広告掲載
MCP.so
ログイン
D

DevSecOps MCP Server

@jmstar85

リポジトリ

基本情報

カテゴリ

その他

トランスポート

stdio

作者

jmstar85

投稿者

Chris Jung

DevSecOps MCP Server について

A comprehensive Model Context Protocol (MCP) server that integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and Software Composition Analysis (SCA) tools for AI-powered DevSecOps aut

#devsecops-sast-dast-iast-sca

DevSecOps MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "devsecops": {
      "command": "node",
      "args": [
        "dist/src/mcp/server.js"
      ],
      "cwd": "/path/to/DevSecOps-MCP",
      "env": {
        "NODE_ENV": "production",
        "MCP_PORT": "3000",
        "LOG_LEVEL": "info",
        "SECURITY_STRICT_MODE": "true"
      }
    }
  }
}

DevSecOps MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is DevSecOps Mcp?

DevSecOps Mcp is an MCP server that provides a suite of security scanning tools for SAST, DAST, SCA, and IAST analysis, along with security report generation and policy validation. It is built for developers and security teams who want to integrate automated security testing into their CI/CD pipelines.

How to use DevSecOps Mcp?

The server exposes MCP tools that are invoked by an MCP client with the required input parameters (e.g., target path, scan type, tool selection). The README also includes test scripts (e.g., node test-all-security.js) for verifying functionality.

Key features of DevSecOps Mcp

  • Execute SAST scans with rules and severity thresholds.
  • Run DAST scans with configurable scan types and authentication.
  • Perform SCA dependency scans across multiple package managers.
  • Conduct IAST‑like security analysis in different environments.
  • Generate comprehensive security reports in JSON, HTML, PDF, or SARIF.
  • Validate security policies against scan results.
  • Proven accuracy: SAST 95%+, DAST 100%, SCA 100%, IAST 90%+.
  • OWASP Top 10 coverage and 20+ CWE types detected.

Use cases of DevSecOps Mcp

  • Automate static code analysis in a development workflow.
  • Scan live web applications for runtime vulnerabilities.
  • Check open‑source dependencies for known vulnerabilities.
  • Produce detailed security reports with remediation guidance.
  • Enforce security policy compliance across projects.

よくある質問

1

What security scans does DevSecOps Mcp support?

It supports SAST, DAST, SCA, and IAST scans, each with configurable parameters.

2

Which security tools are integrated?

SAST can use SonarQube, Semgrep, or auto‑select. SCA uses osv‑scanner, Trivy, npm‑audit, or auto. IAST supports Trivy and OWASP ZAP.

3

What are the verified accuracy rates?

SAST: 95%+ accuracy; DAST: 100%; SCA: 100%; IAST: 90%+ (simulated). All tests were performed on 2025-07-06.

4

Does it cover the OWASP Top 10?

Yes, 100% coverage of the OWASP Top 10 has been confirmed.

5

Which programming languages are supported?

JavaScript and Python are fully verified.

コメント

「その他」の他のコンテンツ

Blender

ahujasid

Open-source MCP to use Blender with any LLM

23.6K

MCP Toolbox for Databases

googleapis

MCP Toolbox for Databases is an open source MCP server for databases.

15.9K

Screenpipe

screenpipe

YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context

22.0K

ICSS

chokcoco

不止于 CSS

20.7K

Glasswarp

Glasswarp

See and control a real Windows PC you own — from any MCP client, locally or remotely. Observe (UIA + screenshots), click/type/drag/scroll, launch apps, owner Live View. BYOH: your machine, your key.

広告掲載