mcp-bitsight

A focused Model Context Protocol (MCP) server that exposes BitSight Security Ratings as tools for AI assistants.

Note: This repo will be renamed from mcp-gateway to mcp-bitsight to reflect its single purpose.

Architecture Context

This is one component in a larger MCP architecture:

┌─────────────┐     ┌──────────────┐     ┌──────────────┐     ┌──────────────┐
│    User     │────▶│  LLM Layer   │────▶│  MCP Gateway │────▶│ mcp-bitsight │ ← This repo
│  (Cursor)   │     │ (AI Foundry) │     │   (Router)   │     │              │
└─────────────┘     └──────────────┘     └──────┬───────┘     └──────────────┘
                                                │
                                                ├────▶ mcp-servicenow (future)
                                                └────▶ mcp-* (future)

Component	Purpose	Repo
mcp-bitsight	BitSight API tools	This repo
mcp-gateway	Routes to MCP servers	Separate repo (TBD)
ai-orchestrator	LLM reasoning layer	Separate repo (TBD)

Available Tools

Tool	Description
get_bitsight_score	Get security rating for any company by name
search_companies	Search for companies in BitSight
get_company_details	Get full company details by GUID
get_security_findings	Get vulnerabilities and security findings
get_portfolio	View your monitored companies
get_risk_vectors	List all risk categories
get_alerts	Get portfolio alerts

Quick Start

1. Clone and Setup

git clone https://github.com/your-org/mcp-bitsight.git
cd mcp-bitsight

# Create virtual environment
python3 -m venv venv
source venv/bin/activate  # On Windows: venv\Scripts\activate

# Install dependencies
pip install -e .

2. Configure Environment

Create a .env file:

BITSIGHT_API_TOKEN=your-api-key-here
LOG_LEVEL=WARNING

3. Connect to Cursor

Add to ~/.cursor/mcp.json (macOS/Linux) or %USERPROFILE%\.cursor\mcp.json (Windows):

{
  "mcpServers": {
    "bitsight": {
      "command": "/full/path/to/mcp-bitsight/venv/bin/python",
      "args": ["/full/path/to/mcp-bitsight/main.py"],
      "cwd": "/full/path/to/mcp-bitsight"
    }
  }
}

4. Restart Cursor

After updating mcp.json, restart Cursor completely (Cmd+Q / Alt+F4, then reopen).

Corporate Proxy / SSL Certificates

If behind a corporate firewall that intercepts HTTPS, place CA certificates in certs/:

certs/
├── combined_ca_bundle.pem
└── ca_bundle.pem

Or set via environment:

MCP_CA_BUNDLE=/path/to/your/ca_bundle.pem

Cloud Deployment (Azure)

CI/CD

Push to dev branch triggers automatic build and deploy via GitHub Actions.

Required GitHub Secrets:

Secret	Description
ACR_LOGIN_SERVER	ACR login server
ACR_USERNAME	Azure Container Registry username
ACR_PASSWORD	Azure Container Registry password
AZURE_CLIENT_ID	Service principal client ID
AZURE_TENANT_ID	Azure AD tenant ID
AZURE_SUBSCRIPTION_ID	Azure subscription ID

Connect Cursor to Cloud

{
  "mcpServers": {
    "bitsight": {
      "url": "https://your-app.azurecontainerapps.io/sse"
    }
  }
}

Project Structure

mcp-bitsight/
├── app/
│   ├── __init__.py
│   ├── bitsight.py      # BitSight API client
│   └── server.py        # MCP tools
├── certs/               # SSL certificates
├── Documentation/
├── .github/workflows/   # CI/CD
├── main.py              # Entry point
├── pyproject.toml       # Dependencies
└── Dockerfile

Environment Variables

Variable	Description	Default
BITSIGHT_API_TOKEN	BitSight API key	Required
MCP_TRANSPORT	stdio or http	stdio
PORT	HTTP port	8000
LOG_LEVEL	DEBUG, INFO, WARNING, ERROR	WARNING
MCP_CA_BUNDLE	Custom CA certificate path	Auto-detected

Development

pip install -e ".[dev]"
pytest
ruff check .
ruff format .

License

MIT