This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
A focused Model Context Protocol (MCP) server that exposes BitSight Security Ratings as tools for AI assistants.
Note: This repo will be renamed from
mcp-gatewaytomcp-bitsightto reflect its single purpose.
This is one component in a larger MCP architecture:
┌─────────────┐ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐
│ User │────▶│ LLM Layer │────▶│ MCP Gateway │────▶│ mcp-bitsight │ ← This repo
│ (Cursor) │ │ (AI Foundry) │ │ (Router) │ │ │
└─────────────┘ └──────────────┘ └──────┬───────┘ └──────────────┘
│
├────▶ mcp-servicenow (future)
└────▶ mcp-* (future)Component | Purpose | Repo |
mcp-bitsight | BitSight API tools | This repo |
mcp-gateway | Routes to MCP servers | Separate repo (TBD) |
ai-orchestrator | LLM reasoning layer | Separate repo (TBD) |
Related MCP server: Burp Suite MCP Server
Tool | Description |
| Get security rating for any company by name |
| Search for companies in BitSight |
| Get full company details by GUID |
| Get vulnerabilities and security findings |
| View your monitored companies |
| List all risk categories |
| Get portfolio alerts |
git clone https://github.com/your-org/mcp-bitsight.git
cd mcp-bitsight
# Create virtual environment
python3 -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
# Install dependencies
pip install -e .Create a .env file:
BITSIGHT_API_TOKEN=your-api-key-here
LOG_LEVEL=WARNINGAdd to ~/.cursor/mcp.json (macOS/Linux) or %USERPROFILE%\.cursor\mcp.json (Windows):
{
"mcpServers": {
"bitsight": {
"command": "/full/path/to/mcp-bitsight/venv/bin/python",
"args": ["/full/path/to/mcp-bitsight/main.py"],
"cwd": "/full/path/to/mcp-bitsight"
}
}
}After updating mcp.json, restart Cursor completely (Cmd+Q / Alt+F4, then reopen).
If behind a corporate firewall that intercepts HTTPS, place CA certificates in certs/:
certs/
├── combined_ca_bundle.pem
└── ca_bundle.pemOr set via environment:
MCP_CA_BUNDLE=/path/to/your/ca_bundle.pemPush to dev branch triggers automatic build and deploy via GitHub Actions.
Required GitHub Secrets:
Secret | Description |
| ACR login server |
| Azure Container Registry username |
| Azure Container Registry password |
| Service principal client ID |
| Azure AD tenant ID |
| Azure subscription ID |
{
"mcpServers": {
"bitsight": {
"url": "https://your-app.azurecontainerapps.io/sse"
}
}
}mcp-bitsight/
├── app/
│ ├── __init__.py
│ ├── bitsight.py # BitSight API client
│ └── server.py # MCP tools
├── certs/ # SSL certificates
├── Documentation/
├── .github/workflows/ # CI/CD
├── main.py # Entry point
├── pyproject.toml # Dependencies
└── DockerfileVariable | Description | Default |
| BitSight API key | Required |
|
|
|
| HTTP port |
|
| DEBUG, INFO, WARNING, ERROR |
|
| Custom CA certificate path | Auto-detected |
pip install -e ".[dev]"
pytest
ruff check .
ruff format .MIT
This server cannot be deployed
Query your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.
Global B2B intelligence for AI agents: 35M+ companies, 1.6M sanctions, KYB pack. 78 tools.
One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
