Skip to main content
Glama
raviraj-ntp

armorcode-mcp

by raviraj-ntp

ArmorCode MCP

Local MCP server for ArmorCode — finding triage, scans, exceptions, risk scores, and release gate checks.


Quick start

{
  "mcpServers": {
    "armorcode": {
      "command": "npx",
      "args": ["-y", "@raviraj87/armorcode-mcp"],
      "env": {
        "ARMORCODE_URL": "https://your-tenant.armorcode.com",
        "ARMORCODE_API_TOKEN": "your-api-token"
      }
    }
  }
}

ARMORCODE_WRITE_ENABLED is optional — omit it for safe defaults (write tools preview only).


Related MCP server: bd-skill

Environment variables

Variable

Required

Description

ARMORCODE_URL

Yes

Tenant base URL

ARMORCODE_API_TOKEN

Yes

API token from Manage → Integrations → API

ARMORCODE_WRITE_ENABLED

No

Set true to apply writes with dryRun: false


Tools (v1.0)

Findings

Tool

Purpose

armorcode_search_findings

Search/filter findings

armorcode_get_finding

Full finding detail

armorcode_get_finding_events

Audit trail

armorcode_get_findings_stats

Counts by severity/status

armorcode_get_severity_stats

Severity breakdown

Status & comments (write, dry-run default)

Tool

Purpose

armorcode_confirm_finding

OPEN → CONFIRMED

armorcode_control_finding

→ CONTROLLED

armorcode_block_finding

Block via accept-risk

armorcode_accept_risk

Accept risk

armorcode_mark_false_positive

False positive

armorcode_reopen_finding

Reopen

armorcode_triage_finding

→ TRIAGE

armorcode_mitigate_finding

→ MITIGATED

armorcode_suppress_finding

Suppress

armorcode_add_comment

Add note

armorcode_add_exploitability_comment

Structured exploitability

armorcode_update_finding_severity

Change severity

Products & risk

Tool

Purpose

armorcode_list_products

List products/groups

armorcode_list_subproducts

List subproducts

armorcode_get_product_risk_score

Product risk

armorcode_get_subproduct_risk_score

Subproduct risk

armorcode_get_all_product_risk_scores

All products

Scans & exceptions

Tool

Purpose

armorcode_list_scans

List scans

armorcode_get_scan

Scan details

armorcode_execute_scan

Trigger scan

armorcode_trigger_scan_pull

PULL tool scheduler (Black Duck, etc.)

armorcode_list_scan_schedulers

List schedulers

armorcode_delete_scan_scheduler

Clean up scheduler

armorcode_list_exceptions

Open exceptions

armorcode_get_exception

Exception detail

armorcode_create_exception

Create risk register entry

armorcode_release_gate_status

Jenkins release gate check

Escape hatch

Tool

Purpose

armorcode_health

Connectivity check

armorcode_api

Any GET/POST/PUT/DELETE path


Dev

cd armorcode-mcp
npm install
npm run build
ARMORCODE_URL=... ARMORCODE_API_TOKEN=... npm run test:readonly

License

MIT — Copyright © 2026 Ravi Raj

Install Server
A
license - permissive license
C
quality
C
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • A
    license
    B
    quality
    D
    maintenance
    An MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.
    Last updated
    6
    MIT
  • F
    license
    -
    quality
    -
    maintenance
    An MCP server that provides Claude Code with access to Black Duck SCA for managing vulnerabilities, licenses, and policy violations through natural language. It enables users to query component risks and execute Black Duck Detect scans directly within their workspace.
    Last updated
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.
    Last updated
    30
    6
    3
    Apache 2.0

View all related MCP servers

Related MCP Connectors

  • MCP server for Appcircle mobile CI/CD platform.

  • An MCP server for Arcjet - the runtime security platform that ships with your AI code.

  • Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/raviraj-ntp/armorcode-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server