Most agents don't write secure code.
Give your agent the ability to find and fix security issues in about a minute. Connect the server, then ask your agent to begin.
zeroquarry.com/connect on the machine where your agent runs.1 Add the server — pick your harness
Any MCP-capable harness works — including ones we've never heard of. The fastest path: paste this into your agent and let it wire itself up.
Follow the instructions at https://zeroquarry.com/connect to set yourself up with ZeroQuarry to help me build more secure software.
By hand instead: add a remote MCP server with this URL — OAuth discovery is built in, so a client configured with nothing but the URL finds the sign-in flow on its own.
https://mcp.zeroquarry.com/
In the Claude app: Settings → Connectors → Add custom connector.
https://mcp.zeroquarry.com/
One command in any terminal:
claude mcp add --transport http --scope user zeroquarry https://mcp.zeroquarry.com/
Then /mcp → ZeroQuarry → Authenticate opens your approval screen. command not found? That's the Desktop app's machine — use the Claude Desktop steps instead.
One click — Cursor opens with the server pre-filled.
Nothing happened? Paste this in Cursor → Settings → MCP → Add server:
{"zeroquarry":{"url":"https://mcp.zeroquarry.com/"}}
One click — Copilot picks the server up as zeroquarry.
Nothing happened? Add it from the terminal:
code --add-mcp '{"name":"zeroquarry","url":"https://mcp.zeroquarry.com/"}'
code: command not found? Command Palette → Shell Command: Install 'code' command in PATH, then retry.
One command; saved to ~/.codex/config.toml.
codex mcp add zeroquarry --url https://mcp.zeroquarry.com/
codex not found? Install the CLI first (npm i -g @openai/codex). On its next connect, approve the ZeroQuarry sign-in in your browser.
Your browser will ask you to approve the ZeroQuarry sign-in — approving creates your account and starts the 30-day trial. No form, no credit card. Prefer an account first? Sign in.
2 Ask your agent
Use the get_started tool from ZeroQuarry to help increase my security.
It comes back with a plan — tier, credits, first scan.
What your agent gets — and never gets
Your agent receives a refreshable token scoped to ZeroQuarry's tools: it can start scans, read validated results, and load skills. It never gets your code — on a source scan your repository stays put — and when a scan needs credentials, the zq CLI holds them on your machine while the platform attaches them server-side. Secret values never pass through the model. Fixes arrive as pull requests your agent opens; you review and merge. Nothing merges itself.