MMCPMarkets
SU

security-use/mcp

安全测试

本页由 AI 翻译，技术细节请以原文为准。 查看原文

3 stars 0 forks 质量 62 趋势 10
Repository Install

An MCP (Model Context Protocol) server that gives AI assistants like Cursor, Claude, and other MCP-compatible tools the ability to scan for security vulnerabilities and automatically fix them.

概览

An MCP (Model Context Protocol) server that gives AI assistants like Cursor, Claude, and other MCP-compatible tools the ability to scan for security vulnerabilities and automatically fix them. This MCP server exposes powerful security tools to your AI assistant: - : requirements.txt, pyproject.toml, Pipfile, Pipfile.lock, poetry.lock, setup.py - : package.json, package-lock.json, yarn.lock - : pom.xml, build.gradle - : csproj, packages.config - : composer.json, composer.lock - : environment.yml - (.tf files) - (.yaml, .yml, .json) - - The scanner checks for misconfigurations across multiple cloud providers: - S3 buckets with public access or missing encryption - Security groups with unrestricted ingress - RDS/EBS without encryption - CloudTrail not enabled - IAM users without MFA - Storage accounts with public access - Network security group issues - Key Vault misconfigurations - Cloud Storage bucket permissions - Firewall rules - KMS configurations

README

以下为原文 README 节选，完整内容请查看原文。

Security-Use MCP Server

An MCP (Model Context Protocol) server that gives AI assistants like Cursor, Claude, and other MCP-compatible tools the ability to scan for security vulnerabilities and automatically fix them.

What It Does

This MCP server exposes powerful security tools to your AI assistant:

Core Security Tools

Tool Description
scan_dependencies Scans your project’s dependencies for known vulnerabilities using the OSV database
scan_iac Scans Infrastructure as Code files for security misconfigurations
fix_vulnerability Automatically updates vulnerable packages to secure versions
fix_iac Generates and applies fixes for IaC security issues

SBOM & Compliance Tools

Tool Description
generate_sbom Generate Software Bill of Materials in CycloneDX or SPDX format
check_compliance Check against SOC2, HIPAA, PCI-DSS, NIST 800-53, CIS, and ISO 27001

Runtime Security Tools

Tool Description
detect_vulnerable_endpoints Find API endpoints using vulnerable packages
analyze_request Analyze HTTP requests for SQL injection, XSS, and other attacks
get_sensor_config Generate SecurityMiddleware configuration for FastAPI/Flask

GitHub Integration

Tool Description
create_fix_pr Create a GitHub PR with security fixes

Supported Formats

Dependency Scanning

  • Python: requirements.txt, pyproject.toml, Pipfile, Pipfile.lock, poetry.lock, setup.py
  • JavaScript/Node.js: package.json, package-lock.json, yarn.lock
  • Java: pom.xml, build.gradle
  • .NET: csproj, packages.config
  • PHP: composer.json, composer.lock
  • Conda: environment.yml

Infrastructure as Code

  • Terraform (.tf files)
  • AWS CloudFormation (.yaml, .yml, .json)
  • AWS SAM templates
  • AWS CDK synthesized output

IaC Security Rules

The scanner checks for misconfigurations across multiple cloud providers:

AWS

  • S3 buckets with public access or missing encryption
  • Security groups with unrestricted ingress
  • RDS/EBS without encryption
  • CloudTrail not enabled
  • IAM users without MFA

Azure

  • Storage accounts with public access
  • Network security group issues
  • Key Vault misconfigurations

GCP

  • Cloud Storage bucket permissions
  • Firewall rules
  • KMS configurations

Kubernetes

  • Container security contexts
  • Network policies
  • RBAC configurations

Compliance Frameworks

  • SOC 2 Type II controls
  • HIPAA Security Rule
  • PCI-DSS v4.0
  • NIST 800-53
  • CIS Benchmarks (AWS, Azure, GCP, Kubernetes)
  • ISO 27001

Installation

From PyPI

pip install security-use-mcp

From Source

git clone https://github.com/security-use/mcp.git
cd mcp
pip install -e .

Quick Setup for Cursor

  1. Install the package (see above)
在 GitHub 查看完整 README

安装

This server does not publish a one-line install command.

Open the repository installation guide 新手？先看 mcpskill.org 教程 →

配置

{ "mcpServers": { "security-use": { "command": "security-use-mcp", "args": [], "env": {} } } }