Skip to main content
Glama
TheSkeenAdvantage

mcp-bitsight

mcp-bitsight

A focused Model Context Protocol (MCP) server that exposes BitSight Security Ratings as tools for AI assistants.

Note: This repo will be renamed from mcp-gateway to mcp-bitsight to reflect its single purpose.

Architecture Context

This is one component in a larger MCP architecture:

┌─────────────┐     ┌──────────────┐     ┌──────────────┐     ┌──────────────┐
│    User     │────▶│  LLM Layer   │────▶│  MCP Gateway │────▶│ mcp-bitsight │ ← This repo
│  (Cursor)   │     │ (AI Foundry) │     │   (Router)   │     │              │
└─────────────┘     └──────────────┘     └──────┬───────┘     └──────────────┘
                                                │
                                                ├────▶ mcp-servicenow (future)
                                                └────▶ mcp-* (future)

Component

Purpose

Repo

mcp-bitsight

BitSight API tools

This repo

mcp-gateway

Routes to MCP servers

Separate repo (TBD)

ai-orchestrator

LLM reasoning layer

Separate repo (TBD)

Related MCP server: Burp Suite MCP Server

Available Tools

Tool

Description

get_bitsight_score

Get security rating for any company by name

search_companies

Search for companies in BitSight

get_company_details

Get full company details by GUID

get_security_findings

Get vulnerabilities and security findings

get_portfolio

View your monitored companies

get_risk_vectors

List all risk categories

get_alerts

Get portfolio alerts

Quick Start

1. Clone and Setup

git clone https://github.com/your-org/mcp-bitsight.git
cd mcp-bitsight

# Create virtual environment
python3 -m venv venv
source venv/bin/activate  # On Windows: venv\Scripts\activate

# Install dependencies
pip install -e .

2. Configure Environment

Create a .env file:

BITSIGHT_API_TOKEN=your-api-key-here
LOG_LEVEL=WARNING

3. Connect to Cursor

Add to ~/.cursor/mcp.json (macOS/Linux) or %USERPROFILE%\.cursor\mcp.json (Windows):

{
  "mcpServers": {
    "bitsight": {
      "command": "/full/path/to/mcp-bitsight/venv/bin/python",
      "args": ["/full/path/to/mcp-bitsight/main.py"],
      "cwd": "/full/path/to/mcp-bitsight"
    }
  }
}

4. Restart Cursor

After updating mcp.json, restart Cursor completely (Cmd+Q / Alt+F4, then reopen).

Corporate Proxy / SSL Certificates

If behind a corporate firewall that intercepts HTTPS, place CA certificates in certs/:

certs/
├── combined_ca_bundle.pem
└── ca_bundle.pem

Or set via environment:

MCP_CA_BUNDLE=/path/to/your/ca_bundle.pem

Cloud Deployment (Azure)

CI/CD

Push to dev branch triggers automatic build and deploy via GitHub Actions.

Required GitHub Secrets:

Secret

Description

ACR_LOGIN_SERVER

ACR login server

ACR_USERNAME

Azure Container Registry username

ACR_PASSWORD

Azure Container Registry password

AZURE_CLIENT_ID

Service principal client ID

AZURE_TENANT_ID

Azure AD tenant ID

AZURE_SUBSCRIPTION_ID

Azure subscription ID

Connect Cursor to Cloud

{
  "mcpServers": {
    "bitsight": {
      "url": "https://your-app.azurecontainerapps.io/sse"
    }
  }
}

Project Structure

mcp-bitsight/
├── app/
│   ├── __init__.py
│   ├── bitsight.py      # BitSight API client
│   └── server.py        # MCP tools
├── certs/               # SSL certificates
├── Documentation/
├── .github/workflows/   # CI/CD
├── main.py              # Entry point
├── pyproject.toml       # Dependencies
└── Dockerfile

Environment Variables

Variable

Description

Default

BITSIGHT_API_TOKEN

BitSight API key

Required

MCP_TRANSPORT

stdio or http

stdio

PORT

HTTP port

8000

LOG_LEVEL

DEBUG, INFO, WARNING, ERROR

WARNING

MCP_CA_BUNDLE

Custom CA certificate path

Auto-detected

Development

pip install -e ".[dev]"
pytest
ruff check .
ruff format .

License

MIT

A
license - permissive license
-
quality - not tested
D
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/TheSkeenAdvantage/mcp-bitisght'

If you have feedback or need assistance with the MCP directory API, please join our Discord server