SAST MCP Server

Static Application Security Testing (SAST) for AI agents. A production-ready MCP server that gives any AI agent the ability to scan code for security vulnerabilities.

Supports 7 industry-standard scanners:

Scanner	Languages / Scope	Type
Bandit	Python	Security linter
njsscan	JavaScript, Node.js	Static analysis
Bearer	Python, JS, Ruby, Java, Go, PHP	Data-flow SAST
Semgrep	30+ languages	Rule-based SAST
Trivy	All (CVEs, Secrets, IaC)	Multi-scanner
CodeQL	Python, JS, Java, Go, C/C++, C#, Ruby, Swift	Semantic SAST
Checkov	Terraform, K8s, Docker, CloudFormation	IaC policy scanner

Works with any MCP-compatible agent: Gemini CLI, Claude Desktop, OpenAI Agents, Cursor, Windsurf, and more.

---

Features

• 🔍 7 SAST scanners with unified output format
• 🌳 AST-aware context — shows the full enclosing function, not just a line number
• 📊 Severity & confidence filtering — focus on what matters
• 🔀 Git diff mode — scan only modified files for incremental reviews
• 🙈 Ignore management — suppress false positives with audit trail
• 📄 Pagination — handle large codebases without overwhelming the agent
• 🌐 Dual transport — stdio (local) or SSE/HTTP (remote deployments)
• 🔐 API key authentication — secure remote deployments
• 📦 One command install — pip install sast-mcp-server
• 🚀 Multi-scanner mode — run all installed scanners in parallel with deduplication
• 📋 SARIF export — CI/CD integration with GitHub, GitLab, Azure DevOps
• 🏗️ IaC scanning — Terraform, Kubernetes, Docker security policies
• 🔑 Secret detection — find hardcoded API keys, tokens, and passwords
• 📦 SCA / dependency CVEs — scan lock files for known vulnerabilities

---

Quick Start

Install

pip install sast-mcp-server

Or run directly without installing:

uvx sast-mcp-server

Install at least one scanner

# Python projects
pip install bandit

# JavaScript/Node.js projects
pip install njsscan

# Multi-language (recommended)
pip install semgrep

# IaC, secrets, and dependency CVEs (recommended)
# See: https://aquasecurity.github.io/trivy/latest/getting-started/installation/

# IaC policy scanning
pip install checkov

# Deep semantic analysis
# See: https://github.com/github/codeql-cli-binaries/releases

# Data-flow analysis
# See: https://docs.bearer.com/installation/

---

Usage with AI Agents

Gemini CLI

Install as an extension:

gemini extensions install https://github.com/Skyrxin/sast-mcp-server

Or add to your ~/.gemini/settings.json:

{
  "mcpServers": {
    "sast": {
      "command": "uvx",
      "args": ["sast-mcp-server"]
    }
  }
}

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "sast": {
      "command": "uvx",
      "args": ["sast-mcp-server"]
    }
  }
}

See full Claude Desktop guide.

Cursor IDE

Add to Cursor Settings → MCP Servers:

{
  "mcpServers": {
    "sast": {
      "command": "uvx",
      "args": ["sast-mcp-server"]
    }
  }
}

See full Cursor guide.

OpenAI Agents SDK

from agents.mcp import MCPServerStdio

sast_server = MCPServerStdio(command="uvx", args=["sast-mcp-server"])

See full OpenAI guide.

---

Available MCP Tools

scan_vulnerabilities

Scan a directory for security vulnerabilities using a specific scanner.

Parameter	Type	Default	Description
target_path	string	required	Path to scan
scanner_name	string	"bearer"	Scanner: bandit, njsscan, bearer, semgrep, trivy, codeql, checkov
min_severity	string	"LOW"	Minimum severity: LOW, MEDIUM, HIGH, CRITICAL
min_confidence	string	"LOW"	Minimum confidence: LOW, MEDIUM, HIGH
git_diff_only	bool	false	Only scan git-modified files
limit	int	50	Max findings to return
offset	int	0	Pagination offset

scan_all

Run ALL installed scanners in parallel with automatic deduplication. Recommended for comprehensive security scanning.

Parameter	Type	Default	Description
target_path	string	required	Path to scan
min_severity	string	"MEDIUM"	Minimum severity (higher default to reduce noise)
min_confidence	string	"LOW"	Minimum confidence
git_diff_only	bool	false	Only scan git-modified files
limit	int	50	Max findings to return
offset	int	0	Pagination offset

export_sarif

Export scan results in SARIF 2.1.0 format for CI/CD integration.

Parameter	Type	Default	Description
target_path	string	required	Path to scan
scanner_name	string	"bearer"	Scanner to use
min_severity	string	"LOW"	Minimum severity
min_confidence	string	"LOW"	Minimum confidence
output_path	string	""	File path to write SARIF (empty = return as string)

list_scanners

List available scanners, their installation status, and supported languages.

ignore_vulnerability

Suppress a finding from future scans (with audit trail).

unignore_vulnerability

Re-enable a previously suppressed finding.

list_ignored_vulnerabilities

Show all currently suppressed findings for a project.

---

SARIF / CI/CD Integration

Export scan results in SARIF 2.1.0 format for integration with CI/CD platforms:

# In your CI pipeline, use the MCP tool:
# export_sarif(target_path=".", scanner_name="semgrep", output_path="results.sarif")

# Then upload to GitHub Code Scanning:
# gh api /repos/{owner}/{repo}/code-scanning/sarifs -f sarif=@results.sarif

Compatible with: GitHub Code Scanning, GitLab SAST, Azure DevOps, VS Code SARIF Viewer.

---

Remote Deployment (SSE)

Run the server over HTTP/SSE for remote agent access:

# Start SSE server on port 8080
sast-mcp-server --transport sse --port 8080

# With API key authentication (recommended for production)
SAST_MCP_API_KEY=your-secret-key sast-mcp-server --transport sse --port 8080

Docker

docker build -t sast-mcp-server .
docker run -p 8080:8080 -e SAST_MCP_API_KEY=your-key sast-mcp-server --transport sse

---

Configuration

Environment Variables

Variable	Default	Description
SAST_MCP_TIMEOUT	300	Scan timeout in seconds
SAST_MCP_LOG_LEVEL	INFO	Log level: DEBUG, INFO, WARNING, ERROR
SAST_MCP_API_KEY	(none)	API key for SSE authentication

---

Development

# Clone and install with dev dependencies
git clone https://github.com/Skyrxin/sast-mcp-server.git
cd sast-mcp-server
pip install -e ".[dev]"

# Run tests
pytest tests/ -v

# Lint
ruff check sast_mcp_server/

# Run locally
python -m sast_mcp_server

---

Project Structure

sast_mcp_server/
├── __init__.py          # Package version
├── __main__.py          # python -m entry point
├── server.py            # FastMCP server with all tools
├── models.py            # Typed data models (Finding, Severity, etc.)
├── sarif.py             # SARIF 2.1.0 export and parsing
├── aggregator.py        # Multi-scanner parallel execution + deduplication
├── scanners/
│   ├── base.py          # Abstract scanner base class
│   ├── factory.py       # Scanner registry and factory
│   ├── bandit.py        # Bandit (Python)
│   ├── njsscan.py       # njsscan (JavaScript)
│   ├── bearer.py        # Bearer (multi-language)
│   ├── semgrep.py       # Semgrep (30+ languages)
│   ├── trivy.py         # Trivy (CVEs, secrets, IaC)
│   ├── codeql.py        # CodeQL (deep semantic SAST)
│   └── checkov.py       # Checkov (IaC policies)
└── enrichment/
    ├── ast_context.py   # AST-aware code context extraction
    ├── git_diff.py      # Git diff for incremental scanning
    └── ignore_manager.py # Finding ignore list management

---

License

MIT