OWASP Cheatsheets MCP Server

OWASP Cheat Sheet MCP Server

A minimal Model Context Protocol (MCP) compatible server providing the OWASP Cheat Sheets.

The server uses FastAPI to expose a simple HTTP API that returns the contents of the cheat sheets from the OWASP Cheat Sheet Series.

Prerequisites

• Python 3.8 or newer
• Git (for cloning the cheat sheet repository on first run)

Usage

1. Install requirements:
   pip install -r requirements.txt
2. (Optional) Set CHEATSHEETS_DIR if you already have a local copy of the cheat sheets:
   export CHEATSHEETS_DIR=/path/to/CheatSheetSeries/cheatsheets
3. Run the server with uvicorn:
   uvicorn server.app:app --reload
4. If CHEATSHEETS_DIR is not set the server will clone the cheat sheet repository on first start (requires network access).

Endpoints

• GET /health – Basic health check.
• GET /cheatsheets – List available cheat sheet files.
• GET /cheatsheets/{name} – Retrieve a specific cheat sheet.
• GET /search?q=term – Search cheat sheets for a term and return matching file names.

Running in production

Use uvicorn with explicit host and port when deploying:

For a real deployment consider a process manager such as systemd or running behind a reverse proxy.

Contributing

Pull requests are welcome. Tests can be added under a tests/ directory using pytest.

This implementation is a simplified example of an MCP server and may not cover the entire specification.