SAST MCP Server
MCPby Skyrxin · v0.8.3
11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations
mcplocal
MCP configuration
stdio
Command
uvx sast-mcp-server==0.8.3
Environment
SAST_MCP_TIMEOUTPer-scan timeout in seconds (default: 300).
SAST_MCP_LOG_LEVELLogging level: DEBUG, INFO, WARNING, ERROR (default: INFO).
SAST_MCP_API_KEYsecretOptional static API key to require auth (legacy mode; HTTP transports).
SAST_MCP_JWT_SECRETsecretOptional HMAC secret to require JWT auth with scopes (HTTP transports).
Install in one click with Zurek
Browse here, install from the native macOS app — pick targets, fill env vars, and write configs safely.