Stackhawk
Connects to StackHawk's security scanning platform to help you set up, run, and triage application security scans from your IDE or AI chat. You get tools to detect your project type and generate a stackhawk.yml config, trigger scans (with CLI install help if needed), pull findings above your failure threshold for remediation, and validate YAML against the official schema to prevent hallucinated configurations. Works with Cursor, GitHub Copilot, and other LLM environments via stdio transport. Requires a StackHawk API key and Python 3.10 or higher. Reach for this when you want to shift security scanning left without leaving your development workflow.
- GitHub stars
- 7
- tools
- 7
- auth
- Secret needed
- transport
- STDIO
- env var
- 1
- last updated
- Oct 31, 2025
Tools
7 toolsPublic tool metadata for what this MCP can expose to an agent.
get_organization_infoGet org details, teams, and applications
Get org details, teams, and applications
No parameter schema in public metadata yet.
list_applicationsList applications in an organization
List applications in an organization
No parameter schema in public metadata yet.
setup_stackhawk_for_projectDetect language, find/create app, generate `stackhawk.yml`
Detect language, find/create app, generate `stackhawk.yml`
No parameter schema in public metadata yet.
validate_stackhawk_configValidate YAML against the official StackHawk schema
Validate YAML against the official StackHawk schema
No parameter schema in public metadata yet.
validate_field_existsCheck if a field path is valid in the schema (anti-hallucination)
Check if a field path is valid in the schema (anti-hallucination)
No parameter schema in public metadata yet.
run_stackhawk_scanRun a StackHawk scan via the CLI (returns install help if CLI is missing)
Run a StackHawk scan via the CLI (returns install help if CLI is missing)
No parameter schema in public metadata yet.
get_app_findings_for_triageGet findings at/above the configured failure threshold
Get findings at/above the configured failure threshold
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
STACKHAWK_API_KEY*secretStackHawk API key
Readme
StackHawk MCP Server
Current Version: 1.2.5 Requires Python 3.10 or higher
A Model Context Protocol (MCP) server for integrating with StackHawk's security scanning platform. Helps developers set up StackHawk, run security scans, and triage findings to fix vulnerabilities — all from within an LLM-powered IDE or chat.
Table of Contents
- Features
- Installation
- Usage
- Configuration
- Available Tools
- Testing & Development
- Example Configurations
- Integrating with LLMs and IDEs
- Contributing
- License
Details
- Repository
- github.com/stackhawk/stackhawk-mcp
- Category
- Security & Pentesting
- Package
stackhawk-mcp- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
Related Security & Pentesting MCP servers
View all
Go Unifi Mcpclaytono/go-unifi-mcpManage UniFi sites, devices, clients, networks, port forwarding, DNS, and firewall6stars
IPGeolocation.io MCP Serveripgeolocation/ipgeolocation-io-mcpIP geolocation, company, ASN/network, security, abuse, time zones, astronomy, currency, user agents.6stars
Judges Panelkevinrabun/judges45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.6stars
Skill Audit Mcpeltociear/skill-audit-mcpMCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.5stars
npm Registry MCP Serveryawlabs/npmjs-mcpnpm registry MCP server — package intelligence, security audits, dependency analysis5stars
Argusironclawdevs27/argusAutomated web QA via Chrome DevTools MCP — a11y, security, visual, env diff, CI; Aegis redaction.5stars