checkov-mcp
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@checkov-mcpScan the Terraform directory at /path/to/project and give me an executive summary of the vulnerabilities found."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
checkov-mcp
MCP Server para analizar resultados de Checkov y generar explicaciones ejecutivas de vulnerabilidades en infraestructura Terraform.
Arquitectura
src/checkov_mcp/
├── domain/ → Entidades del negocio (Pydantic models + interfaces)
├── application/ → Casos de uso (servicios)
├── infrastructure/ → Adaptadores externos (runner Checkov, formateador JSON)
└── presentation/ → Capa MCP (FastMCP server + tools)Principios: Clean Architecture, SOLID, tipado completo con Pydantic v2.
Related MCP server: GitHub PR Review MCP Server
Requisitos
Python 3.12+
Checkov (opcional, solo para modo
auto):pip install checkov
Instalación
pip install -e .Uso como MCP Server
Inicio directo
python -m checkov_mcp.presentation.serverIntegración con cliente MCP
from fastmcp import FastMCP
client = FastMCP("checkov-mcp")
# o usa nuestro create_app()
from checkov_mcp import create_app
server = create_app()Herramientas MCP
Tool | Input | Output | Descripción |
|
|
| Escanea o parsea JSON |
|
|
| Resumen agrupado por severidad |
|
|
| Explicación ejecutiva |
|
|
| Solo fallos |
Modos de escaneo
auto (default): ejecuta
checkov --directory <path>en vivo.offline: parsea un archivo JSON pre-generado.
Desarrollo
pip install -e ".[dev]"
pytest --cov=checkov_mcp tests/Ejemplo
import asyncio
from checkov_mcp import create_app
server = create_app()
# Usar con cualquier transporte MCPVer examples/usage.py para un ejemplo completo.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
AlicenseAqualityDmaintenanceMCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.30163Apache 2.0- Alicense-qualityFmaintenanceComprehensive MCP server for analyzing GitHub pull requests, detecting security vulnerabilities, assessing code quality, and providing risk ratings across multiple languages.6MIT
- AlicenseAqualityDmaintenanceA Model Context Protocol (MCP) server for producing better Terraform through CLI analysis (tflint, checkov, trivy, kics, infracost), best-practice guidance from terraform-best-practices.com, cloud provider recommendations (Azure, AWS, GCP), and Terraform Registry resource and module guidance.185611MIT
- AlicenseAqualityCmaintenanceMCP server that connects Claude to Dependency-Track for natural language vulnerability triage, analysis, and management.14MIT
Related MCP Connectors
Scans MCP servers for tool poisoning, prompt injection and supply chain risks.
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
MCP server providing access to the Scorecard API to evaluate and optimize LLM systems.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/niyepes/python-checkov-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server