Skip to main content
Glama
Sign In
absec-mcp

absec-mcp

by AgentBreach
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

absec-mcp

Production MCP server for Cursor / VS Code Copilot — review diffs and files with the same absec rule IDs as CI.

By Agent Breach. Complements Agent Breach DAST. No account required. Not a pentest.

60-second win (Cursor)

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "absec": {
      "command": "npx",
      "args": ["-y", "@agentbreach/absec-mcp@0.1.0"],
      "env": {
        "ABSEC_WORKSPACE": "${workspaceFolder}"
      }
    }
  }
}

Then ask the agent: “Run absec review_diff on staged changes.”

Related MCP server: SnapBack MCP Server

VS Code Copilot Chat (MCP)

Same npx command in MCP settings. Tools appear as review_diff, review_file, etc.

Tools

Tool

Purpose

review_diff

staged / unstaged / all changed files

review_file

one path (workspace-sandboxed)

review_paths

batch scan (capped)

explain_finding

rule catalog / CWE / fix

apply_fix_preview

unified-diff preview (does not write)

list_rules

catalog

Suppress with # absec-ignore: ABSEC-JWT-001 or project absec.config.json.

Safety

  • Local rule engine only (no Agent Breach cloud)

  • Refuses path escape and secret-like filenames (.env, *.pem)

  • Redacts secret snippets in findings from @agentbreach/absec-core

License

Apache-2.0 © Agent Breach

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    This server cannot be deployed

    Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

    Resources

    Related MCP Connectors

    Related MCP Servers

    • Risk Audit MCP

      rachellarralde
      A
      license
      Not graded
      quality
      Not graded
      maintenance
      Enables security scanning of code projects to identify common vulnerabilities like XSS, injections, SSRF, and path traversal issues. Provides local, offline scanning with severity-grouped results and actionable fix suggestions for improving code security.
      38 npm
      -

    • SnapBack MCP Server

      vreko-dev
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI-powered code safety analysis including risk detection, secret scanning, dependency checking, and code snapshot management. Works offline for basic features with optional cloud integration for advanced ML analysis and team collaboration.
      10 npm
      1
      Apache 2.0

    • VibeGuard MCP Server

      yagyeshVyas
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI coding tools to scan projects for security vulnerabilities, hardcoded secrets, injection flaws, and privacy violations with 699 rules and 76 MCP tools, all running locally with zero telemetry.
      24 npm
      7
      MIT

    • Security & GRC MCP Server

      ninoajn
      F
      license
      Not graded
      quality
      D
      maintenance
      Enables local security scanning and compliance gap analysis for code and text, detecting secrets, PII, and OWASP vulnerabilities, and assessing readiness across major frameworks like NCA, ISO 27001, NIST CSF, and SOC 2.
      -