Claude MarketplacesSubmit
blackducksoftware avatar

Black Duck Security Scanner

blackducksoftware/mcp-server

Connects Claude and other AI coding assistants to Black Duck Signal's security scanner with two main tools: run_changes_security_scan for incremental Git-based analysis of uncommitted changes or branch differences, and run_security_scan for targeted file and directory checks. Both return SARIF reports with vulnerability counts and severity breakdowns. The changes scan is faster since it only analyzes modified code, making it ideal for catching issues during active development. Requires a Signal license and API key. Best when you want security feedback directly in your coding assistant without switching to separate scanning tools or waiting for CI/CD pipelines.

tools
2
transport
STDIO
last updated
Jul 17, 2026
View on GitHub

Tools

2 tools

Public tool metadata for what this MCP can expose to an agent.

run_changes_security_scanPerforms fast, incremental security scans focused only on the code changes introduced by the developer.

Performs fast, incremental security scans focused only on the code changes introduced by the developer.

No parameter schema in public metadata yet.

run_security_scanRuns a targeted security analysis on specific files or directories.

Runs a targeted security analysis on specific files or directories.

No parameter schema in public metadata yet.

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Readme

Black Duck MCP

Black Duck MCP brings Signal's AI-powered security analysis directly into your development environment. It enables code scanning through leading coding assistants – including Claude, Gemini, Cursor, Copilot, and others – so you can detect security issues, receive actionable insights, and apply recommended fixes quickly and consistently.

Key Features & Benefits

  • Changes Scan:
    • Performs fast, incremental security scans focused only on the code changes introduced by the developer.
    • Ideal for early-stage detection of issues as code is written
  • File Scan:
    • Runs a targeted security analysis on specific files or directories.
    • Best suited for projects that do not use Git or for developers who want to analyze specific portions of the codebase
  • Cross-Platform Support:
    • Works on Windows, macOS, and Linux

Requirements

Getting started

Step 1: Add to your MCP client

View the full README on GitHub

Details

Repository
github.com/blackducksoftware/mcp-server
Category
Security & Pentesting
Package
@black-duck/mcp-server
Transport
STDIO
Registry
MCP registry, active

Related Security & Pentesting MCP servers

View all
1braineetech avatarSectorabraineetech/sectoraThreat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.0stars
2frogeye-ai avatarFrogeye Security Scannerfrogeye-ai/mcpZero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.0stars
3gsepcore avatarGsep Mcpgsepcore/gsep-mcpAI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.0stars
4traveljamboree avatarAgentSec MCPio.github.traveljamboree/agentsec-mcpSecurity intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.0stars
5josephibra avatarShadowgate Mcpjosephibra/shadowgate-mcpSecurity firewall for AI agents — scans MCP calls for injection, secrets, and risks.0stars
6middlebrick avatarMcp Servermiddlebrick/mcp-serverScan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.0stars