Home › Security › SAST MCP Server
SAST MCP Server
11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations
Topics: Security
Connect
Review any command before running it. Package names and URLs come from the server's own registry entry.
Package (pypi 0.8.3)
uvx sast-mcp-server
Or add to your MCP client config:
{
"mcpServers": {
"sast-mcp-server": {
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_TIMEOUT": "<YOUR_VALUE>",
"SAST_MCP_LOG_LEVEL": "<YOUR_VALUE>",
"SAST_MCP_API_KEY": "<YOUR_VALUE>",
"SAST_MCP_JWT_SECRET": "<YOUR_VALUE>"
}
}
}
}
SAST_MCP_TIMEOUT— Per-scan timeout in seconds (default: 300).SAST_MCP_LOG_LEVEL— Logging level: DEBUG, INFO, WARNING, ERROR (default: INFO).SAST_MCP_API_KEYsecret — Optional static API key to require auth (legacy mode; HTTP transports).SAST_MCP_JWT_SECRETsecret — Optional HMAC secret to require JWT auth with scopes (HTTP transports).
Related servers
ida-pro-mcp
MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and…
GhidraMCP
A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling…
jadx-ai-mcp
JADX-AI-MCP is a plugin and MCP Server for the JADX decompiler that integrates directly with Model Context Protocol (MCP) to provide live…
beelzebub
Beelzebub is a honeypot framework that lets you build honeypot tools using MCP. Its purpose is to detect prompt injection or malicious…
SafeDep Vet MCP
Protect your AI agents and IDEs from malicious open-source packages.
skylos
Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
Listed in punkpeye/awesome-mcp-servers (MIT)
Data from the Official MCP Registry