securityscorecard mcp for VS Code

io.github.callmarcus/securityscorecard-mcp

Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial).

client:VS Code transport:stdio runtime:npm

Install securityscorecard mcp in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "security-scorecard-api-token",
      "description": "SECURITY_SCORECARD_API_TOKEN",
      "password": true
    },
    {
      "type": "promptString",
      "id": "company-domain",
      "description": "COMPANY_DOMAIN",
      "password": true
    }
  ],
  "servers": {
    "securityscorecard-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@callmarcus/securityscorecard-mcp"
      ],
      "env": {
        "SECURITY_SCORECARD_API_TOKEN": "${input:security-scorecard-api-token}",
        "COMPANY_DOMAIN": "${input:company-domain}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

securityscorecard mcp in other clients

securityscorecard mcp MCP server