How do I install SAST MCP Server?

Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.

Is SAST MCP Server official?

No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.

How is the trust score calculated?

This listing scores 13 (Limited). The formula is published on the methodology page.

MCPpedia

SAST MCP Server MCP Server | MCPpedia

SAST MCP Server MCP Server

Name: SAST MCP Server
Author: skyrxin

11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations

Tools Versions Alternatives

Registryskyrxin

13Limited

Install

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "skyrxin-sast-mcp-server": {
      "command": "uvx",
      "args": [
        "sast-mcp-server"
      ],
      "env": {
        "SAST_MCP_TIMEOUT": "300",
        "SAST_MCP_LOG_LEVEL": "INFO",
        "SAST_MCP_API_KEY": "YOUR_SAST_MCP_API_KEY",
        "SAST_MCP_JWT_SECRET": "YOUR_SAST_MCP_JWT_SECRET"
      }
    }
  }
}

Install guide

Related servers

homebutler

73Good

Tells an agent what changed on a server since it last looked - status, Docker, backups, Proxmox.

Registryhigangssh305 stars

kubeview

72Good

Read-only Model Context Protocol MCP server enabling code-driven AI analysis of Kubernetes clusters.

Environment

Name	Required	Notes
SAST_MCP_TIMEOUT	No	Per-scan timeout in seconds (default: 300).
SAST_MCP_LOG_LEVEL	No	Logging level: DEBUG, INFO, WARNING, ERROR (default: INFO).
SAST_MCP_API_KEY	No	Optional static API key to require auth (legacy mode; HTTP transports). Secret.
SAST_MCP_JWT_SECRET	No	Optional HMAC secret to require JWT auth with scopes (HTTP transports). Secret.

SAST MCP Server MCP Server

Install

Related servers

homebutler

kubeview

Environment

Tools

About

FAQ

Reviews

WHOIS

Codigest

gitlab-mcp

KSail