ScanRook MCP 服务器

一个 MCP (Model Context Protocol) 服务器，通过 ScanRook 为 AI 助手提供漏洞扫描功能。

工具

Related MCP server: Grype MCP Server

设置

安装

npm install -g scanrook-mcp

配置

设置您的 ScanRook API 密钥：

export SCANROOK_API_KEY="your-api-key"
export SCANROOK_API_URL="https://scanrook.io"  # optional, defaults to scanrook.io

与 Claude Code 一起使用

添加到您的 Claude Code MCP 设置中：

{
  "mcpServers": {
    "scanrook": {
      "command": "scanrook-mcp",
      "env": {
        "SCANROOK_API_KEY": "your-api-key"
      }
    }
  }
}

与 Claude Desktop 一起使用

添加到 ~/Library/Application Support/Claude/claude_desktop_config.json：

{
  "mcpServers": {
    "scanrook": {
      "command": "npx",
      "args": ["scanrook-mcp"],
      "env": {
        "SCANROOK_API_KEY": "your-api-key"
      }
    }
  }
}

示例

连接后，您可以询问您的 AI 助手：

• "Scan nginx:1.27 for vulnerabilities"

• "What's the status of my last scan?"

• "Show me the critical findings"

• "Is CVE-2024-0727 in my image?"

• "Check if lodash 4.17.20 has any known vulnerabilities"

• "Compare my latest scan with last week's scan"

• "Analyze the licenses in my last scan"

环境变量