DevSecOps Mcp

Created By
jmstar85a year ago
A comprehensive Model Context Protocol (MCP) server that integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and Software Composition Analysis (SCA) tools for AI-powered DevSecOps automation.
Overview

DevSecOps MCP Server A comprehensive Model Context Protocol (MCP) server that integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and Software Composition Analysis (SCA) tools for AI-powered DevSecOps automation.

πŸš€ Features SAST Integration: βœ… Semgrep, Bandit (verified) DAST Integration: βœ… OWASP ZAP (verified) IAST Integration: βœ… Trivy + OWASP ZAP hybrid (verified) SCA Integration: βœ… npm audit, OSV Scanner, Trivy (verified) Comprehensive Security Reports: JSON, HTML, PDF, SARIF formats Policy Enforcement: Configurable security thresholds and gates Docker Support: Full containerization with security tools Real-time Monitoring: Performance metrics and logging 100% Open Source: No commercial tool dependencies AI-Powered Analysis: Claude integration for intelligent security insights πŸ› οΈ Architecture src/ β”œβ”€β”€ mcp/ β”‚ β”œβ”€β”€ server.ts # Main MCP server β”‚ β”œβ”€β”€ tools/ β”‚ β”‚ β”œβ”€β”€ sast-tool.ts # SAST integration β”‚ β”‚ β”œβ”€β”€ dast-tool.ts # DAST integration
β”‚ β”‚ β”œβ”€β”€ iast-tool.ts # IAST integration β”‚ β”‚ └── sca-tool.ts # SCA integration β”‚ └── connectors/ β”‚ β”œβ”€β”€ sonarqube.ts β”‚ β”œβ”€β”€ zap.ts β”‚ β”œβ”€β”€ trivy.ts β”‚ └── osv-scanner.ts β”œβ”€β”€ config/ β”‚ β”œβ”€β”€ security-rules.yml β”‚ └── tool-configs.json └── tests/security/

🎯 Summary DevSecOps MCP Server is an AI-powered security automation platform verified through real-world testing:

Key Achievements βœ… 80+ real vulnerabilities detected (SAST: 60+, DAST: 5+, SCA: 20+) OWASP Top 10 100% coverage verification completed All 4 security test types integrated (SAST, DAST, IAST, SCA) Fully open source based (commercial tool dependencies removed) Claude AI integration ready Ready to Use πŸš€

Setup and test in under 5 minutes

pip3 install semgrep bandit git clone && cd DevSecOps-MCP node test-all-security.js Differentiators πŸ’‘ AI Native: Natural language security analysis with Claude Proven Performance: Tested with real vulnerabilities Zero Cost: Completely free and open source Plug & Play: Ready-to-use configuration Built with security in mind for modern DevSecOps workflows πŸ›‘οΈ

"The future of security is AI-powered, open, and automated."

Server Config

{
  "mcpServers": {
    "devsecops": {
      "command": "node",
      "args": [
        "dist/src/mcp/server.js"
      ],
      "cwd": "/path/to/DevSecOps-MCP",
      "env": {
        "NODE_ENV": "production",
        "MCP_PORT": "3000",
        "LOG_LEVEL": "info",
        "SECURITY_STRICT_MODE": "true"
      }
    }
  }
}
Project Info
Created At
a year ago
Updated At
a year ago
Author Name
jmstar85
Star
-
Language
-
License
-
Category

Recommend Servers

View All
//beforeyouship β€” LLM Cost Modeling From Your Editor
@Indiegoing

Query realistic LLM cost models without leaving your editor. beforeyouship models the **true monthly cost** of an LLM app architecture β€” retries, prompt caching, batch discounts, infra overhead, and 3Γ—/10Γ— growth β€” across GPT-5.x, Claude, Gemini, DeepSeek, and more. Not a token calculator: a planning tool for the design phase, before you commit to a stack. **No API key needed to try it** β€” demo mode covers the six free-tier models. A Pro key from [beforeyouship.dev](https://beforeyouship.dev) unlocks the full 18-model catalog. ## What you can ask - "How much will a RAG chatbot cost at 10,000 requests/day?" - "Compare Claude Haiku vs Gemini Flash pricing for my workload" - "What's the cheapest model for a multi-step agent at scale?" - "Show me current per-token prices for Anthropic models" ## Tools ### `estimate_cost` Full cost model for an architecture at a given usage level. Returns Naive / Realistic / Worst Case monthly cost per model, 3Γ—/10Γ— growth scenarios, and an opinionated recommendation with reasoning. ### `get_model_prices` Current per-1M-token pricing β€” input, output, cached input, batch β€” with context windows and staleness metadata. ### `list_archetypes` Seven preset architecture patterns (simple chatbot, chatbot with history, RAG pipeline, multi-model router, coding assistant, document processor, multi-step agent) used as starting points for estimates. ## Setup **Claude Code:** ​```bash claude mcp add --transport http beforeyouship https://beforeyouship.dev/api/mcp ​``` **Cursor / other clients** β€” add a remote server: ​```json { "mcpServers": { "beforeyouship": { "type": "streamable-http", "url": "https://beforeyouship.dev/api/mcp" } } } ​``` Add an `Authorization: Bearer bys_...` header with a Pro key for the full catalog. ## Try it > Estimate the monthly cost of a RAG pipeline at 10,000 requests/day

2 days ago