広告掲載
MCP.so
ログイン

PCI DSS MCP Server

@shyshlakov

リポジトリ

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

作者

shyshlakov

投稿者

Oleksandr

PCI DSS MCP Server について

PCI DSS v4.0.1 static-analysis MCP server for Go payment service codebases. 12 scanners detect PAN/CVV exposure, weak crypto, missing audit logs, vulnerable deps, TLS misconfig, auth weaknesses, plus CycloneDX 1.6 SBOM generation. Each finding maps to the exact PCI requirement. A

#security#compliance#pci-dss#static-analysis#golang#payments#audit#encryption#sbom

PCI DSS MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "pci-dss-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--mount",
        "type=bind,src=/path/to/your/go/src,dst=/path/to/your/go/src,readonly",
        "ghcr.io/shyshlakov/pci-dss-mcp:v0.6.2"
      ]
    }
  }
}

PCI DSS MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is PCI DSS MCP?

Static-analysis MCP server that detects PCI DSS v4.0.1 violations in Go payment service codebases. Every finding maps to a specific PCI DSS requirement number. Built for developers, QSAs, and CI gates.

How to use PCI DSS MCP?

Install via Docker (mount your Go source read-only) or go install github.com/shyshlakov/pci-dss-mcp@v0.6.2. Add the corresponding command to your MCP client configuration (e.g., pci-dss-mcp or the docker run command).

Key features of PCI DSS MCP?

  • PAN/CVV storage, masking, and zeroing detection
  • Weak encryption and hardcoded key checks
  • TLS misconfiguration auditing (cipher, version)
  • Secrets and credentials in configuration detection
  • Missing or unstructured audit log identification
  • Dependency vulnerability scanning via OSV.dev (offline)

Use cases of PCI DSS MCP?

  • Pre-commit scanning for developers writing payment code
  • Pre-assessment scans for Qualified Security Assessors (QSAs)
  • CI/CD pipeline gates to block PCI DSS violations before deploy
  • Automated generation of PCI DSS compliance reports
  • AI-assisted triage of findings for prioritized remediation

よくある質問

1

Is PCI DSS MCP a replacement for broad SAST or a QSA?

No. It only covers about 6% of PCI DSS v4.0.1 controls. It is not a replacement for Semgrep, CodeQL, gosec for OWASP Top 10, or a Qualified Security Assessor.

2

How do I install and configure PCI DSS MCP?

Use Docker (`ghcr.io/shyshlakov/pci-dss-mcp:v0.6.2`) with a bind mount to your Go source, or install via `go install`. Then add the command to your MCP client config.

3

What does PCI DSS MCP scan?

It runs 12 scanners over Go source code and configuration files, each mapped to specific PCI DSS requirement numbers (e.g., 3.3.1, 4.2.1, 8.6.2, 10.2

コメント

「開発者ツール」の他のコンテンツ

ArtiBot Cloud MCP - Zhijiangyun 智匠云

bofob

ArtiBot Cloud MCP (Zhijiangyun 智匠云) — cloud MCP server for robot manipulation data & GPU workloads. 15 tools: robot fleet management, data collection & video recording, post-processing pipelines, and benchmark evaluation

1

UXMachine

UXMachine

UXMachine measures a web page in a real browser and returns verifiable observations, each with its evidence and its limits. It opens the address on desktop (1280×800) and mobile (390×844) and follows the site's own links

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

4

TaskerArmy Agent

TaskerArmy

Ask Claude or ChatGPT what Shopify theme optimization tasks are pending on your store, a remote MCP server for TaskerArmy Agent accounts.

LastPing

LastPing

Know when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci

広告掲載