Skip to main content
Glama
AgentBreach

absec-mcp

by AgentBreach
OverviewSchemaSourceRelated ServersScoreDiscussionsAdmin
TypeScript
Local

absec-mcp

Production MCP server for Cursor / VS Code Copilot — review diffs and files with the same absec rule IDs as CI.

By Agent Breach. Complements Agent Breach DAST. No account required. Not a pentest.

60-second win (Cursor)

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "absec": {
      "command": "npx",
      "args": ["-y", "@agentbreach/absec-mcp@0.1.0"],
      "env": {
        "ABSEC_WORKSPACE": "${workspaceFolder}"
      }
    }
  }
}

Then ask the agent: “Run absec review_diff on staged changes.”

Related MCP server: SnapBack MCP Server

VS Code Copilot Chat (MCP)

Same npx command in MCP settings. Tools appear as review_diff, review_file, etc.

Tools

Tool

Purpose

review_diff

staged / unstaged / all changed files

review_file

one path (workspace-sandboxed)

review_paths

batch scan (capped)

explain_finding

rule catalog / CWE / fix

apply_fix_preview

unified-diff preview (does not write)

list_rules

catalog

Suppress with # absec-ignore: ABSEC-JWT-001 or project absec.config.json.

Safety

  • Local rule engine only (no Agent Breach cloud)

  • Refuses path escape and secret-like filenames (.env, *.pem)

  • Redacts secret snippets in findings from @agentbreach/absec-core

License

Apache-2.0 © Agent Breach

This server cannot be installed

RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • Risk Audit MCP

    rachellarralde
    A
    license
    Not graded
    quality
    Not graded
    maintenance
    Enables security scanning of code projects to identify common vulnerabilities like XSS, injections, SSRF, and path traversal issues. Provides local, offline scanning with severity-grouped results and actionable fix suggestions for improving code security.
    38
    -

  • SnapBack MCP Server

    vreko-dev
    A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI-powered code safety analysis including risk detection, secret scanning, dependency checking, and code snapshot management. Works offline for basic features with optional cloud integration for advanced ML analysis and team collaboration.
    8
    1
    Apache 2.0

  • VibeGuard MCP Server

    yagyeshVyas
    A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI coding tools to scan projects for security vulnerabilities, hardcoded secrets, injection flaws, and privacy violations with 699 rules and 76 MCP tools, all running locally with zero telemetry.
    21
    6
    MIT