Dr.Deploy
A live monitor for shipped websites. Watches your live URL and catches the embarrassing things you didn't notice — leaked API keys, broken og:image, missing favicons, exposed .env files, security header gaps. Within seconds of every deploy.
This repo is the public source for everything that runs outside the Dr.Deploy service: the CLI, the MCP server, and the Claude Code skills.
What's here
| Package | What it is | Install |
|---|
@drdeploy/cli | drdeploy command-line tool. Single static binary. macOS + Linux. | npm i -g @drdeploy/cli or curl -fsSL drdeploy.dev/install | sh |
@drdeploy/mcp | Model Context Protocol server. Bundled into the CLI binary; published separately for non-CLI MCP use cases. | npm i @drdeploy/mcp |
@drdeploy/skills | Claude Code / Cursor / Cline skills. Drops SKILL.md files + downloads the binary + adds drdeploy routing to CLAUDE.md. | npx @drdeploy/skills setup |
Install paths
The same product, six surfaces:
curl -fsSL https://drdeploy.dev/install | sh
brew install dr-deploy/tap/drdeploy
npm install -g @drdeploy/cli
npx @drdeploy/skills setup
> /plugin marketplace add Dr-Deploy/drdeploy
> /plugin install drdeploy
MCP server (for AI editors)
DRDEPLOY_TOKEN=$(cat ~/.config/drdeploy/token) npx @drdeploy/mcp
drdeploy mcp install --client claude
drdeploy mcp install --client cursor
drdeploy mcp install --client cline
The MCP server is also published to the official MCP Registry at io.github.dr-deploy/drdeploy-mcp, which means it's discoverable from Smithery, mcp.so, and any other MCP-aware client that pulls from the canonical registry.
What does it actually catch
- Leaked API keys in your live JS bundle (OpenAI
sk-*, Anthropic sk-ant-*, Stripe sk_live_*, AWS AKIA*, GitHub ghp_*, Slack xoxb-*)
- Broken or missing og:image, twitter:card, favicon
- Exposed
.env, .git/config, .DS_Store at common paths
- Missing security headers (CSP, HSTS, X-Frame-Options)
- TLS issues (expiring certs, weak ciphers, mixed content)
- Title / meta description truncation, broken canonical URLs
- 37+ checks across 7 categories. Full list in drdeploy.dev/checks.
Usage
$ drdeploy login
$ drdeploy add example.com
$ drdeploy scan example.com
✓ Scan queued (run
Watch progress on the dashboard or rerun: drdeploy scan example.com
For Claude Code / Cursor / Cline:
$ npx @drdeploy/skills setup
✓ drdeploy CLI 0.1.0 installed
✓ Wrote ~/.claude/skills/drdeploy/SKILL.md
? Append drdeploy routing rules to CLAUDE.md? (Y/n)
# Now in your AI editor:
> /drdeploy scan myapp.com
Development
git clone https://github.com/Dr-Deploy/drdeploy.git
cd drdeploy
bun install
bun run typecheck
bun test
This is a Bun workspace. Each package has its own package.json and TS config extending tsconfig.base.json.
Building the CLI binary
cd packages/cli
bun run build
bun run build:all
Releases
Releases are managed via Changesets. To propose a release:
bun run changeset
git commit -am "chore: release"
License
MIT. See LICENSE.
Links