codesecure-mcp 1.0.0b9

Enterprise-grade security analysis MCP server hub for IDE integration

CodeSecure MCP Server 🔒

Enterprise-grade security analysis MCP server hub for IDE integration, powered by FastMCP. CodeSecure provides a unified interface for security scanning, dependency auditing, and AI-powered remediation guidance.

🚀 Overview

CodeSecure MCP is a unified Model Context Protocol server that exposes security scanning and compliance tools to any MCP-compatible client including VS Code, Cursor, Antigravity, CLI, and CI/CD pipelines.

It orchestrates multiple industry-standard security tools and enriches their findings using advanced AI models from Google Gemini, AWS Kiro, and Azure.

🏗️ Architecture

• MCP Server: FastMCP-powered server orchestration.
• Scanner Engine: Parallel execution of 9 security tools.
• AI Manager: Multi-provider fallback and batch processing logic.
• Security Layer: Secure-by-design subprocess execution and input sanitation.

🔧 Core Features

• Multi-Scanner Engine: Bandit, Semgrep, Checkov, detect-secrets, pip-audit, etc.
• AI Enrichment: Powered by Google Gemini, AWS Kiro, and Azure OpenAI.
• False Positive Detection: >90% confidence filtering via AI.
• Multi-Format Reports: Interactive HTML, JSON, SARIF 2.1.0, and Markdown.
• Framework Mapping: OWASP Top 10, MITRE ATT&CK, NIST, and CWE.

📦 Installation

pip install codesecure-mcp
codesecure init

🚀 Usage

As CLI

# Run a comprehensive scan with Google AI enrichment
codesecure scan ./my-project --provider google

# List all available security tools
codesecure list-scanners

As MCP Server (IDE Integration)

Add to your IDE's MCP configuration:

{
  "mcpServers": {
    "codesecure": {
      "command": "codesecure",
      "args": ["mcp-server"]
    }
  }
}

🛡️ Standards & Security

• SARIF 2.1.0: Standardized reporting format.
• CWE/OWASP/MITRE: Comprehensive framework coverage.

📄 License

MIT © 2026 Noviq Technologies