11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations
接入配置
选择客户端，复制配置，再按项目文档补齐环境变量。
claude mcp add sast --env SAST_MCP_API_KEY='<SAST_MCP_API_KEY>' --env SAST_MCP_JWT_SECRET='<SAST_MCP_JWT_SECRET>' -- uvx sast-mcp-server~/.codex/config.toml
[mcp_servers.sast]
command = "uvx"
args = ["sast-mcp-server"]
env = { SAST_MCP_API_KEY = "<SAST_MCP_API_KEY>", SAST_MCP_JWT_SECRET = "<SAST_MCP_JWT_SECRET>" }
# codex mcp add sast --env SAST_MCP_API_KEY='<SAST_MCP_API_KEY>' --env SAST_MCP_JWT_SECRET='<SAST_MCP_JWT_SECRET>' -- uvx sast-mcp-server~/.cursor/mcp.json
{
"mcpServers": {
"sast": {
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
"SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"sast": {
"type": "stdio",
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
"SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"sast": {
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
"SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"sast": {
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
"SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"sast": {
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_API_KEY": "<SAST_MCP_API_KEY>",
"SAST_MCP_JWT_SECRET": "<SAST_MCP_JWT_SECRET>"
}
}
}
}需要的环境变量
SAST_MCP_API_KEYSAST_MCP_JWT_SECRET
把占位值换成你自己的密钥；不要把密钥提交到代码仓库。