PSScriptAnalyzer MCP Server

MCP server wrapping PSScriptAnalyzer - Microsoft's PowerShell static analysis tool. Enables AI agents to analyze, lint, and auto-fix PowerShell code.

Features

• 🔍 Static Analysis: Detect security, performance, and style issues
• 🛠️ Auto-Fix: Automatically correct supported violations
• 📚 80+ Rules: Built-in rules for best practices
• 🤖 AI-Friendly: Designed for LLM/MCP integration
• 🌍 Cross-Platform: Windows, Linux, macOS (PowerShell 7+)

Requirements

• Python 3.10+
• PowerShell 5.1 (Windows) or PowerShell 7+ (cross-platform)
• PSScriptAnalyzer module

Installing PSScriptAnalyzer

Install-Module PSScriptAnalyzer -Scope CurrentUser

Installation

# Using uvx (recommended)
uvx psscriptanalyzer-mcp

# Using pip
pip install psscriptanalyzer-mcp

Usage

With Claude Desktop

fastmcp install psscriptanalyzer-mcp

With MCP Inspector

fastmcp dev psscriptanalyzer_mcp.server:mcp

Programmatic

from psscriptanalyzer_mcp.server import mcp

# Run the server
mcp.run()

MCP Tools

pssa_analyze

Analyze PowerShell scripts for issues.

{
  "path": "C:/Scripts/script.ps1",
  "severity": ["Error", "Warning"]
}

Supports:

• File paths
• Directory paths (with recursion)
• Inline code

pssa_list_rules

List available analysis rules.

{
  "severity": ["Error"],
  "name": "*Security*"
}

pssa_analyze_and_fix

Analyze and auto-fix issues.

{
  "path": "script.ps1",
  "dry_run": true,
  "backup": true
}

pssa_get_rule_info

Get detailed rule documentation.

{
  "rule_name": "PSAvoidUsingPlainTextForPassword"
}

Example Workflow

User: "Check this PowerShell script for issues"

AI: [calls pssa_analyze]
    Found 3 issues:
    - Line 10: Password in plain text (Error)
    - Line 25: Using alias 'dir' (Warning)
    - Line 40: Missing help comment (Information)
    
    Want me to fix the auto-fixable issues?

User: "Yes, fix them"

AI: [calls pssa_analyze_and_fix with dry_run=false]
    Fixed 1 issue:
    - Replaced 'dir' with 'Get-ChildItem'
    
    2 issues require manual review.

Rule Categories

Category	Examples
Security	Plain text passwords, injection risks
Performance	Inefficient patterns, positional parameters
Best Practices	Approved verbs, ShouldProcess
Style	Aliases, formatting, casing

Development

# Clone
git clone https://github.com/yourorg/psscriptanalyzer-mcp.git
cd psscriptanalyzer-mcp

# Install dev dependencies
pip install -e ".[dev]"

# Run tests
pytest tests/

# Run linter
ruff check src/

# Type check
mypy src/

License

MIT License - see LICENSE for details.

Related

• PSScriptAnalyzer - Microsoft's PowerShell static analysis tool
• FastMCP - Python framework for MCP servers
• MCP Specification - Model Context Protocol