What it does

SAST/DAST scanners (Bandit, Semgrep, Trivy, CodeQL, OWASP ZAP and more) with closed-loop remediation, SARIF/SBOM/VEX export and compliance reporting.

Local connectionPricing not confirmedv0.8.3

Connection manifest

Public connection metadata from the source. Follow the provider’s setup guide for authentication, permissions, and required variables.

{
  "name": "io.github.Skyrxin/sast-mcp-server",
  "version": "0.8.3",
  "repository": {
    "url": "https://github.com/Skyrxin/sast-mcp-server"
  },
  "remotes": [],
  "packages": [
    {
      "registryType": "pypi",
      "identifier": "sast-mcp-server",
      "version": "0.8.3",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "name": "SAST_MCP_TIMEOUT",
          "isRequired": false
        },
        {
          "name": "SAST_MCP_LOG_LEVEL",
          "isRequired": false
        },
        {
          "name": "SAST_MCP_API_KEY",
          "isRequired": false
        },
        {
          "name": "SAST_MCP_JWT_SECRET",
          "isRequired": false
        }
      ]
    }
  ]
}

Metadata reviewed for listing. Server code, permissions, and runtime behavior have not been security-audited. Directory access is free; individual providers may charge.