DevSecOps Mcp MCP Server

A comprehensive Model Context Protocol (MCP) server that integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing…

Local serverstdio

What is the DevSecOps Mcp Server?

DevSecOps Mcp is an MCP project maintained in the jmstar85/devsecops-mcp repository. The maintainer describes its purpose as “A comprehensive Model Context Protocol (MCP) server that integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and…”. Read the project documentation for the complete scope.

Local setup

The project provides a local client configuration using node. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.

Configuration values

The example declares NODE_ENV, MCP_PORT, LOG_LEVEL, SECURITY_STRICT_MODE. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
SAST	60+ issues
DAST	5+ types
SCA	20 issues
IAST	Hybrid

How to install the DevSecOps Mcp Server

{
  "mcpServers": {
    "devsecops": {
      "command": "node",
      "args": [
        "dist/src/mcp/server.js"
      ],
      "cwd": "/path/to/DevSecOps-MCP",
      "env": {
        "NODE_ENV": "production",
        "MCP_PORT": "3000",
        "LOG_LEVEL": "info",
        "SECURITY_STRICT_MODE": "true"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

Variable	Description	Required
NODE_ENV	Declared in the maintainer’s client configuration.	Check documentation
MCP_PORT	Declared in the maintainer’s client configuration.	Check documentation
LOG_LEVEL	Declared in the maintainer’s client configuration.	Check documentation
SECURITY_STRICT_MODE	Declared in the maintainer’s client configuration.	Check documentation