Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial).
Connect Runs on your machine
claude mcp add securityscorecard-mcp -e SECURITY_SCORECARD_API_TOKEN=<SECURITY_SCORECARD_API_TOKEN> -e COMPANY_DOMAIN=<COMPANY_DOMAIN> -- npx -y @callmarcus/[email protected]
{
"mcpServers": {
"securityscorecard-mcp": {
"command": "npx",
"args": [
"-y",
"@callmarcus/[email protected]"
],
"env": {
"SECURITY_SCORECARD_API_TOKEN": "<SECURITY_SCORECARD_API_TOKEN>",
"COMPANY_DOMAIN": "<COMPANY_DOMAIN>"
}
}
}
}
{
"mcpServers": {
"securityscorecard-mcp": {
"command": "npx",
"args": [
"-y",
"@callmarcus/[email protected]"
],
"env": {
"SECURITY_SCORECARD_API_TOKEN": "<SECURITY_SCORECARD_API_TOKEN>",
"COMPANY_DOMAIN": "<COMPANY_DOMAIN>"
}
}
}
}
{
"servers": {
"securityscorecard-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@callmarcus/[email protected]"
],
"env": {
"SECURITY_SCORECARD_API_TOKEN": "<SECURITY_SCORECARD_API_TOKEN>",
"COMPANY_DOMAIN": "<COMPANY_DOMAIN>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
SECURITY_SCORECARD_API_TOKENRequired, secret | SecurityScorecard API token (get one from your SecurityScorecard dashboard). |
COMPANY_DOMAINOptional | Optional default company domain for queries (e.g. example.com). |
Details
| Package | @callmarcus/[email protected] (NPM, stdio) |
| First published | 4 Oct 2026 |
| Last updated | 4 Oct 2026 |
| Registry name | io.github.CallMarcus/securityscorecard-mcp |
More other servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
