io.github.SymbioticSec/mcp

MCPcommunity
v1.0.1io.github.SymbioticSecUnknownUpdated 6mo agonpmGitHub

Symbiotic CLI MCP Server for security scanning and analysis

A Model Context Protocol (MCP) server for security analysis using Symbiotic CLI This server exposes security analysis tools via the MCP protocol for any MCP-compatible client. It allows scanning code and infrastructure files without affecting your workspace. - Static code analysis - Infrastructure security scanning - Comprehensive security scan (code + infrastructure) - List of supported…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
6mo agoLast update
Package
Authorio.github.SymbioticSec
LicenseUnknown
Version1.0.1
Sourcemcp-registry
npm@symbioticsec/symbiotic-mcp-server
GitHubSymbioticSec/mcp
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/25
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/10
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
—npm provenance (Sigstore)+0/5
→ Publish from GitHub Actions with the --provenance flag
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies60 resolved · 1 with advisories
Tool surface—
Security scan⚠ Warnings (0)v1.0.1 · 20d ago
DEPtar@6.2.1GHSA-34x7-hfp2-rc4v, GHSA-83g3-92jg-28cx, GHSA-8qq5-rm4j-mr97 (transitive)
EvalsNone
IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

A Model Context Protocol (MCP) server for security analysis using Symbiotic CLI This server exposes security analysis tools via the MCP protocol for any MCP-compatible client. It allows scanning code and infrastructure files without affecting your workspace. ** - Static code analysis - Infrastructure security scanning - Comprehensive security scan (code + infrastructure) - List of supported programming languages 1. Create a directory in your project root if it doesn't exist 2. Create or update…

Keywords
mcp