SAST MCP Server
io.github.Skyrxin/sast-mcp-server
11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations
Connect this server
Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.
{
"mcpServers": {
"sast-mcp-server": {
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_TIMEOUT": "300",
"SAST_MCP_LOG_LEVEL": "INFO",
"SAST_MCP_API_KEY": "<your SAST_MCP_API_KEY>",
"SAST_MCP_JWT_SECRET": "<your SAST_MCP_JWT_SECRET>"
}
}
}
}- SAST_MCP_TIMEOUTPer-scan timeout in seconds (default: 300).
- SAST_MCP_LOG_LEVELLogging level: DEBUG, INFO, WARNING, ERROR (default: INFO).
- SAST_MCP_API_KEYsecretOptional static API key to require auth (legacy mode; HTTP transports).
- SAST_MCP_JWT_SECRETsecretOptional HMAC secret to require JWT auth with scopes (HTTP transports).
A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.
- Category
- Developer Tools
- Version
- 0.8.3
- Registry
- active
- Published
- 6/24/2026
More Developer Tools servers
Browse all Developer Tools →Skysay
skysay-ai
Skysay voice agents, phone numbers, calls, SMS and campaigns over MCP. 100+ countries covered.
io.github.SkyUnlimit/sinoconnection-esim-mcp
SkyUnlimit
China & Asia travel eSIM specialist. 200+ countries. No-VPN internet in China.
Skyvern
Skyvern-AI
AI-powered browser automation — navigate, click, fill forms, and extract data from any website.
zspace-cli
skyzhao1223
Zero-config MCP server + CLI for ZSpace NAS: file ops and pool stats via the desktop client.
io.github.slaat/garmin-connect-workouts-mcp
slaat
Turn plain language into real workouts on your Garmin watch: pace, HR, power, intervals, swim sets.
navette — the browser for agents
slabbdev
A 659 KB Rust binary driving the OS WebView — no Chromium. 16 MCP tools for AI agents.
Add the badge to your site
Show visitors that SAST MCP Server is listed here — it’s also the link we check for a free listing.
HTML — for your website
<a href="https://serverdex.io/server/io-github-skyrxin-sast-mcp-server?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="SAST MCP Server — listed on Serverdex" width="123" height="40" loading="lazy"></a>Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.
Markdown — for your README
[](https://serverdex.io/server/io-github-skyrxin-sast-mcp-server?utm_source=badge)Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.