How Rixel fits together

Postgres, scans, findings, fixes, and the MCP server for your AI assistant — all connected to your GitHub repos.

What is Rixel

Rixel continuously audits your GitHub repositories for security issues, explains them in plain English, and opens fix PRs. Track projects, run scans, review findings by severity, and let your AI assistant query everything via MCP.

How it works

Connect GitHub App → Add repos as projects → Scans run (AI + static analysis) → Findings with severity, category, fix prompt → Fix agent opens PRs → Dashboard shows score and activity.

GitHub webhook → Inngest job → Scan agent → Prisma (scan + findings) → Fix agent (optional) → PR via GitHub API

MCP server

The MCP server at /api/mcp exposes 12 read-only tools. Cursor, Claude Desktop, and Claude Code can list your projects, findings, scans, and fix runs without leaving the editor.

Read MCP docs →

Custom providers

BYOK: add OpenAI, Anthropic, Groq, OpenRouter, or other cloud provider endpoints in Settings → Models. Encrypted with SECRETS_ENCRYPTION_KEY. When set, your key is used for scans/fixes and bypasses usage limits.

Custom Provider guide →OpenAI Anthropic MCP legacy

Changelog

All product changes grouped by version — features, improvements, and bug fixes in one place.

Open changelog →