security-mcp-server

Bikebrainz/security-mcp-server

★ 0 stars TypeScript 🤖 AI/LLM Updated 5d ago

MCP server exposing 10 security scanners as Claude Code tools (ZAP, Nuclei, Semgrep, Gitleaks, Trivy, Nmap, sqlmap, Nikto, Subfinder, Burp Pro) with correlation, risk scoring, attack-chain analysis, SARIF/JUnit/HTML reports, and stdio + Streamable-HTTP transports.

View on GitHub →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "security-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "Bikebrainz/security-mcp-server"
      ]
    }
  }
}

README Excerpt

An MCP (Model Context Protocol) server that exposes a set of security scanners as tools an MCP client can call. Designed to run as a local stdio child process of an MCP-capable client (e.g. Claude Code), with an optional HTTP transport for cases where stdio isn't enough. This is v2.2. See `CHANGELOG.md` for the full evolution from the v1 archive

Tools (19)

burp_scandependency_scangitleaksniktonikto_scannmapnucleinuclei_scanport_scansast_scansecrets_scansemgrepsqli_scansqlmapsubdomain_scansubfindertrivywaiting_for_slotweb_full_scan

security-mcp-server

Quick Install

README Excerpt

Tools (19)

Related AI/LLM Servers