Securityscorecard Mcp

Overview

Securityscorecard Mcp is a Model Context Protocol (MCP) server: Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial). Because it speaks the Model Context Protocol, AI assistants can use Securityscorecard Mcp as a set of callable tools instead of you copy-pasting between apps.

It runs locally: the npm package @callmarcus/securityscorecard-mcp speaks MCP over stdio on your machine. Configuration happens through environment variables — you'll need SECURITY_SCORECARD_API_TOKEN. The current release is v1.2.0, with source at CallMarcus/security-scorecard-mcp on GitHub.

On mcp.site, Securityscorecard Mcp sits in the Security category. Any MCP client can use it — Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed among them — via the install snippets below. If you maintain Securityscorecard Mcp for CallMarcus, claim this listing to verify ownership, earn the Verified badge, and keep the details current.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "securityscorecard_mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@callmarcus/securityscorecard-mcp"
      ],
      "env": {
        "SECURITY_SCORECARD_API_TOKEN": "<security-scorecard-api-token>"
      }
    }
  }
}

Requires SECURITY_SCORECARD_API_TOKEN