CybeDefend/cybedefend-mcp-server
If you are the rightful owner of cybedefend-mcp-server and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.
CybeDefend MCP Server is a secure-by-design companion for AI code assistants, integrating with various LLMs to enhance security analysis capabilities.
start_scan
Initiates a scan and returns success status, scan ID, and detected languages.
get_scan
Provides the current state, percentage progress, and counts of the scan.
get_project_overview
Returns critical/high vulnerabilities per scanner.
list_vulnerabilities_sast
Provides a paginated list of SAST vulnerabilities with filters.
get_vulnerability_sast
Returns details of a single SAST finding, including a code snippet.
CybeDefend MCP Server
Secure-by-design companion for AI code assistants. This MCP (Model-Context Protocol) server plugs your favourite LLM (Cursor, Claude, VS Code Copilot Chat…) into the CybeDefend platform.
🌟 What you get
| Capability | What the tool does |
|---|---|
| Scan launcher | Upload a ZIP and start a full SAST / IaC / SCA analysis |
| Live tracking | Poll progress, wait for completion |
| Rich results | Query vulnerabilities, packages & project overview |
| Zero-setup | One command, no local API proxies, pure STDIO |
All endpoints are thin wrappers around CybeDefend’s REST API; no data is stored locally.
1 · Quick start
1.1 Prerequisites
- Node ≥ 18
- A CybeDefend API key with project-level access
1.2 Install globally (optional)
npm i -g @cybedefend/mcp-server # always latest version
Tip : You can also rely on
npx(see below) – no global install needed.
2 · Using in your AI client
Below are copy-paste snippets for the three most popular MCP clients. Replace the values in bold.
2.1 Cursor / Claude Desktop (~/.cursor/mcp.json)
{
"mcpServers": {
"cybedefend": {
"command": "npx", // auto-installs or updates
"args": ["-y", "@cybedefend/mcp-server"],
"env": {
"API_BASE": "https://api-us.cybedefend.com", // or http://localhost:3000
"CYBEDEFEND_API_KEY": "cybe_********"
}
}
}
}
Need a specific version? → "args": ["@cybedefend/mcp-server@1.2.3"]
2.2 VS Code – MCP extension
.vscode/mcp.json (user or workspace) :
"servers": {
"cybedefend": {
"command": "npx",
"args": [
"-y",
"@cybedefend/mcp-server@latest"
],
"env": {
"CYBEDEFEND_API_KEY": "cybe_****"
}
}
}
Run “MCP: Reload servers” from the Command Palette.
2.3 Docker (air-gapped CI, etc.)
docker run --rm -i \
-e CYBEDEFEND_API_KEY=cybe_*** \
ghcr.io/cybedefend/cybedefend-mcp-server:latest
The image is multi-arch (amd64 / arm64) and includes Node runtimes.
3 · Available tools
| Category | Tool name | What it returns |
|---|---|---|
| Scan | start_scan | { success, scanId, detectedLanguages } |
get_scan | Current state, % progress, counts | |
| Overview | get_project_overview | Critical/high/… per scanner |
| SAST | list_vulnerabilities_sast | Paginated list with filters |
get_vulnerability_sast | Single finding, code snippet | |
| IaC | list_vulnerabilities_iac | 〃 |
get_vulnerability_iac | 〃 | |
| SCA | list_vulnerabilities_sca | 〃 |
get_vulnerability_sca | 〃 | |
list_sca_packages | All third-party packages |
Schema for every tool is embedded; assistants receive it automatically.
4 · Typical chat prompts
| Prompt | Internally calls |
|---|---|
| “Scan my repo frontend.zip in project 1234.” | start_scan |
| “How far along is scan abcd-efgh ?” | get_scan |
| “Show critical SAST bugs in Java.” | list_vulnerabilities_sast |
| “Details of vuln c0ffee.” | get_vulnerability_sast |
(Cursor / Claude will pick the tool + arguments – no manual JSON needed.)
5 · Local development
git clone https://github.com/cybedefend/mcp-server
cd mcp-server
npm i
npm run build # TS → dist/
node dist/index.js # runs on STDIO
Tests
npm t # Vitest + coverage
6 · Publishing a new version (maintainers)
# ensure dist/ is up-to-date
npm run build
# bump + publish – prepare script rebuilds automatically
npm version patch
npm publish --access public
Check before shipping:
npm pack --dry-run | grep dist/index.js # must be present
7 · Support & feedback
- Docs : https://docs.cybedefend.com
- Issues / PRs : https://github.com/CybeDefend/cybedefend-mcp-server
- Email :
Pull-requests welcome — especially for new tools or language bindings!