Coverity Connect MCP Server

English | 日本語

A Model Context Protocol (MCP) server that provides seamless integration between AI assistants (like Claude Desktop) and Black Duck Coverity Connect static analysis platform.

Transform your Coverity workflow with natural language commands and automated analysis through AI-powered interactions.

🚀 Features

🔍 Comprehensive Coverity Integration

Project Management: List and explore Coverity projects and streams
Defect Analysis: Advanced defect search with intelligent filtering and detailed analysis
User Management: Complete user administration, role management, and access control
Security Focus: Specialized security vulnerability detection and analysis
CI/CD Automation: Automated pipeline integration for continuous quality monitoring
Quality Reports: Executive-level quality dashboards and trend analysis

🤖 AI-Powered Analysis

Natural Language Queries: "Show me critical security issues in project X" or "List users with administrator privileges"
Intelligent Filtering: Automatic prioritization of high-impact defects and user access management
Contextual Recommendations: AI-driven remediation suggestions and security audit insights
Trend Analysis: Historical data analysis, quality metrics, and user activity patterns

🛠️ Enterprise Ready

SOAP API Integration: Full Coverity Connect Web Services support
Authentication: Secure auth-key based authentication
Proxy Support: Corporate network and proxy configuration
Multi-Platform: Windows, macOS, and Linux support
Docker Ready: Containerized deployment for enterprise environments

📦 Installation

🎯 Claude Desktop Integration (Recommended)

For Claude Desktop users, download the DXT package from the latest release:

Download DXT Package:
- Go to Releases
- Download coverity-connect-mcp-1.0.0.dxt from the latest release
Install in Claude Desktop:
- Drag and drop the .dxt file into Claude Desktop
- Configure environment variables (see Configuration section)

🐍 Python Package Installation

Direct Installation from GitHub

# Install directly from GitHub (recommended)
pip install git+https://github.com/keides2/coverity-connect-mcp.git

Source Installation

# Clone and install from source
git clone https://github.com/keides2/coverity-connect-mcp.git
cd coverity-connect-mcp
pip install -e .

🔧 Development Installation

For development purposes:

git clone https://github.com/keides2/coverity-connect-mcp.git
cd coverity-connect-mcp

# Create virtual environment
python -m venv venv
source venv/bin/activate  # On Windows: venv\Scripts\activate

# Install with development dependencies
pip install -e ".[dev]"

🚀 Future Installation Methods

These installation methods are planned for future releases:

PyPI Installation (Planned)

pip install coverity-connect-mcp

Docker Installation (Planned)

docker pull keides2/coverity-connect-mcp:latest

⚙️ Configuration

1. Environment Variables

Create a .env file or set environment variables:

# Required - Coverity Connect Authentication
export COVAUTHUSER="your_coverity_username"
export COVAUTHKEY="your_coverity_auth_key"

# Required - Coverity Server
export COVERITY_HOST="your-coverity-server.com"
export COVERITY_PORT="443"
export COVERITY_SSL="True"

# Optional - Local Workspace
export COVERITY_BASE_DIR="/path/to/coverity/workspace"

# Optional - Corporate Proxy (if needed)
export PROXY_HOST="your-proxy-server.com"
export PROXY_PORT="3128"
export PROXY_USER="proxy_username"  # if authentication required
export PROXY_PASS="proxy_password"  # if authentication required

2. Claude Desktop Integration

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "coverity-connect": {
      "command": "coverity-mcp-server",
      "env": {
        "COVAUTHUSER": "${COVAUTHUSER}",
        "COVAUTHKEY": "${COVAUTHKEY}",
        "COVERITY_HOST": "your-coverity-server.com"
      }
    }
  }
}

3. Docker Configuration

Note: Since the Docker image is not yet published, you can build it locally:

# docker-compose.yml
version: '3.8'
services:
  coverity-mcp:
    build: .  # Build from local source
    # Future: image: keides2/coverity-connect-mcp:latest
    environment:
      - COVAUTHUSER=${COVAUTHUSER}
      - COVAUTHKEY=${COVAUTHKEY}
      - COVERITY_HOST=${COVERITY_HOST}
      # Optional proxy settings
      - PROXY_HOST=${PROXY_HOST}
      - PROXY_PORT=${PROXY_PORT}
    ports:
      - "8000:8000"

🎯 Usage Examples

Basic Project Analysis

Show me all Coverity projects and their current status

Security-Focused Analysis

Analyze the latest snapshot of project "MyWebApp" and focus on high-severity security vulnerabilities. Provide specific remediation recommendations.

Quality Reporting

Generate a comprehensive quality report for project "MyProject" including trends over the last 30 days

CI/CD Integration

Run automated Coverity analysis for group "web-team", project "frontend", branch "main" with commit message "Security fixes"

Advanced Filtering

Show me all CERT-C violations in project "EmbeddedSystem" with impact level "High" and provide code examples for fixes

User Management & Security Audit

List all users with administrator privileges and show their last login times

Role-Based Access Control

Show me the permissions and role assignments for user "developer1" and identify any security concerns

🛠️ Available Tools

Tool	Description	Example Usage
`search_defects`	Advanced defect search with filtering	Find high-severity security vulnerabilities
`get_defect_details`	Get detailed information about a specific defect	Analyze defect events and remediation steps
`list_projects`	List all accessible Coverity projects	Project inventory and access verification
`list_streams`	Get streams for a specific project	Stream-based analysis planning
`get_project_summary`	Get comprehensive project analysis	Executive project health reports
`list_users`	🆕 List all users in Coverity Connect	User inventory and access management
`get_user_details`	🆕 Get detailed information about a user	User profile and account status verification
`get_user_roles`	🆕 Get user role and permission information	Security audit and access control review

📚 Documentation

🚀 Quick Start

Getting Started Guide - 📋 Complete setup guide for production environments
Setup Guide - Complete development to production setup

English

Installation Guide - Detailed setup instructions for all platforms
Configuration Reference - Complete configuration options and security settings
API Reference - Comprehensive API documentation with examples
Usage Examples - Environment-specific configurations and examples

日本語 (Japanese)

本番環境セットアップガイド - 📋 本番環境での完全な立ち上げ手順
インストールガイド - 詳細なセットアップ手順（全プラットフォーム対応）
設定リファレンス - 完全な設定オプションとセキュリティ設定
API リファレンス - 包括的なAPI仕様書と使用例
使用例 - 環境別設定とサンプル

🌐 多言語サポート: 英語と日本語の完全ドキュメントを提供しています。すべてのガイドにはステップバイステップの手順、トラブルシューティングのヒント、実用的な例が含まれています。

🧪 Testing

# Run unit tests
pytest tests/

# Run integration tests
pytest tests/ -m integration

# Run with coverage
pytest --cov=coverity_mcp_server tests/

# Test with Docker
docker-compose -f docker-compose.test.yml up --abort-on-container-exit

🤝 Contributing

We welcome contributions! Please see our Contributing Guide for details.

Development Setup

git clone https://github.com/keides2/coverity-connect-mcp.git
cd coverity-connect-mcp
python -m venv venv
source venv/bin/activate  # On Windows: venv\Scripts\activate
pip install -e ".[dev]"
pre-commit install

Submitting Changes

Fork the repository
Create a feature branch (git checkout -b feature/amazing-feature)
Commit your changes (git commit -m 'Add amazing feature')
Push to the branch (git push origin feature/amazing-feature)
Open a Pull Request

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

🙏 Acknowledgments

Black Duck Coverity for providing the static analysis platform
Anthropic for the Model Context Protocol and Claude AI
Open Source Community for the foundational libraries and tools

📞 Support

GitHub Issues: Report bugs or request features
Discussions: Community support and questions
Security Issues: Please see our Security Policy

🗺️ Roadmap

v1.0: Complete MCP implementation with user management ✨
v1.1: Advanced filtering, custom views, and analytics dashboards
v1.2: Multi-tenant support and enhanced user administration
v1.3: GraphQL API and real-time notifications
v1.4: Machine learning-powered defect prioritization and risk assessment
v2.0: Plugin architecture and third-party integrations

Made with ❤️ for the software security community

Transform your static analysis workflow with the power of AI

This server cannot be installed

security - not tested

license - permissive license

quality - not tested

How are these scores calculated?

hybrid server

The server is able to function both locally and remotely, depending on the configuration or use case.

A Model Context Protocol server that enables natural language interaction with the Coverity Connect static analysis platform, allowing users to manage projects, analyze snapshots, and generate security reports through AI-powered interfaces.

Related MCP Servers

CodeAnalysis MCP Server
0xjcf
A
security
F
license
A
quality
A comprehensive Model Context Protocol server for advanced code analysis that provides tools for syntax analysis, dependency visualization, and AI-assisted development workflow support.
Last updated -
28
4
Python
IR Toolshed MCP Server
rossja
-
security
A
license
-
quality
A Model Context Protocol server that provides network analysis tools for security professionals, enabling AI models like Claude to perform tasks such as ASN lookups, DNS analysis, WHOIS retrieval, and IP geolocation for security investigations.
Last updated -
1
Python
Apache 2.0
SharkMCP
kriztalz
A
security
A
license
A
quality
A Model Context Protocol server that provides network packet capture and analysis capabilities through Wireshark/tshark integration, enabling AI assistants to perform network security analysis and troubleshooting.
Last updated -
4
18
TypeScript
MIT License
AI Use Cases MCP Server
makinokeiichi
-
security
F
license
-
quality
A Model Context Protocol server that collects, analyzes, and manages AI use case data from various information sources with features for web scraping, data analysis, and trend identification.
Last updated -
TypeScript

View all related MCP servers