checkov-mcp
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@checkov-mcpScan the Terraform directory at /path/to/project and give me an executive summary of the vulnerabilities found."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
checkov-mcp
MCP Server para analizar resultados de Checkov y generar explicaciones ejecutivas de vulnerabilidades en infraestructura Terraform.
Arquitectura
src/checkov_mcp/
├── domain/ → Entidades del negocio (Pydantic models + interfaces)
├── application/ → Casos de uso (servicios)
├── infrastructure/ → Adaptadores externos (runner Checkov, formateador JSON)
└── presentation/ → Capa MCP (FastMCP server + tools)Principios: Clean Architecture, SOLID, tipado completo con Pydantic v2.
Related MCP server: GitHub PR Review MCP Server
Requisitos
Python 3.12+
Checkov (opcional, solo para modo
auto):pip install checkov
Instalación
pip install -e .Uso como MCP Server
Inicio directo
python -m checkov_mcp.presentation.serverIntegración con cliente MCP
from fastmcp import FastMCP
client = FastMCP("checkov-mcp")
# o usa nuestro create_app()
from checkov_mcp import create_app
server = create_app()Herramientas MCP
Tool | Input | Output | Descripción |
|
|
| Escanea o parsea JSON |
|
|
| Resumen agrupado por severidad |
|
|
| Explicación ejecutiva |
|
|
| Solo fallos |
Modos de escaneo
auto (default): ejecuta
checkov --directory <path>en vivo.offline: parsea un archivo JSON pre-generado.
Desarrollo
pip install -e ".[dev]"
pytest --cov=checkov_mcp tests/Ejemplo
import asyncio
from checkov_mcp import create_app
server = create_app()
# Usar con cualquier transporte MCPVer examples/usage.py para un ejemplo completo.
This server cannot be deployed
Maintenance
Related MCP Connectors
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
An MCP server that provides an API to LLMs to manage their JumpCloud resources.
MCP server providing access to the Scorecard API to evaluate and optimize LLM systems.
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
Related MCP Servers
AlicenseAqualityDmaintenanceMCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.3020 npm4Apache 2.0- AlicenseNot gradedqualityFmaintenanceComprehensive MCP server for analyzing GitHub pull requests, detecting security vulnerabilities, assessing code quality, and providing risk ratings across multiple languages.2 npmMIT
- AlicenseAqualityBmaintenanceA Model Context Protocol (MCP) server for producing better Terraform through CLI analysis (tflint, checkov, trivy, kics, infracost), best-practice guidance from terraform-best-practices.com, cloud provider recommendations (Azure, AWS, GCP), and Terraform Registry resource and module guidance.18545 npm1MIT
- AlicenseAqualityCmaintenanceMCP server for auditing infrastructure-as-code attack paths, finding multi-hop chains from public internet to sensitive resources.2MIT