for SQLite, PostgreSQL, and MySQL. Query, migrate, inspect. No more juggling database GUIs.

npm version monthly downloads GitHub stars
npm i -g mpx-db
Free AI-Native MCP
mpx-secrets-audit

Your API keys are probably in a git repo somewhere. Find them before someone else does.

npm version monthly downloads GitHub stars
npm i -g mpx-secrets-audit
Free AI-Native MCP
See Full Feature Breakdown โ†’
4 CLI Tools
100% Open Source (MIT)
MCP AI-Native
$0 To Get Started

Your AI already knows how to use these.

Every tool is an MCPMCP (Model Context Protocol) โ€” the standard that lets AI assistants discover and use CLI tools directly. No plugins, no integrations โ€” just add to your config. server. Tell your AI "scan this website" and it just works. --json output, --schema discovery, predictable exit codes.

MCP Server Mode

Run mpx-scan mcp and your AI agent can discover and invoke it automatically. Zero integration work.

--json Everything

Every command spits out clean JSON. Pipe it, parse it, feed it to your CI/CD. No regex required.

--schema Discovery

AI agents run --schema to learn the entire API surface. Self-documenting tools that explain themselves.

Composable Pipelines

stdin/stdout, --batch, --quiet. Chain tools together like Unix intended. Your scripts will thank you.

Works with any MCP-compatible AI

Claude GPT Copilot Cursor Windsurf Any MCP Client
Add to your MCP config โ€” instant AI superpowers
{
  "mcpServers": {
    "mpx-scan": { "command": "npx", "args": ["-y", "mpx-scan", "mcp"] },
    "mpx-api": { "command": "npx", "args": ["-y", "mpx-api", "mcp"] },
    "mpx-db": { "command": "npx", "args": ["-y", "mpx-db", "mcp"] },
    "mpx-secrets-audit": { "command": "npx", "args": ["-y", "mpx-secrets-audit", "mcp"] }
  }
}

Why developers choose Mesaplex

We built the tools we wished existed. Then we made them free.

Terminal-native, not terminal-adjacent

No Electron. No browser tabs. No 500MB installs. Just npm install and you're scanning in 10 seconds.

Actually free, not "free"

The free tier solves real problems. No crippled demos, no "upgrade to see results." We're not that kind of company.

No account. No tracking. No BS.

Install and use. That's it. No email verification, no OAuth dance. Your data stays on your machine where it belongs.

Open source, MIT licensed

Read the code. Fork it. Submit PRs. We build in the open because developer tools should be trustworthy.