# absec-mcp

Production **MCP server** for Cursor / VS Code Copilot — review diffs and files with the **same absec rule IDs** as CI.

By [Agent Breach](https://agentbreach.com). Complements Agent Breach DAST. **No account required.** Not a pentest.

## 60-second win (Cursor)

Add to `.cursor/mcp.json`:

```json
{
  "mcpServers": {
    "absec": {
      "command": "npx",
      "args": ["-y", "@agentbreach/absec-mcp@0.1.0"],
      "env": {
        "ABSEC_WORKSPACE": "${workspaceFolder}"
      }
    }
  }
}
```

Then ask the agent: “Run absec review_diff on staged changes.”

## VS Code Copilot Chat (MCP)

Same npx command in MCP settings. Tools appear as `review_diff`, `review_file`, etc.

## Tools

| Tool | Purpose |
|------|---------|
| `review_diff` | staged / unstaged / all changed files |
| `review_file` | one path (workspace-sandboxed) |
| `review_paths` | batch scan (capped) |
| `explain_finding` | rule catalog / CWE / fix |
| `apply_fix_preview` | unified-diff preview (**does not write**) |
| `list_rules` | catalog |

Suppress with `# absec-ignore: ABSEC-JWT-001` or project `absec.config.json`.

## Safety

- Local rule engine only (no Agent Breach cloud)
- Refuses path escape and secret-like filenames (`.env`, `*.pem`)
- Redacts secret snippets in findings from `@agentbreach/absec-core`

## License

Apache-2.0 © Agent Breach