DevSecOps MCP Server

@jmstar85

代码仓库

基本信息

分类

其他

传输方式

stdio

作者

jmstar85

提交者

Chris Jung

关于 DevSecOps MCP Server

A comprehensive Model Context Protocol (MCP) server that integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and Software Composition Analysis (SCA) tools for AI-powered DevSecOps aut

#devsecops-sast-dast-iast-sca

DevSecOps MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "devsecops": {
      "command": "node",
      "args": [
        "dist/src/mcp/server.js"
      ],
      "cwd": "/path/to/DevSecOps-MCP",
      "env": {
        "NODE_ENV": "production",
        "MCP_PORT": "3000",
        "LOG_LEVEL": "info",
        "SECURITY_STRICT_MODE": "true"
      }
    }
  }
}

DevSecOps MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is DevSecOps Mcp?

DevSecOps Mcp is an MCP server that provides a suite of security scanning tools for SAST, DAST, SCA, and IAST analysis, along with security report generation and policy validation. It is built for developers and security teams who want to integrate automated security testing into their CI/CD pipelines.

How to use DevSecOps Mcp?

The server exposes MCP tools that are invoked by an MCP client with the required input parameters (e.g., target path, scan type, tool selection). The README also includes test scripts (e.g., node test-all-security.js) for verifying functionality.

Key features of DevSecOps Mcp

Execute SAST scans with rules and severity thresholds.
Run DAST scans with configurable scan types and authentication.
Perform SCA dependency scans across multiple package managers.
Conduct IAST‑like security analysis in different environments.
Generate comprehensive security reports in JSON, HTML, PDF, or SARIF.
Validate security policies against scan results.
Proven accuracy: SAST 95%+, DAST 100%, SCA 100%, IAST 90%+.
OWASP Top 10 coverage and 20+ CWE types detected.

Use cases of DevSecOps Mcp

Automate static code analysis in a development workflow.
Scan live web applications for runtime vulnerabilities.
Check open‑source dependencies for known vulnerabilities.
Produce detailed security reports with remediation guidance.
Enforce security policy compliance across projects.

常见问题

What security scans does DevSecOps Mcp support?

It supports SAST, DAST, SCA, and IAST scans, each with configurable parameters.

Which security tools are integrated?

SAST can use SonarQube, Semgrep, or auto‑select. SCA uses osv‑scanner, Trivy, npm‑audit, or auto. IAST supports Trivy and OWASP ZAP.

What are the verified accuracy rates?

SAST: 95%+ accuracy; DAST: 100%; SCA: 100%; IAST: 90%+ (simulated). All tests were performed on 2025-07-06.

Does it cover the OWASP Top 10?

Yes, 100% coverage of the OWASP Top 10 has been confirmed.

Which programming languages are supported?

JavaScript and Python are fully verified.

其他分类下的更多 MCP 服务器

MCP Toolbox for Databases

googleapis

MCP Toolbox for Databases is an open source MCP server for databases.

15.9K

Handl

Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.

PickFu MCP

PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct

Arsen MCP

Arsen Security

Run advanced phishing, voice phishing, deepfake fraud simulations, and cybersecurity awareness training from your AI assistant.

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w