Skip to main content
Glama
AgentBreach

absec-mcp

by AgentBreach
OverviewSchemaRelated ServersScoreDiscussions
TypeScript
Local

absec-mcp

Production MCP server for Cursor / VS Code Copilot — review diffs and files with the same absec rule IDs as CI.

By Agent Breach. Complements Agent Breach DAST. No account required. Not a pentest.

60-second win (Cursor)

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "absec": {
      "command": "npx",
      "args": ["-y", "@agentbreach/absec-mcp@0.1.0"],
      "env": {
        "ABSEC_WORKSPACE": "${workspaceFolder}"
      }
    }
  }
}

Then ask the agent: “Run absec review_diff on staged changes.”

Related MCP server: SnapBack MCP Server

VS Code Copilot Chat (MCP)

Same npx command in MCP settings. Tools appear as review_diff, review_file, etc.

Tools

Tool

Purpose

review_diff

staged / unstaged / all changed files

review_file

one path (workspace-sandboxed)

review_paths

batch scan (capped)

explain_finding

rule catalog / CWE / fix

apply_fix_preview

unified-diff preview (does not write)

list_rules

catalog

Suppress with # absec-ignore: ABSEC-JWT-001 or project absec.config.json.

Safety

  • Local rule engine only (no Agent Breach cloud)

  • Refuses path escape and secret-like filenames (.env, *.pem)

  • Redacts secret snippets in findings from @agentbreach/absec-core

License

Apache-2.0 © Agent Breach

This server cannot be installed

F
license - not found
-
quality - not tested
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • Risk Audit MCP

    rachellarralde
    A
    license
    -
    quality
    -
    maintenance
    Enables security scanning of code projects to identify common vulnerabilities like XSS, injections, SSRF, and path traversal issues. Provides local, offline scanning with severity-grouped results and actionable fix suggestions for improving code security.
    Last updated
    38

  • SnapBack MCP Server

    vreko-dev
    A
    license
    -
    quality
    B
    maintenance
    Enables AI-powered code safety analysis including risk detection, secret scanning, dependency checking, and code snapshot management. Works offline for basic features with optional cloud integration for advanced ML analysis and team collaboration.
    Last updated
    8
    1
    Apache 2.0

  • VibeGuard MCP Server

    yagyeshVyas
    A
    license
    -
    quality
    A
    maintenance
    Enables AI coding tools to scan projects for security vulnerabilities, hardcoded secrets, injection flaws, and privacy violations with 699 rules and 76 MCP tools, all running locally with zero telemetry.
    Last updated
    46
    4
    MIT

View all related MCP servers

Related MCP Connectors

  • Frogeye Security Scanner

    Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

  • GitLumen MCP

    Screens public GitHub repos and PRs to generate risk maps, findings, and merge-readiness signals.

  • aribot

    Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/AgentBreach/absec-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server