SSyncDev

Securityscorecard MCP Server

Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial).

Local serverstdioTypeScript

What is the Securityscorecard MCP Server?

Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial).

The short version

A community-built, comprehensive Model Context Protocol (MCP) server that integrates with the SecurityScorecard API. It runs over stdio, so it works with any MCP-compatible client — Claude Desktop, Claude Code, Cursor, VS Code, and others.

What it needs from you

  1. Node.js 20+ - Download 2. SecurityScorecard API Token - Get from your SecurityScorecard dashboard

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
minimalQuick answers (15-50 tokens)
standardOverview with context (200-300 tokens)
detailedComprehensive analysis (800+ tokens)
security_dashboardScore, grade, and key security metrics
analyze_security_risksIssue prioritization and risk analysis
create_improvement_planActionable remediation roadmaps
discover_assetsAsset inventory with security context
analyze_email_securitySPF/DMARC/DKIM analysis
api_discoverySearch 517 API endpoints with hybrid semantic/keyword search
analyze_issue_typesGranular issue type breakdowns
validate_data_completenessCross-tool data verification
query_security_dataDirect API access with discovery

How to install the Securityscorecard MCP Server

{
  "mcpServers": {
    "security-scorecard": {
      "command": "npx",
      "args": [
        "-y",
        "@callmarcus/securityscorecard-mcp"
      ],
      "env": {
        "SECURITY_SCORECARD_API_TOKEN": "YOUR_SECURITY_SCORECARD_API_TOKEN",
        "COMPANY_DOMAIN": "example.com"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

  1. Node.js 20+ - Download 2. SecurityScorecard API Token - Get from your SecurityScorecard dashboard
VariableDescriptionRequired
SECURITY_SCORECARD_API_TOKENDeclared in the maintainer’s client configuration.Check documentation
COMPANY_DOMAINDeclared in the maintainer’s client configuration.Check documentation

Example prompts to try

  • “Use Securityscorecard to security dashboard.”
  • “Use Securityscorecard to analyze security risks.”
  • “Use Securityscorecard to create improvement plan.”

Frequently asked questions

Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial). Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.

Alternatives to the Securityscorecard MCP Server

Slack Archived Reference

Your assistant inside the workspace — read channels, search history, post messages and tame the noise.

CommunicationTypeScript★ 63.0k

Fonoster

Build a programmable telecommunications stack for connecting telephony services with the Internet via a cloud-based utility.

AI & ML ServicesTypeScript★ 8.1k

Chip MCP

Project memory, tasks and Telegram notifications for your coding agent. Chip account required.

Developer ToolsRemote

mxHERO Mail2Cloud MCP

This MCP (model context protocol) server is a Python project that provides access to mxHERO's Mail2Cloud Advanced multi-account email search service.

Communication

ClickPhone

Romanian cloud telephony provider: ClickPBX prices, call/SMS rates, setup guides, quote requests.

CommunicationRemote

Speak2Web AI Transact

Order & book on AI Transact WordPress sites by AI agent — MCP tools with WhatsApp confirmation.

CommunicationRemote