security-use/mcp

このページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。原文を見る

3 stars 0 forks 品質 62 トレンド 10

An MCP (Model Context Protocol) server that gives AI assistants like Cursor, Claude, and other MCP-compatible tools the ability to scan for security vulnerabilities and automatically fix them.

概要

An MCP (Model Context Protocol) server that gives AI assistants like Cursor, Claude, and other MCP-compatible tools the ability to scan for security vulnerabilities and automatically fix them. This MCP server exposes powerful security tools to your AI assistant: - : requirements.txt, pyproject.toml, Pipfile, Pipfile.lock, poetry.lock, setup.py - : package.json, package-lock.json, yarn.lock - : pom.xml, build.gradle - : csproj, packages.config - : composer.json, composer.lock - : environment.yml - (.tf files) - (.yaml, .yml, .json) - - The scanner checks for misconfigurations across multiple cloud providers: - S3 buckets with public access or missing encryption - Security groups with unrestricted ingress - RDS/EBS without encryption - CloudTrail not enabled - IAM users without MFA - Storage accounts with public access - Network security group issues - Key Vault misconfigurations - Cloud Storage bucket permissions - Firewall rules - KMS configurations

README

以下は原文 README の抜粋です。原文を見る。

Security-Use MCP Server

An MCP (Model Context Protocol) server that gives AI assistants like Cursor, Claude, and other MCP-compatible tools the ability to scan for security vulnerabilities and automatically fix them.

What It Does

This MCP server exposes powerful security tools to your AI assistant:

Core Security Tools

Tool	Description
`scan_dependencies`	Scans your project’s dependencies for known vulnerabilities using the OSV database
`scan_iac`	Scans Infrastructure as Code files for security misconfigurations
`fix_vulnerability`	Automatically updates vulnerable packages to secure versions
`fix_iac`	Generates and applies fixes for IaC security issues

SBOM & Compliance Tools

Tool	Description
`generate_sbom`	Generate Software Bill of Materials in CycloneDX or SPDX format
`check_compliance`	Check against SOC2, HIPAA, PCI-DSS, NIST 800-53, CIS, and ISO 27001

Runtime Security Tools

Tool	Description
`detect_vulnerable_endpoints`	Find API endpoints using vulnerable packages
`analyze_request`	Analyze HTTP requests for SQL injection, XSS, and other attacks
`get_sensor_config`	Generate SecurityMiddleware configuration for FastAPI/Flask

GitHub Integration

Tool	Description
`create_fix_pr`	Create a GitHub PR with security fixes

Supported Formats

Dependency Scanning

Python: requirements.txt, pyproject.toml, Pipfile, Pipfile.lock, poetry.lock, setup.py
JavaScript/Node.js: package.json, package-lock.json, yarn.lock
Java: pom.xml, build.gradle
.NET: csproj, packages.config
PHP: composer.json, composer.lock
Conda: environment.yml

Infrastructure as Code

Terraform (.tf files)
AWS CloudFormation (.yaml, .yml, .json)
AWS SAM templates
AWS CDK synthesized output

IaC Security Rules

The scanner checks for misconfigurations across multiple cloud providers:

AWS

S3 buckets with public access or missing encryption
Security groups with unrestricted ingress
RDS/EBS without encryption
CloudTrail not enabled
IAM users without MFA

Azure

Storage accounts with public access
Network security group issues
Key Vault misconfigurations

GCP

Cloud Storage bucket permissions
Firewall rules
KMS configurations

Kubernetes

Container security contexts
Network policies
RBAC configurations

Compliance Frameworks

SOC 2 Type II controls
HIPAA Security Rule
PCI-DSS v4.0
NIST 800-53
CIS Benchmarks (AWS, Azure, GCP, Kubernetes)
ISO 27001

Installation

From PyPI

pip install security-use-mcp

From Source

git clone https://github.com/security-use/mcp.git
cd mcp
pip install -e .

Quick Setup for Cursor

Install the package (see above)

GitHub で README 全文を見る

インストール

This server does not publish a one-line install command.

Open the repository installation guide MCP 初心者？mcpskill.org のガイドから始めましょう →

設定

{
  "mcpServers": {
    "security-use": {
      "command": "security-use-mcp",
      "args": [],
      "env": {}
    }
  }
}