広告掲載
MCP.so
ログイン

MCP Security Scans

@mcp-research

リポジトリ

基本情報

カテゴリ

開発者ツール

ライセンス

MIT license

トランスポート

stdio

作者

mcp-research

MCP Security Scans について

Research project by

#mcp-security#security-scans#github-automation

MCP Security Scans の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "mcp-security-scans": {
      "command": "python",
      "args": [
        "-m",
        "venv",
        ".venv"
      ]
    }
  }
}

MCP Security Scans のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is MCP Security Scans?

MCP Security Scans is a Python script that automates forking repositories from the mcp-agents-ai/mcp-agents-hub and enabling GitHub Advanced Security (GHAS) features on the forks. It is designed for developers and security teams who want to centralize and secure MCP server configurations.

How to use MCP Security Scans?

Clone the repository, create a Python virtual environment, install dependencies from requirements.txt and requirements-dev.txt, set up a GitHub App with required permissions, then set the GH_APP_ID and GH_APP_PRIVATE_KEY environment variables. Run python -m src.process_mcp_repos to fork and enable security features; optionally use --target-org to specify a different target organization.

Key features of MCP Security Scans

  • Supports loading MCP server configurations from multiple repository sources.
  • Authenticates with GitHub using a GitHub App.
  • Forks repositories into a specified target organization.
  • Checks for existing forks before creating new ones.
  • Enables Dependency Scanning, Security Fixes, Secret Scanning, and Code Scanning.
  • Reports total repos processed and Dependabot configuration status.

Use cases of MCP Security Scans

  • Automate centralizing MCP server repositories under a single organization.
  • Enforce baseline security scanning on all forked MCP repositories.
  • Identify which forks lack a Dependabot configuration for dependency updates.
  • Integrate security compliance into an MCP repository management pipeline.

よくある質問

1

What dependencies are required?

Python 3, a virtual environment, and packages listed in `requirements.txt` and `requirements-dev.txt`.

2

How do I authenticate with GitHub?

You must create a GitHub App, grant it the necessary repository and organization permissions, install it on the target organization, and set the `GH_APP_ID` and `GH_APP_PRIVATE_KEY` environment variables.

3

What GitHub Advanced Security features does it enable?

It enables Dependency Scanning (Vulnerability Alerts), Automated Security Fixes, Secret Scanning, and Code Scanning with Default Setup (where supported).

4

Can I fork repositories into a different organization?

Yes, use the `--target-org` argument when running the script; the default organization is `mcp-research`.

5

How does the script handle already-forked repositories?

It checks if a fork already exists before attempting to create one, avoiding duplicate forks.

コメント

「開発者ツール」の他のコンテンツ

Perfex CRM

themesic

Turn Perfex CRM into an AI-ready workspace. This MCP server exposes your full REST API to Claude, ChatGPT and any AI agent, so leads, invoices and tasks are one prompt away.

1

endoflife.ai

endoflife.ai

Free MCP server for software end-of-life intelligence: EOL dates, support status, and the 0-100 EOL Risk Score across 480+ tracked products. Agents can check a single version, pull a product's full lifecycle schedule, or

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

4

Capgo MCP

Cap-go

Console, Backend and CLI to manage Capgo Instant update and Native build for Capacitor apps Build and upload to app store your mobile app

NextBlock CMS

NextBlock

Open-source Next.js + Supabase CMS with a per-site MCP server: scaffold a site, then create pages, posts, navigation, media and SEO from Claude, Cursor or any MCP client. Streamable HTTP with a bearer token you mint in y

広告掲載