NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Security

SAST MCP Server

io.github.Skyrxin/sast-mcp-server ยท v0.8.3

11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations

Website Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add sast-mcp-server -e SAST_MCP_TIMEOUT=<SAST_MCP_TIMEOUT> -e SAST_MCP_LOG_LEVEL=<SAST_MCP_LOG_LEVEL> -e SAST_MCP_API_KEY=<SAST_MCP_API_KEY> -e SAST_MCP_JWT_SECRET=<SAST_MCP_JWT_SECRET> -- uvx sast-mcp-server==0.8.3
claude_desktop_config.json
{
  "mcpServers": {
    "sast-mcp-server": {
      "command": "uvx",
      "args": [
        "sast-mcp-server==0.8.3"
      ],
      "env": {
        "SAST_MCP_TIMEOUT": "<SAST_MCP_TIMEOUT>",
        "SAST_MCP_LOG_LEVEL": "<SAST_MCP_LOG_LEVEL>",
        "SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
        "SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "sast-mcp-server": {
      "command": "uvx",
      "args": [
        "sast-mcp-server==0.8.3"
      ],
      "env": {
        "SAST_MCP_TIMEOUT": "<SAST_MCP_TIMEOUT>",
        "SAST_MCP_LOG_LEVEL": "<SAST_MCP_LOG_LEVEL>",
        "SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
        "SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "sast-mcp-server": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "sast-mcp-server==0.8.3"
      ],
      "env": {
        "SAST_MCP_TIMEOUT": "<SAST_MCP_TIMEOUT>",
        "SAST_MCP_LOG_LEVEL": "<SAST_MCP_LOG_LEVEL>",
        "SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
        "SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
SAST_MCP_TIMEOUT
Optional		Per-scan timeout in seconds (default: 300).
SAST_MCP_LOG_LEVEL
Optional		Logging level: DEBUG, INFO, WARNING, ERROR (default: INFO).
SAST_MCP_API_KEY
Optional, secret		Optional static API key to require auth (legacy mode; HTTP transports).
SAST_MCP_JWT_SECRET
Optional, secret		Optional HMAC secret to require JWT auth with scopes (HTTP transports).

Details

Package[email protected] (PYPI, stdio)
First published24 Jun 2026
Last updated24 Jun 2026
Registry nameio.github.Skyrxin/sast-mcp-server

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.