Run Offensive360 SAST scans (60+ languages) on local code; findings with file/line and fixes
Connect Runs on your machine
claude mcp add o360-mcp -e O360_URL=<O360_URL> -e O360_TOKEN=<O360_TOKEN> -- npx -y [email protected]
{
"mcpServers": {
"o360-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"O360_URL": "<O360_URL>",
"O360_TOKEN": "<O360_TOKEN>"
}
}
}
}
{
"mcpServers": {
"o360-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"O360_URL": "<O360_URL>",
"O360_TOKEN": "<O360_TOKEN>"
}
}
}
}
{
"servers": {
"o360-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"O360_URL": "<O360_URL>",
"O360_TOKEN": "<O360_TOKEN>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
O360_URLOptional | Offensive360 instance base URL |
O360_TOKENRequired, secret | External scan token (free for public repos: https://offensive360.com/free-for-open-source/) |
Details
| Package | [email protected] (NPM, stdio) |
| First published | 2 Aug 2026 |
| Last updated | 2 Aug 2026 |
| Registry name | com.offensive360/o360-mcp |
More developer tools servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
