11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add sast --env SAST_MCP_API_KEY='<SAST_MCP_API_KEY>' --env SAST_MCP_JWT_SECRET='<SAST_MCP_JWT_SECRET>' -- uvx sast-mcp-server~/.codex/config.toml
[mcp_servers.sast]
command = "uvx"
args = ["sast-mcp-server"]
env = { SAST_MCP_API_KEY = "<SAST_MCP_API_KEY>", SAST_MCP_JWT_SECRET = "<SAST_MCP_JWT_SECRET>" }
# codex mcp add sast --env SAST_MCP_API_KEY='<SAST_MCP_API_KEY>' --env SAST_MCP_JWT_SECRET='<SAST_MCP_JWT_SECRET>' -- uvx sast-mcp-server~/.cursor/mcp.json
{
"mcpServers": {
"sast": {
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
"SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"sast": {
"type": "stdio",
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
"SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"sast": {
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
"SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"sast": {
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
"SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"sast": {
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
"SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
}
}
}
}Environment variables
SAST_MCP_API_KEYSAST_MCP_JWT_SECRET
Replace the placeholders with your own credentials and keep them out of version control.