Docs

Self-hosted

Prefer that your code never leaves your machine? SafeWeave's Free and Local Pro tiers run every scanner locally. There is no cloud dependency for a scan — only license verification touches our servers.

Run it locally

npx -y safeweave-mcp scan .

Local Pro ($15/mo) unlocks all 8 scanners locally. Set the key in your environment:

SAFEWEAVE_LICENSE_KEY=sw_shpro_xxx npx -y safeweave-mcp scan .

What is sent, and what isn't

On Local Pro, scans still run locally and your source never leaves — but by default finding metadata (file path, line, severity, CWE — never source, snippets, or remediation text) is synced to your dashboard. Turn that off entirely:

npx -y safeweave-mcp scan . --no-report

See the full per-plan data-flow table on the security page.

Docker (advanced)

To run the full scanner stack as services, use the Docker Compose setup in the repo:

cd docker && docker compose up