securityscorecard-mcp
About
Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial).
Use this server
Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.
Transportstdio (runs a local command)
Env vars
SECURITY_SCORECARD_API_TOKEN COMPANY_DOMAINClaude Code
claude mcp add --env SECURITY_SCORECARD_API_TOKEN= --env COMPANY_DOMAIN= securityscorecard-mcp -- npx @callmarcus/securityscorecard-mcp
Cursor
If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.
VS Code
code --add-mcp '{"name":"securityscorecard-mcp","command":"npx","args":["@callmarcus/securityscorecard-mcp"],"env":{"SECURITY_SCORECARD_API_TOKEN":"","COMPANY_DOMAIN":""}}'
JSON
{
"mcpServers": {
"securityscorecard-mcp": {
"command": "npx",
"args": [
"@callmarcus/securityscorecard-mcp"
],
"env": {
"SECURITY_SCORECARD_API_TOKEN": "",
"COMPANY_DOMAIN": ""
}
}
}
}
Environment variables are listed by name only — fill in your own values. Entries never carry secrets.