SAST MCP Server

MCP

by Skyrxin · v0.8.3

11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations

mcplocal

MCP configuration

stdio

Command

uvx sast-mcp-server==0.8.3

Environment

  • SAST_MCP_TIMEOUT

    Per-scan timeout in seconds (default: 300).

  • SAST_MCP_LOG_LEVEL

    Logging level: DEBUG, INFO, WARNING, ERROR (default: INFO).

  • SAST_MCP_API_KEYsecret

    Optional static API key to require auth (legacy mode; HTTP transports).

  • SAST_MCP_JWT_SECRETsecret

    Optional HMAC secret to require JWT auth with scopes (HTTP transports).

Install in one click with Zurek

Browse here, install from the native macOS app — pick targets, fill env vars, and write configs safely.