Skip to main content
Glama
SumitDalavi

AI DevSecOps Agent MCP Server

by SumitDalavi
OverviewSchemaRelated ServersScoreDiscussions
TypeScript
Hybrid

AI-Assisted DevSecOps Agent — MCP Server 🤖🔒

An MCP (Model Context Protocol) server exposing DevSecOps tooling to LLM clients — turning your AI copilot into a security-aware engineering partner.

The Problem

DevSecOps teams drown in context-switching: checking pipeline status in one tab, triaging vulnerabilities in another, searching logs in a third. Meanwhile, LLM coding assistants can write code but are blind to your operational reality — they can't see your failing builds, open CVEs, or production errors.

Related MCP server: Enterprise MCP Gateway and Tool Registry

The Solution

This MCP server bridges the gap by exposing four security-critical tools to any MCP-compatible LLM client (GitHub Copilot, Claude Desktop, Cursor, etc.):

Tool

What It Does

get_pipeline_status

Fetches CI/CD pipeline runs from GitHub Actions

triage_vulnerabilities

Queries a vulnerability board and returns severity-ranked CVEs

search_logs

Searches application logs by service, severity, and time range

scan_dependencies

Analyzes a package.json or requirements.txt for known vulnerabilities

Why This Over the Obvious Alternative

Most "AI + DevOps" demos are chatbots with hardcoded responses. This project implements the Model Context Protocol (MCP) — the open standard for tool-use that GitHub Copilot, Claude, and other major LLM clients natively support. The tools return real, structured data that the LLM reasons over, not canned answers.

Architecture

┌─────────────────┐     MCP (stdio/SSE)     ┌──────────────────────┐
│  LLM Client     │◄──────────────────────►│  MCP Server          │
│  (Copilot,      │                         │                      │
│   Claude, etc.) │                         │  ┌────────────────┐  │
│                 │                         │  │ Pipeline Tool   │  │
│                 │                         │  │ Vuln Triage Tool│  │
│                 │                         │  │ Log Search Tool │  │
│                 │                         │  │ Dep Scan Tool   │  │
│                 │                         │  └────────────────┘  │
└─────────────────┘                         └──────────────────────┘
                                                      │
                                              ┌───────┴───────┐
                                              │  Mock Data    │
                                              │  (Simulated   │
                                              │   APIs)       │
                                              └───────────────┘

🛠️ Tech Stack

  • Runtime: Node.js + TypeScript

  • Protocol: Model Context Protocol (MCP) SDK

  • Transport: stdio (local) and SSE (remote)

  • Containerization: Docker

🚀 Getting Started

Local Development

npm install
npm run build
npm run start

With Docker

docker-compose up -d --build

Connecting to Claude Desktop

Add to your Claude Desktop MCP config (claude_desktop_config.json):

{
  "mcpServers": {
    "devsecops-agent": {
      "command": "node",
      "args": ["dist/index.js"]
    }
  }
}

📁 Project Structure

src/
├── index.ts              # MCP Server entry point
├── tools/
│   ├── pipeline.tool.ts  # GitHub Actions pipeline status
│   ├── vulnerability.tool.ts  # CVE triage from mock board
│   ├── logs.tool.ts      # Log search across services
│   └── dependency.tool.ts # Dependency vulnerability scanning
└── data/
    └── mock-data.ts      # Simulated API responses

Decision Log

Decision

Rationale

MCP over REST API

MCP is the emerging standard for LLM tool-use; REST would require custom integration per client

TypeScript over Python

Aligns with existing TypeScript expertise; MCP TS SDK is mature

Mock data layer

Keeps the PoC self-contained without requiring real GitHub/Jira API keys

stdio transport

Default for local MCP; SSE available for remote deployment

👨‍💻 Author

Built to demonstrate AI-augmented DevSecOps workflows and close the gap between LLM assistants and operational tooling.

This server cannot be installed

F
license - not found
-
quality - not tested
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

View all related MCP servers

Related MCP Connectors

  • pAIchart MCP Hub

    MCP Hub: AI service discovery, per-user OAuth, and multi-service workflow orchestration

  • Frogeye Security Scanner

    Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

  • copilotcliswitchgate-mcp

    Remote MCP for Copilot CLI switch gate MCP, structured receipts, audit logs, and reviewer-ready evid

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/SumitDalavi/ai-devsecops-agent-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server