Skip to main content
Glama
niyepes

checkov-mcp

by niyepes

checkov-mcp

MCP Server para analizar resultados de Checkov y generar explicaciones ejecutivas de vulnerabilidades en infraestructura Terraform.

Arquitectura

src/checkov_mcp/
├── domain/          → Entidades del negocio (Pydantic models + interfaces)
├── application/     → Casos de uso (servicios)
├── infrastructure/  → Adaptadores externos (runner Checkov, formateador JSON)
└── presentation/    → Capa MCP (FastMCP server + tools)

Principios: Clean Architecture, SOLID, tipado completo con Pydantic v2.

Related MCP server: GitHub PR Review MCP Server

Requisitos

  • Python 3.12+

  • Checkov (opcional, solo para modo auto): pip install checkov

Instalación

pip install -e .

Uso como MCP Server

Inicio directo

python -m checkov_mcp.presentation.server

Integración con cliente MCP

from fastmcp import FastMCP
client = FastMCP("checkov-mcp")
# o usa nuestro create_app()
from checkov_mcp import create_app
server = create_app()

Herramientas MCP

Tool

Input

Output

Descripción

run_checkov

path: str, mode: str

CheckovReport

Escanea o parsea JSON

summarize_findings

report: dict

SummaryResult

Resumen agrupado por severidad

generate_talk_summary

report: dict

TalkSummary

Explicación ejecutiva

get_failed_checks

report: dict

list[CheckovFinding]

Solo fallos

Modos de escaneo

  • auto (default): ejecuta checkov --directory <path> en vivo.

  • offline: parsea un archivo JSON pre-generado.

Desarrollo

pip install -e ".[dev]"
pytest --cov=checkov_mcp tests/

Ejemplo

import asyncio
from checkov_mcp import create_app

server = create_app()
# Usar con cualquier transporte MCP

Ver examples/usage.py para un ejemplo completo.

F
license - not found
-
quality - not tested
C
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

View all related MCP servers

Related MCP Connectors

  • Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

  • Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.

  • MCP server providing access to the Scorecard API to evaluate and optimize LLM systems.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/niyepes/python-checkov-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server