agent-security-scanner-mcp 1.1.0 → 1.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +77 -1
- package/package.json +4 -2
package/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# agent-security-scanner-mcp
|
|
2
2
|
|
|
3
|
-
A powerful MCP (Model Context Protocol) server for real-time security vulnerability scanning. Integrates with Claude Desktop
|
|
3
|
+
A powerful MCP (Model Context Protocol) server for real-time security vulnerability scanning. Integrates with Claude Desktop, Claude Code, OpenCode.ai, Kilo Code, and any MCP-compatible client to automatically detect and fix security issues as you code.
|
|
4
4
|
|
|
5
5
|
**165 Semgrep-aligned security rules | 105 auto-fix templates | 100% fix coverage | Package hallucination detection**
|
|
6
6
|
|
|
@@ -66,6 +66,82 @@ Add to your MCP settings (`~/.claude/settings.json`):
|
|
|
66
66
|
}
|
|
67
67
|
```
|
|
68
68
|
|
|
69
|
+
### OpenCode.ai
|
|
70
|
+
|
|
71
|
+
Add to your `opencode.jsonc` configuration file:
|
|
72
|
+
|
|
73
|
+
```json
|
|
74
|
+
{
|
|
75
|
+
"$schema": "https://opencode.ai/config.json",
|
|
76
|
+
"mcp": {
|
|
77
|
+
"security-scanner": {
|
|
78
|
+
"type": "local",
|
|
79
|
+
"command": ["npx", "-y", "agent-security-scanner-mcp"],
|
|
80
|
+
"enabled": true
|
|
81
|
+
}
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
```
|
|
85
|
+
|
|
86
|
+
Or if installed globally:
|
|
87
|
+
|
|
88
|
+
```json
|
|
89
|
+
{
|
|
90
|
+
"mcp": {
|
|
91
|
+
"security-scanner": {
|
|
92
|
+
"type": "local",
|
|
93
|
+
"command": ["agent-security-scanner-mcp"],
|
|
94
|
+
"enabled": true
|
|
95
|
+
}
|
|
96
|
+
}
|
|
97
|
+
}
|
|
98
|
+
```
|
|
99
|
+
|
|
100
|
+
### Kilo Code
|
|
101
|
+
|
|
102
|
+
**Global configuration** - Add to VS Code settings `mcp_settings.json`:
|
|
103
|
+
|
|
104
|
+
```json
|
|
105
|
+
{
|
|
106
|
+
"mcpServers": {
|
|
107
|
+
"security-scanner": {
|
|
108
|
+
"command": "npx",
|
|
109
|
+
"args": ["-y", "agent-security-scanner-mcp"],
|
|
110
|
+
"alwaysAllow": [],
|
|
111
|
+
"disabled": false
|
|
112
|
+
}
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
```
|
|
116
|
+
|
|
117
|
+
**Project-level configuration** - Create `.kilocode/mcp.json` in your project root:
|
|
118
|
+
|
|
119
|
+
```json
|
|
120
|
+
{
|
|
121
|
+
"mcpServers": {
|
|
122
|
+
"security-scanner": {
|
|
123
|
+
"command": "npx",
|
|
124
|
+
"args": ["-y", "agent-security-scanner-mcp"],
|
|
125
|
+
"alwaysAllow": ["scan_security", "list_security_rules"],
|
|
126
|
+
"disabled": false
|
|
127
|
+
}
|
|
128
|
+
}
|
|
129
|
+
}
|
|
130
|
+
```
|
|
131
|
+
|
|
132
|
+
**Windows users** - Use cmd wrapper:
|
|
133
|
+
|
|
134
|
+
```json
|
|
135
|
+
{
|
|
136
|
+
"mcpServers": {
|
|
137
|
+
"security-scanner": {
|
|
138
|
+
"command": "cmd",
|
|
139
|
+
"args": ["/c", "npx", "-y", "agent-security-scanner-mcp"]
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
}
|
|
143
|
+
```
|
|
144
|
+
|
|
69
145
|
## Available Tools
|
|
70
146
|
|
|
71
147
|
### `scan_security`
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "agent-security-scanner-mcp",
|
|
3
|
-
"version": "1.1.
|
|
4
|
-
"description": "MCP server for security scanning & package hallucination detection
|
|
3
|
+
"version": "1.1.2",
|
|
4
|
+
"description": "MCP server for security scanning & package hallucination detection. Works with Claude Desktop, Claude Code, OpenCode, Kilo Code. Detects SQL injection, XSS, secrets, and AI-invented packages.",
|
|
5
5
|
"main": "index.js",
|
|
6
6
|
"type": "module",
|
|
7
7
|
"bin": {
|
|
@@ -14,6 +14,8 @@
|
|
|
14
14
|
"mcp",
|
|
15
15
|
"model-context-protocol",
|
|
16
16
|
"claude",
|
|
17
|
+
"opencode",
|
|
18
|
+
"kilocode",
|
|
17
19
|
"security",
|
|
18
20
|
"scanner",
|
|
19
21
|
"vulnerability",
|