HomeSecurity › SAST MCP Server

SAST MCP Server

11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations

Python Local macOSWindowsLinux
★ 3 stars Last pushed 2026-06-29 License: MIT

Topics: Security

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (pypi 0.8.3)

uvx sast-mcp-server

Or add to your MCP client config:

{
  "mcpServers": {
    "sast-mcp-server": {
      "command": "uvx",
      "args": [
        "sast-mcp-server"
      ],
      "env": {
        "SAST_MCP_TIMEOUT": "<YOUR_VALUE>",
        "SAST_MCP_LOG_LEVEL": "<YOUR_VALUE>",
        "SAST_MCP_API_KEY": "<YOUR_VALUE>",
        "SAST_MCP_JWT_SECRET": "<YOUR_VALUE>"
      }
    }
  }
}
  • SAST_MCP_TIMEOUT — Per-scan timeout in seconds (default: 300).
  • SAST_MCP_LOG_LEVEL — Logging level: DEBUG, INFO, WARNING, ERROR (default: INFO).
  • SAST_MCP_API_KEY secret — Optional static API key to require auth (legacy mode; HTTP transports).
  • SAST_MCP_JWT_SECRET secret — Optional HMAC secret to require JWT auth with scopes (HTTP transports).

Related servers

Listed in punkpeye/awesome-mcp-servers (MIT)

Data from the Official MCP Registry