Up and running in 60 seconds.
No sign-up. No config files. Install one command and start scanning.
Getting Started
All tools are on npm. You need Node.js 18+ and that's it. Seriously.
Install everything (10 seconds)
npm i -g mpx-scan mpx-api mpx-db mpx-secrets-audit
Or install just what you need
npm i -g mpx-scan # Security scanning
npm i -g mpx-api # API testing
npm i -g mpx-db # Database management
npm i -g mpx-secrets-audit # Secret auditing
Or skip installation entirely (npx)
npx mpx-scan https://example.com
npx mpx-api get https://api.github.com/users/github
npx mpx-db query "SELECT * FROM users" --db=./app.db
npx mpx-secrets-audit scan ./my-project
Verify it works
mpx-scan --version # Should show 1.1.0
mpx-api --version
mpx-db --version
mpx-secrets-audit --version
System Requirements
- Node.js 18+ โ Download from nodejs.org (LTS recommended)
- npm 9+ โ comes with Node.js
- macOS, Linux, or Windows (WSL recommended on Windows)
AI Agent Integration (MCPMCP (Model Context Protocol) โ the standard that lets AI assistants like Claude and GPT discover and use CLI tools directly. No plugins needed.)
Every tool doubles as an MCP server. Add it to your AI's config and it can discover, invoke, and parse results automatically. No integration code. No plugins.
One config, four AI superpowers
Add this to your MCP configuration file (e.g., claude_desktop_config.json):
{
"mcpServers": {
"mpx-scan": {
"command": "npx",
"args": ["-y", "mpx-scan", "mcp"]
},
"mpx-api": {
"command": "npx",
"args": ["-y", "mpx-api", "mcp"]
},
"mpx-db": {
"command": "npx",
"args": ["-y", "mpx-db", "mcp"]
},
"mpx-secrets-audit": {
"command": "npx",
"args": ["-y", "mpx-secrets-audit", "mcp"]
}
}
}
That's it. Now tell your AI "scan example.com for security issues" and it just works.
Programmatic usage
# JSON output for parsing
mpx-scan https://example.com --json
# Schema discovery โ AI agents use this to learn the tool
mpx-scan --schema
# Batch processing via stdin
cat urls.txt | mpx-scan --batch --json
# Quiet mode
mpx-api get https://api.example.com --quiet --json
Exit codes (for automation)
- 0 โ Success
- 1 โ Failure (tool ran, found issues)
- 2 โ Usage error (bad arguments)
- 3 โ Configuration error
- 4 โ Network/connectivity error
Quick Start: mpx-scan
Point it at a URL. Get a security score. Fix what's broken.
# Basic scan
mpx-scan https://example.com
# JSON output for CI/CD
mpx-scan https://example.com --json > results.json
# Generate fix configs for your web server
mpx-scan https://example.com --fixes
# MCP server mode
mpx-scan mcp
Full mpx-scan docs โ ยท GitHub README โ
Quick Start: mpx-api
Test APIs without opening Postman. Your terminal is right there.
# GET request
mpx-api get https://api.github.com/users/github
# POST with JSON body
mpx-api post https://httpbin.org/post --json '{"name":"test"}'
# Run a test collection
mpx-api run api-tests.yml
# Mock server
mpx-api mock --port 3000 mock-spec.yml
Full mpx-api docs โ ยท GitHub README โ
Quick Start: mpx-db
Query databases from the command line. Like it was always supposed to work.
# Query a SQLite database
mpx-db query "SELECT * FROM users LIMIT 10" --db=./app.db
# Inspect schema
mpx-db schema users --db=./app.db
# JSON output
mpx-db query "SELECT * FROM users" --db=./app.db --json
Full mpx-db docs โ ยท GitHub README โ
Quick Start: mpx-secrets-audit
Find the API keys someone forgot to .gitignore.
# Scan a project for secrets
mpx-secrets-audit scan ./my-project
# JSON output for CI/CD
mpx-secrets-audit scan ./my-project --json
Full mpx-secrets-audit docs โ ยท GitHub README โ
Troubleshooting
Command not found?
# Check npm global bin is in PATH
npm config get prefix
export PATH="$(npm config get prefix)/bin:$PATH"
# Or just use npx (always works)
npx mpx-scan https://example.com
Permission denied?
# Use npx (no global install needed)
npx mpx-scan https://example.com
Node version too old?
node --version # Need 18+
nvm install --lts && nvm use --lts
Still stuck?
Open a GitHub issue or email support@mesaplex.com.
Include what you ran, the error, and your node --version.
Pro tip: Every tool has built-in help. Run mpx-scan --help to see all commands and options. Run mpx-scan --schema to get the full API as JSON.