mcp-security-hub/examples/mcp-project.json at master · FuzzingLabs/mcp-security-hub · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
{
  "$schema": "https://raw.githubusercontent.com/anthropics/claude-code/main/schemas/mcp-project.schema.json",
  "_comment": "Copy this file to your project root as .mcp.json",

  "mcpServers": {
    "gitleaks": {
      "_description": "Scan current project for secrets",
      "command": "docker",
      "args": [
        "run", "-i", "--rm",
        "-v", ".:/app/target:ro",
        "gitleaks-mcp:latest"
      ]
    },
    "semgrep": {
      "_description": "Static code analysis on current project",
      "command": "docker",
      "args": [
        "run", "-i", "--rm",
        "-v", ".:/app/target:ro",
        "semgrep-mcp:latest"
      ]
    },
    "trivy": {
      "_description": "Vulnerability scanning for code and dependencies",
      "command": "docker",
      "args": [
        "run", "-i", "--rm",
        "-v", ".:/app/target:ro",
        "trivy-mcp:latest"
      ]
    },
    "nuclei": {
      "_description": "Vulnerability scanning for web targets",
      "command": "docker",
      "args": ["run", "-i", "--rm", "nuclei-mcp:latest"]
    }
  }
}