NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Security

GSC Scanner

io.github.poliakarmai/gsc-scanner ยท v1.0.0

Local security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.

Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add gsc-scanner -e GSC_ALLOWED_ROOTS=<GSC_ALLOWED_ROOTS> -- docker run -i --rm ghcr.io/poliakarmai/gsc-scanner:v1
claude_desktop_config.json
{
  "mcpServers": {
    "gsc-scanner": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/poliakarmai/gsc-scanner:v1"
      ],
      "env": {
        "GSC_ALLOWED_ROOTS": "<GSC_ALLOWED_ROOTS>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "gsc-scanner": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/poliakarmai/gsc-scanner:v1"
      ],
      "env": {
        "GSC_ALLOWED_ROOTS": "<GSC_ALLOWED_ROOTS>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "gsc-scanner": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/poliakarmai/gsc-scanner:v1"
      ],
      "env": {
        "GSC_ALLOWED_ROOTS": "<GSC_ALLOWED_ROOTS>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
GSC_ALLOWED_ROOTS
Optional		Path inside the container that scan_repo/scan_diff may read.

Details

Packageghcr.io/poliakarmai/gsc-scanner:v1 (OCI, stdio)
First published25 Oct 2026
Last updated25 Oct 2026
Registry nameio.github.poliakarmai/gsc-scanner

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.