Securityscorecard Mcp
Connects Claude to SecurityScorecard's cybersecurity rating platform through nine specialized tools covering company security scores, risk analysis, asset discovery, email security configs (SPF/DMARC/DKIM), and remediation planning. Includes a hybrid semantic search across 628 API endpoints to help you find the right data without reading docs. Each tool supports minimal, standard, and detailed response modes to control token usage. Unofficial community build that requires your own SecurityScorecard API credentials. Reach for this when you're automating security assessments, building vendor risk workflows, or need Claude to pull live threat intelligence and compliance data from SecurityScorecard's platform.
- tools
- 9
- auth
- Secret needed
- transport
- STDIO
- env vars
- 2
- last updated
- Oct 4, 2026
Tools
9 toolsPublic tool metadata for what this MCP can expose to an agent.
security_dashboardScore, grade, and key security metrics
Score, grade, and key security metrics
No parameter schema in public metadata yet.
analyze_security_risksIssue prioritization and risk analysis
Issue prioritization and risk analysis
No parameter schema in public metadata yet.
create_improvement_planActionable remediation roadmaps
Actionable remediation roadmaps
No parameter schema in public metadata yet.
discover_assetsAsset inventory with security context
Asset inventory with security context
No parameter schema in public metadata yet.
analyze_email_securitySPF/DMARC/DKIM analysis
SPF/DMARC/DKIM analysis
No parameter schema in public metadata yet.
api_discoverySearch 535 API endpoints with hybrid semantic/keyword search
Search 535 API endpoints with hybrid semantic/keyword search
No parameter schema in public metadata yet.
analyze_issue_typesGranular issue type breakdowns
Granular issue type breakdowns
No parameter schema in public metadata yet.
validate_data_completenessCross-tool data verification
Cross-tool data verification
No parameter schema in public metadata yet.
query_security_dataDirect API access with discovery
Direct API access with discovery
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
SECURITY_SCORECARD_API_TOKEN*secretSecurityScorecard API token (get one from your SecurityScorecard dashboard).
COMPANY_DOMAINOptional default company domain for queries (e.g. example.com).
Readme
SSC MCP Server
A community-built, comprehensive Model Context Protocol (MCP) server that integrates with the SecurityScorecard API. It runs over stdio, so it works with any MCP-compatible client — Claude Desktop, Claude Code, Cursor, VS Code, and others. It serves MCP protocol revision 2026-07-28 and stays compatible with 2025-era clients.
Published on npm as
@callmarcus/securityscorecard-mcpand listed in the MCP Registry asio.github.CallMarcus/securityscorecard-mcp.
Details
- Repository
- github.com/callmarcus/security-scorecard-mcp
- Category
- Security & Pentesting
- Package
@callmarcus/securityscorecard-mcp- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
Related Security & Pentesting MCP servers
View all
Obsidian Mcp Securedewtech-technologies/obsidian-mcp-secureSecure MCP server for Obsidian with OWASP Top 10 controls and full audit logging.0starsTubemind Secure Mcpdewtech-technologies/tubemind-secure-mcpSecure MCP server for YouTube intelligence — 18 tools, OAuth2, OWASP Top 10 controls.0stars
Dep Oracleertugrulakben/dep-oraclePredictive dependency security engine. Trust scores, zombie detection, blast radius analysis.0stars
Dlp Mcpcx-anand-nandeshwar/security-mcp-marketplaceThe DLP MCP provides the compliance violation in the one drive, google drive documents.0stars
Malwarebazaarpipeworx-io/mcp-malwarebazaarMalwareBazaar MCP — abuse.ch malware sample database (free, key required)0stars