How do I install the gothreatscope mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

It reads `GTS_MCP_MODE`, `GOTHREATSCOPE_METRICS_URL` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Gothreatscope MCP Server

This tool also acts as a **Model Context Protocol (MCP)** server, allowing IDEs such as **Cursor** or **Visual Studio Code** to query its results

Remote serverstreamable-httpGo

What is the Gothreatscope MCP Server?

This tool also acts as a Model Context Protocol (MCP) server, allowing IDEs such as Cursor or Visual Studio Code to query its results using natural

The short version

GoThreatScope performs an high-level security inspection of a project directory and organizes the results for both human and automated analysis.

What it needs from you

Go 1.21 or newer - (Optional) Gitleaks v8+ for extended secret detection

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
analyzeRepo	Runs the full pipeline (SBOM → Vulnerabilities → Secrets).
scanRepoSBOM	Generates an SBOM and returns its file URI.
vulnCheck	Checks for vulnerabilities and malicious packages using [OSV.dev](https://osv.dev).
secretScan	Scans for secrets (using Gitleaks or the built-in engine).

How to install the Gothreatscope MCP Server

{
  "mcpServers": {
    "gothreatscope": {
      "command": "/absolute/path/to/gothreatscope",
      "args": [
        "--mcp"
      ],
      "env": {
        "GTS_MCP_MODE": "1"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

Go 1.21 or newer - (Optional) Gitleaks v8+ for extended secret detection

Variable	Description	Required
GTS_MCP_MODE	Declared in the maintainer’s client configuration.	Check documentation

Example prompts to try

“Use Gothreatscope to analyzeRepo.”
“Use Gothreatscope to scanRepoSBOM.”
“Use Gothreatscope to vulnCheck.”

Frequently asked questions

This tool also acts as a **Model Context Protocol (MCP)** server, allowing IDEs such as **Cursor** or **Visual Studio Code** to query its results using natural Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.