Megalinter MCP Server

MCP server for running Ox Security MegaLinter via mega-linter-runner

Local serverstdioPython

What is the Megalinter MCP server?

MCP server for running Ox Security MegaLinter via mega-linter-runner. That is what the megalinter mcp server brings to an AI assistant: the same capability, reachable through the Model Context Protocol rather than a separate app or dashboard.

The short version

A Model Context Protocol (MCP) server for running Ox Security MegaLinter through mega-linter-runner. Works with any CI/CD platform (GitHub Actions, GitLab CI, Azure DevOps, CircleCI, Jenkins) or locally.

This server provides 15 MCP tools in total: 10 core tools and 5 convenience aliases across execution, discovery, and analysis workflows.

The tools it exposes

The server publishes 11 tools. What each one is for:

  • megalinter_quick_action — Interactive shortcut that accepts a short request and routes it to the right workflow
  • megalinter_help_quick — Get context-aware help based on your current repository. Detects languages, frameworks, Docker, Terraform, and security files to suggest relevant
  • megalinter_run — Use this tool when you need full argument-level control. For short prompts, prefer megalinter_quick_action
  • megalinter_write_config — The megalinter_write_config tool exposed by this server
  • megalinter_list_flavors — Returns the built-in list of common flavors (all, javascript, python, terraform, and others)
  • megalinter_get_linters — Returns linter metadata from the built-in catalogue and supports targeted filtering
  • megalinter_get_security_info — Returns security linters grouped into categories such as SAST, secrets, supply chain, container, and infrastructure
  • megalinter_get_reporters — Returns available MegaLinter reporters, including CI-targeted formats
  • megalinter_parse_reports — The megalinter_parse_reports tool exposed by this server
  • megalinter_get_issue_summary — Summarises issues from megalinter-report.json and can apply severity/linter filters
  • megalinter_get_security_recommendations — Generates security recommendations based on active linters in the parsed report data

Getting it running

Installation goes through your MCP client rather than a global install: point it at npm on npm and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.

How it compares

Plenty of cloud and infrastructure servers cover similar ground. The differences that matter in practice are scope of access and how much setup stands between you and a working tool call. Megalinter's toolset — megalinter_quick_action, megalinter_help_quick, megalinter_run and 8 more — is a fair guide to whether it matches your workflow. It is maintained by DownAtTheBottomOfTheMoleHole; worth a glance at recent repository activity before you build anything load-bearing on it.

SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.

Things to watch

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • With 11 tools registered it takes up a noticeable share of the context window; turn it off in projects that never touch Megalinter.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Available tools

ToolWhat it does
megalinter_quick_actionInteractive shortcut that accepts a short request and routes it to the right workflow.
megalinter_help_quickGet context-aware help based on your current repository. Detects languages, frameworks, Docker, Terraform, and security files to suggest relevant commands.
megalinter_runUse this tool when you need full argument-level control. For short prompts, prefer megalinter_quick_action.
megalinter_write_configThe megalinter_write_config tool exposed by this server.
megalinter_list_flavorsReturns the built-in list of common flavors (all, javascript, python, terraform, and others).
megalinter_get_lintersReturns linter metadata from the built-in catalogue and supports targeted filtering.
megalinter_get_security_infoReturns security linters grouped into categories such as SAST, secrets, supply chain, container, and infrastructure.
megalinter_get_reportersReturns available MegaLinter reporters, including CI-targeted formats.
megalinter_parse_reportsThe megalinter_parse_reports tool exposed by this server.
megalinter_get_issue_summarySummarises issues from megalinter-report.json and can apply severity/linter filters.
megalinter_get_security_recommendationsGenerates security recommendations based on active linters in the parsed report data.

How to install the Megalinter MCP server

{
  "mcpServers": {
    "megalinter": {
      "command": "npx",
      "args": ["-y", "npm"]
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Example prompts to try

  • Use Megalinter to megalinter quick action.
  • Use Megalinter to megalinter help quick.
  • Use Megalinter to megalinter run.

Frequently asked questions

It connects Megalinter to MCP-compatible AI assistants such as Claude and Cursor, exposing 11 tools (megalinter_quick_action, megalinter_help_quick, megalinter_run, and more) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with Megalinter directly.