absec-mcp

Production MCP server for Cursor / VS Code Copilot — review diffs and files with the same absec rule IDs as CI.

By Agent Breach. Complements Agent Breach DAST. No account required. Not a pentest.

60-second win (Cursor)

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "absec": {
      "command": "npx",
      "args": ["-y", "@agentbreach/absec-mcp@0.1.0"],
      "env": {
        "ABSEC_WORKSPACE": "${workspaceFolder}"
      }
    }
  }
}

Then ask the agent: “Run absec review_diff on staged changes.”

VS Code Copilot Chat (MCP)

Same npx command in MCP settings. Tools appear as review_diff, review_file, etc.

Tools

Tool	Purpose
`review_diff`	staged / unstaged / all changed files
`review_file`	one path (workspace-sandboxed)
`review_paths`	batch scan (capped)
`explain_finding`	rule catalog / CWE / fix
`apply_fix_preview`	unified-diff preview (does not write)
`list_rules`	catalog

Suppress with # absec-ignore: ABSEC-JWT-001 or project absec.config.json.

Safety

Local rule engine only (no Agent Breach cloud)
Refuses path escape and secret-like filenames (.env, *.pem)
Redacts secret snippets in findings from @agentbreach/absec-core

absec-mcp

60-second win (Cursor)

VS Code Copilot Chat (MCP)

Tools

Safety

License