SAST MCP Server for VS Code
io.github.skyrxin/sast-mcp-server
11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations
client:VS Code
transport:stdio
runtime:pypi
Install SAST MCP Server in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "sast-mcp-timeout",
"description": "SAST_MCP_TIMEOUT",
"password": true
},
{
"type": "promptString",
"id": "sast-mcp-log-level",
"description": "SAST_MCP_LOG_LEVEL",
"password": true
},
{
"type": "promptString",
"id": "sast-mcp-api-key",
"description": "SAST_MCP_API_KEY",
"password": true
},
{
"type": "promptString",
"id": "sast-mcp-jwt-secret",
"description": "SAST_MCP_JWT_SECRET",
"password": true
}
],
"servers": {
"sast-mcp-server": {
"type": "stdio",
"command": "uvx",
"args": [
"sast-mcp-server"
],
"env": {
"SAST_MCP_TIMEOUT": "${input:sast-mcp-timeout}",
"SAST_MCP_LOG_LEVEL": "${input:sast-mcp-log-level}",
"SAST_MCP_API_KEY": "${input:sast-mcp-api-key}",
"SAST_MCP_JWT_SECRET": "${input:sast-mcp-jwt-secret}"
}
}
}
}VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs