ScanRook MCP Server
ScanRook MCP-Server
Ein MCP (Model Context Protocol)-Server, der KI-Assistenten Schwachstellen-Scan-Funktionen über ScanRook zur Verfügung stellt.
Tools
Tool | Beschreibung |
| Scannt ein Docker/OCI-Image auf Schwachstellen |
| Überprüft den Scan-Fortschritt und die Ergebnisse |
| Ruft detaillierte Schwachstellen-Ergebnisse ab |
| Sucht nach einer bestimmten CVE |
| Listet aktuelle Scans auf |
| Überprüft die Lizenz-Compliance |
| Vergleicht Ergebnisse zwischen zwei Scans |
| Überprüft ein Paket auf bekannte Schwachstellen |
Related MCP server: Grype MCP Server
Einrichtung
Installation
npm install -g scanrook-mcpKonfiguration
Legen Sie Ihren ScanRook-API-Schlüssel fest:
export SCANROOK_API_KEY="your-api-key"
export SCANROOK_API_URL="https://scanrook.io" # optional, defaults to scanrook.ioVerwendung mit Claude Code
Fügen Sie dies zu Ihren Claude Code MCP-Einstellungen hinzu:
{
"mcpServers": {
"scanrook": {
"command": "scanrook-mcp",
"env": {
"SCANROOK_API_KEY": "your-api-key"
}
}
}
}Verwendung mit Claude Desktop
Fügen Sie dies zu ~/Library/Application Support/Claude/claude_desktop_config.json hinzu:
{
"mcpServers": {
"scanrook": {
"command": "npx",
"args": ["scanrook-mcp"],
"env": {
"SCANROOK_API_KEY": "your-api-key"
}
}
}
}Beispiele
Sobald die Verbindung hergestellt ist, können Sie Ihren KI-Assistenten fragen:
"Scan nginx:1.27 for vulnerabilities"
"What's the status of my last scan?"
"Show me the critical findings"
"Is CVE-2024-0727 in my image?"
"Check if lodash 4.17.20 has any known vulnerabilities"
"Compare my latest scan with last week's scan"
"Analyze the licenses in my last scan"
Umgebungsvariablen
Variable | Standard | Beschreibung |
| (erforderlich) | Ihr ScanRook-API-Schlüssel |
|
| ScanRook API-Basis-URL |
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseNot gradedqualityFmaintenanceProvides security scanning capabilities through Snyk CLI tools and REST API, enabling AI assistants to test projects for vulnerabilities, retrieve security issues, and manage Snyk projects with comprehensive SAST, container, and infrastructure as code scanning.2MIT

Grype MCP Serverofficial
AlicenseAqualityFmaintenanceEnables AI assistants to perform vulnerability scanning using Grype, supporting scans of directories, container images, and packages via the Model Context Protocol.99Apache 2.0- AlicenseAqualityBmaintenanceEnables AI agents to query yamory vulnerability management for vulnerability detection, risk assessment, and remediation guidance.532MIT
- FlicenseNot gradedqualityDmaintenanceEnables AI assistants to search, analyze, and manage Docker images on Docker Hub through standardized MCP tools, with features including security scanning, layer analysis, and image comparison.
Related MCP Connectors
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/devinshawntripp/scanrook-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server