---
bezeichner: "io.github.Skyrxin/sast-mcp-server"
art: "mcp_server"
slug: "io-github-skyrxin-sast-mcp-server"
paketkoordinate: "pypi:sast-mcp-server"
status: "aktiv"
homepage: "https://github.com/Skyrxin/sast-mcp-server#readme"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.Skyrxin"
registerseite: "https://tracevero.com/mcp/io-github-skyrxin-sast-mcp-server"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: false
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
roh_beschreibung: "11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations"
version: "0.8.3"
roh_umgebungsvariablen: "SAST_MCP_TIMEOUT, SAST_MCP_LOG_LEVEL, SAST_MCP_API_KEY, SAST_MCP_JWT_SECRET"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/Skyrxin/sast-mcp-server"
roh_paketquellen: "pypi"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-06-24"
roh_aktualisiert_am: "2026-06-24"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "sast-mcp-server"
roh_paketversionen: "0.8.3"
roh_laufzeithinweise: "uvx"
roh_umgebungsformate: ""
roh_umgebungsbeschreibungen: "SAST_MCP_API_KEY=Optional static API key to require auth (legacy mode; HTTP transports). · SAST_MCP_JWT_SECRET=Optional HMAC secret to require JWT auth with scopes (HTTP transports). · SAST_MCP_LOG_LEVEL=Logging level: DEBUG, INFO, WARNING, ERROR (default: INFO). · SAST_MCP_TIMEOUT=Per-scan timeout in seconds (default: 300)."
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"pypi\",\"identifier\":\"sast-mcp-server\",\"version\":\"0.8.3\",\"runtimeHint\":\"uvx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"SAST_MCP_TIMEOUT\",\"description\":\"Per-scan timeout in seconds (default: 300).\",\"required\":false,\"secret\":false},{\"name\":\"SAST_MCP_LOG_LEVEL\",\"description\":\"Logging level: DEBUG, INFO, WARNING, ERROR (default: INFO).\",\"required\":false,\"secret\":false},{\"name\":\"SAST_MCP_API_KEY\",\"description\":\"Optional static API key to require auth (legacy mode; HTTP transports).\",\"required\":false,\"secret\":true},{\"name\":\"SAST_MCP_JWT_SECRET\",\"description\":\"Optional HMAC secret to require JWT auth with scopes (HTTP transports).\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# SAST MCP Server

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio |
| Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/Skyrxin/sast-mcp-server |
| Description (raw) | 11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft |  |
| Declared version | 0.8.3 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Environment variables (raw) | SAST_MCP_TIMEOUT, SAST_MCP_LOG_LEVEL, SAST_MCP_API_KEY, SAST_MCP_JWT_SECRET | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret variables (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Transports (raw) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Repository (raw) | https://github.com/Skyrxin/sast-mcp-server | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Package registries (raw) | pypi | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote URLs (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote hosts (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-06-24 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-06-24 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package identifiers (raw) | sast-mcp-server | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package versions (raw) | 0.8.3 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Runtime hints (raw) | uvx | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable descriptions (raw) | SAST_MCP_API_KEY=Optional static API key to require auth (legacy mode; HTTP transports). · SAST_MCP_JWT_SECRET=Optional HMAC secret to require JWT auth with scopes (HTTP transports). · SAST_MCP_LOG_LEVEL=Logging level: DEBUG, INFO, WARNING, ERROR (default: INFO). · SAST_MCP_TIMEOUT=Per-scan timeout in seconds (default: 300). | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"pypi","identifier":"sast-mcp-server","version":"0.8.3","runtimeHint":"uvx","transport":"stdio","environment":[{"name":"SAST_MCP_TIMEOUT","description":"Per-scan timeout in seconds (default: 300).","required":false,"secret":false},{"name":"SAST_MCP_LOG_LEVEL","description":"Logging level: DEBUG, INFO, WARNING, ERROR (default: INFO).","required":false,"secret":false},{"name":"SAST_MCP_API_KEY","description":"Optional static API key to require auth (legacy mode; HTTP transports).","required":false,"secret":true},{"name":"SAST_MCP_JWT_SECRET","description":"Optional HMAC secret to require JWT auth with scopes (HTTP transports).","required":false,"secret":true}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/io-github-skyrxin|io.github.Skyrxin]]

---

- Registry page: <https://tracevero.com/mcp/io-github-skyrxin-sast-mcp-server>
- Retrieved on: 2026-10-11