Uses StackHawk to scan code and apps for security vulnerabilities and help fix the problems it finds.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add stackhawk --env STACKHAWK_API_KEY='<STACKHAWK_API_KEY>' -- uvx stackhawk-mcp~/.codex/config.toml
[mcp_servers.stackhawk]
command = "uvx"
args = ["stackhawk-mcp"]
env = { STACKHAWK_API_KEY = "<STACKHAWK_API_KEY>" }
# codex mcp add stackhawk --env STACKHAWK_API_KEY='<STACKHAWK_API_KEY>' -- uvx stackhawk-mcp~/.cursor/mcp.json
{
"mcpServers": {
"stackhawk": {
"command": "uvx",
"args": [
"stackhawk-mcp"
],
"env": {
"STACKHAWK_API_KEY": "<STACKHAWK_API_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"stackhawk": {
"type": "stdio",
"command": "uvx",
"args": [
"stackhawk-mcp"
],
"env": {
"STACKHAWK_API_KEY": "<STACKHAWK_API_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"stackhawk": {
"command": "uvx",
"args": [
"stackhawk-mcp"
],
"env": {
"STACKHAWK_API_KEY": "<STACKHAWK_API_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"stackhawk": {
"command": "uvx",
"args": [
"stackhawk-mcp"
],
"env": {
"STACKHAWK_API_KEY": "<STACKHAWK_API_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"stackhawk": {
"command": "uvx",
"args": [
"stackhawk-mcp"
],
"env": {
"STACKHAWK_API_KEY": "<STACKHAWK_API_KEY>"
}
}
}
}Environment variables
STACKHAWK_API_KEY
Replace the placeholders with your own credentials and keep them out of version control.