zanadir
Find what a repository's CI is missing, and which security checks cannot fail the build.
- GitHub stars
- 181
- tools
- 3
- auth
- Secret needed
- transport
- STDIO
- env var
- 1
- last updated
- Nov 7, 2026
Tools
3 toolsPublic tool metadata for what this MCP can expose to an agent.
scanreturns the JSON report: the score, uncovered categories with suggested tools, and weakened controls with their verdicts.
returns the JSON report: the score, uncovered categories with suggested tools, and weakened controls with their verdicts.
No parameter schema in public metadata yet.
fixreturns ready-to-paste configuration for the gaps, and writes nothing.
returns ready-to-paste configuration for the gaps, and writes nothing.
No parameter schema in public metadata yet.
skillsreturns zanadir skills' JSON: the skills found and their problems.
returns zanadir skills' JSON: the skills found and their problems.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
GITHUB_TOKENsecretOptional: a token for the repo argument, used only when the server is started with --repo-token
Readme
zanadir is an open-source CI/CD security tool. It reads a repository's pipeline, from GitHub Actions to GitLab CI, and reports which security and quality checks are missing, or wired so they cannot fail a build.
What it answers
Details
- Repository
- github.com/mustachecase/zanadir
- Website
- mustachecase.github.io
- Category
- Security & Pentesting
- Package
docker.io/mustachecase/zanadir:0.31.0- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
Related Security & Pentesting MCP servers
View all
Wireshark Mcpbx33661/wireshark-mcpProfessional network analysis with tshark. Security audits, deep-dives, and threat detection.137stars
Virustotalburtthecoder/mcp-virustotalMCP server for querying VirusTotal API with comprehensive security analysis tools.133stars
Mcp Observatorykryptosai/mcp-observatoryMCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.121stars
Shellwardjnmetacode/shellwardAI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.108stars
Depwiredepwire/depwireDependency graph + 24 MCP tools. Impact analysis, simulation, security, agent coordination71stars
Mcpsnyk/studio-mcpEasily find and fix security issues in your applications leveraging Snyk platform capabilities.0stars