security-advisor

adityabyreddy/security-advisor
★ 1 stars Python AI/LLM Updated today
An oss tools based MCP server framework to analyze source code for security vulnerabilities. It runs SAST, SCA, DAST, and IaC inspection on the repository contents.
View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "security-advisor": {
      "command": "uvx",
      "args": [
        "security-advisor"
      ]
    }
  }
}

Or install with pip: pip install security-advisor

README Excerpt

An **MCP (Model Context Protocol) server** that orchestrates comprehensive security scans — SAST, SCA, and IaC — across any project and produces a unified **SARIF 2.1.0** report consumable by GitHub Advanced Security, VS Code, and other industry-standard tooling. --- Security Advisor exposes five MCP tools that an AI assistant (e.g., Claude, Gemini) can invoke to analyse a codebase:

Tools (14)

MEDIUMdockerscanerrorfastmcpmcpnoterunssecurity_advisor_skillsecurity_container_skillsecurity_iac_scan_skillsecurity_sast_skillsecurity_sca_skillsemgreptrivy