DevSecOps Mcp

Created By
jmstar85a year ago
A comprehensive Model Context Protocol (MCP) server that integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and Software Composition Analysis (SCA) tools for AI-powered DevSecOps automation.
Overview

DevSecOps MCP Server A comprehensive Model Context Protocol (MCP) server that integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and Software Composition Analysis (SCA) tools for AI-powered DevSecOps automation.

๐Ÿš€ Features SAST Integration: โœ… Semgrep, Bandit (verified) DAST Integration: โœ… OWASP ZAP (verified) IAST Integration: โœ… Trivy + OWASP ZAP hybrid (verified) SCA Integration: โœ… npm audit, OSV Scanner, Trivy (verified) Comprehensive Security Reports: JSON, HTML, PDF, SARIF formats Policy Enforcement: Configurable security thresholds and gates Docker Support: Full containerization with security tools Real-time Monitoring: Performance metrics and logging 100% Open Source: No commercial tool dependencies AI-Powered Analysis: Claude integration for intelligent security insights ๐Ÿ› ๏ธ Architecture src/ โ”œโ”€โ”€ mcp/ โ”‚ โ”œโ”€โ”€ server.ts # Main MCP server โ”‚ โ”œโ”€โ”€ tools/ โ”‚ โ”‚ โ”œโ”€โ”€ sast-tool.ts # SAST integration โ”‚ โ”‚ โ”œโ”€โ”€ dast-tool.ts # DAST integration
โ”‚ โ”‚ โ”œโ”€โ”€ iast-tool.ts # IAST integration โ”‚ โ”‚ โ””โ”€โ”€ sca-tool.ts # SCA integration โ”‚ โ””โ”€โ”€ connectors/ โ”‚ โ”œโ”€โ”€ sonarqube.ts โ”‚ โ”œโ”€โ”€ zap.ts โ”‚ โ”œโ”€โ”€ trivy.ts โ”‚ โ””โ”€โ”€ osv-scanner.ts โ”œโ”€โ”€ config/ โ”‚ โ”œโ”€โ”€ security-rules.yml โ”‚ โ””โ”€โ”€ tool-configs.json โ””โ”€โ”€ tests/security/

๐ŸŽฏ Summary DevSecOps MCP Server is an AI-powered security automation platform verified through real-world testing:

Key Achievements โœ… 80+ real vulnerabilities detected (SAST: 60+, DAST: 5+, SCA: 20+) OWASP Top 10 100% coverage verification completed All 4 security test types integrated (SAST, DAST, IAST, SCA) Fully open source based (commercial tool dependencies removed) Claude AI integration ready Ready to Use ๐Ÿš€

Setup and test in under 5 minutes

pip3 install semgrep bandit git clone && cd DevSecOps-MCP node test-all-security.js Differentiators ๐Ÿ’ก AI Native: Natural language security analysis with Claude Proven Performance: Tested with real vulnerabilities Zero Cost: Completely free and open source Plug & Play: Ready-to-use configuration Built with security in mind for modern DevSecOps workflows ๐Ÿ›ก๏ธ

"The future of security is AI-powered, open, and automated."

Server Config

{
  "mcpServers": {
    "devsecops": {
      "command": "node",
      "args": [
        "dist/src/mcp/server.js"
      ],
      "cwd": "/path/to/DevSecOps-MCP",
      "env": {
        "NODE_ENV": "production",
        "MCP_PORT": "3000",
        "LOG_LEVEL": "info",
        "SECURITY_STRICT_MODE": "true"
      }
    }
  }
}
Project Info
Created At
a year ago
Updated At
a year ago
Author Name
jmstar85
Star
-
Language
-
License
-
Category

Recommend Servers

View All
Tatsu55

12 hours ago
Docwand

2 days ago
Tavily Mcp
@tavily-ai

JavaScript
a year ago
Numox

12 hours ago
Wpnews

a day ago