MCP 服务器

Deep SAST MCP Server

Provides deterministic, 100%-file-coverage security findings by running Semgrep, gitleaks, and osv-scanner on code repositories, enabling thorough security assessment of every file.

README

title: Deep SAST MCP emoji: 🔒 colorFrom: blue colorTo: red sdk: docker app_port: 8080 pinned: false license: mit

Deep SAST MCP Server

A Model Context Protocol server that gives IBM Consulting Advantage agents deterministic, 100%-file-coverage security findings by wrapping Semgrep, gitleaks, osv-scanner, Checkov and Trivy behind Streamable HTTP.

Scanner Coverage

Scanner	Coverage
Semgrep	SAST rules for OWASP Top 10 and security audit patterns
gitleaks	Hardcoded secrets with redacted evidence
osv-scanner	Dependency CVEs and advisory metadata
Checkov	IaC, OpenAPI, Terraform, Kubernetes and Dockerfile misconfiguration
Trivy	Filesystem/container vulnerabilities and misconfiguration

Endpoint

MCP protocol: POST /mcp (Streamable HTTP; register without a trailing slash)
Health: GET /health
Report downloads: GET /reports/{scan_id}/{filename}

Files

server.py - thin entrypoint.
deep_sast_mcp/app.py - FastMCP tool registration and HTTP/report routes.
deep_sast_mcp/scan_engine.py - clone, scanner selection and orchestration.
deep_sast_mcp/scanners/ - one adapter per scanner.
deep_sast_mcp/reporting.py - Markdown, HTML, JSON, SARIF and ZIP evidence packs.
requirements.txt - Python dependencies.
Dockerfile - image with scanner CLIs on PATH.

Tools

Tool	Purpose
`scan_repository(repo_url, ref, scanners)`	Clone and scan every in-scope file, then return scan_id, coverage and counts
`get_scan_status(scan_id)`	Return coverage, scanner run status and generated artifacts
`list_findings(scan_id, severity, path_prefix, cursor, limit)`	Paginated normalized findings
`get_finding_context(scan_id, finding_id, context_lines)`	Exact source context around a finding
`get_file(scan_id, path, start_line, end_line)`	Raw repo-relative file content for deep dives
`get_dependency_report(scan_id)`	SCA/CVE results with package, advisory and fixed version metadata
`generate_report(scan_id, format)`	Create a detailed downloadable report artifact
`get_report(report_id, max_chars)`	Return text report content through MCP
`list_reports(scan_id)`	List generated artifacts and download URLs
`cleanup_scan(scan_id, keep_reports)`	Delete the clone workspace; preserve reports by default

Normalized finding fields: id, scanner, rule_id, title, severity, owasp, cwe, path, start_line, end_line, snippet, fix_hint, confidence, details. gitleaks snippets are redacted.

Report Formats

markdown - human report with executive summary, coverage ledger, scanner inventory, severity/scanner distributions, detailed findings, dependency appendix and remediation plan.
html - browser-readable copy of the Markdown report.
json - raw normalized evidence for downstream automation.
sarif - importable into code scanning tools.
zip - evidence pack containing Markdown, HTML, JSON, SARIF and dependency CSV.

Auth

Set MCP_AUTH_TOKEN to require Authorization: Bearer <token> on MCP requests. Leave unset only for development/open access. By default, report download URLs are public when generated; set PUBLIC_REPORTS=false to require the same bearer token for reports.

Register In IBM Consulting Advantage

Field	Value
MCP Server Name	`Deep SAST`
MCP Server URL	`https://piyushptiwari-deep-sast-mcp.hf.space/mcp`
Description	`Semgrep + gitleaks + osv-scanner + Checkov + Trivy security scanning over MCP`
Tags	`security,sast,code-review,sca,secrets,iac,container`
Visibility	Team
Transport Type	Streamable HTTP
Authentication Type	Match `MCP_AUTH_TOKEN` configuration

ContextForge federates the MCP tools; group them into a virtual server and attach that virtual server to the Agentic App / DeepAgent.

Agent Workflow

scan_repository(repo_url) with scanners omitted unless the user asks for a targeted scan.
get_scan_status(scan_id) and reconcile coverage as files_scanned / total_files.
list_findings(...) and get_dependency_report(scan_id) for triage.
get_finding_context(...) for high-impact evidence validation.
generate_report(scan_id, "markdown") for the user-facing report.
Generate json, sarif or zip when machine-readable evidence or a full pack is needed.
Share the returned download_url with the user.
cleanup_scan(scan_id) when done. Reports are preserved by default so the URL remains usable.

Run Locally

pip install -r requirements.txt
python server.py --transport http --host 127.0.0.1 --port 8080

The Docker image installs the scanner CLIs. Local non-Docker runs also need scanner binaries on PATH.

Security Notes

Scanners parse target code; they do not execute the target repository.
Repositories are shallow-cloned from allowed hosts only and size-capped by MAX_REPO_MB.
Each clone uses a per-scan temp workspace removed by cleanup_scan.
Report artifacts are stored separately from the clone workspace and can be preserved after cleanup.
Secret values are redacted before leaving the scanner process.
get_file and report downloads block path traversal outside their scan/report roots.