SAST MCP Server

Indexed by io.github.Skyrxin

About

11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations

Use this server

Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.

Transportstdio (runs a local command)

Env varsSAST_MCP_TIMEOUT SAST_MCP_LOG_LEVEL SAST_MCP_API_KEY SAST_MCP_JWT_SECRET

Claude Code

claude mcp add --env SAST_MCP_TIMEOUT= --env SAST_MCP_LOG_LEVEL= --env SAST_MCP_API_KEY= --env SAST_MCP_JWT_SECRET= sast-mcp-server -- uvx sast-mcp-server

Cursor

Add to Cursor

If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.

VS Code

code --add-mcp '{"name":"sast-mcp-server","command":"uvx","args":["sast-mcp-server"],"env":{"SAST_MCP_TIMEOUT":"","SAST_MCP_LOG_LEVEL":"","SAST_MCP_API_KEY":"","SAST_MCP_JWT_SECRET":""}}'

JSON

{
  "mcpServers": {
    "sast-mcp-server": {
      "command": "uvx",
      "args": [
        "sast-mcp-server"
      ],
      "env": {
        "SAST_MCP_TIMEOUT": "",
        "SAST_MCP_LOG_LEVEL": "",
        "SAST_MCP_API_KEY": "",
        "SAST_MCP_JWT_SECRET": ""
      }
    }
  }
}

Environment variables are listed by name only — fill in your own values. Entries never carry secrets.