o360 mcp for VS Code
com.offensive360/o360-mcp
Run Offensive360 SAST scans (60+ languages) on local code; findings with file/line and fixes
client:VS Code
transport:stdio
runtime:npm
Install o360 mcp in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "o360-url",
"description": "O360_URL",
"password": true
},
{
"type": "promptString",
"id": "o360-token",
"description": "O360_TOKEN",
"password": true
}
],
"servers": {
"o360-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"o360-mcp"
],
"env": {
"O360_URL": "${input:o360-url}",
"O360_TOKEN": "${input:o360-token}"
}
}
}
}
VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs