stackhawk/stackhawk-mcp repository overview

⁠StackHawk MCP Server

A Model Context Protocol (MCP) server for integrating with StackHawk's security scanning platform.

⁠Overview

StackHawk MCP Server provides security analytics, YAML configuration management, sensitive data/threat surface analysis, and anti-hallucination tools for LLMs and AI-powered developer environments. Integrates seamlessly with AI coding assistants like Cursor, OpenAI, Anthropic, and more.

⁠🚀 Quick Start

⁠Using Docker

# Pull and run the container
docker run -e STACKHAWK_API_KEY=your-api-key stackhawk/stackhawk-mcp:latest

# Or run with custom configuration
docker run -p 8080:8080 -e STACKHAWK_API_KEY=your-api-key stackhawk/stackhawk-mcp:latest

⁠Environment Variables

⁠🛠️ Available Tools & Features

⁠Security Analytics

• Organization Info - Get details about StackHawk organizations
• Application Management - List/search applications with security status
• Vulnerability Search - Search for vulnerabilities across applications
• Security Dashboard - Generate executive dashboards
• Vulnerability Reporting - Generate detailed reports and analysis
• Trend Analysis - Analyze vulnerability trends
• Critical Findings - Get high-priority findings
• Executive Summaries - Generate executive-level summaries

⁠YAML Configuration Management

• Create Config - Generate StackHawk YAML config files
• Validate Config - Validate YAML against the official schema
• Schema Reference - Fetch the latest StackHawk schema
• Schema Caching - 24-hour TTL, manual refresh
• Anti-Hallucination - Field validation tools

⁠Sensitive Data & Threat Surface

• Sensitive Data Reporting - Organization, app, and repo-level analysis
• Trend Analysis - Track sensitive data exposure over time
• Critical Data Findings - Identify high-risk data exposures
• Surface Mapping - Map sensitive data and threat surfaces
• Data Type Categorization - PII, PCI, PHI classification
• Risk Assessment - Risk scoring, levels, and factors

⁠🔧 Usage Examples

⁠MCP Server Mode (stdio)

docker run -e STACKHAWK_API_KEY=your-api-key stackhawk/stackhawk-mcp:latest python -m stackhawk_mcp.server

⁠HTTP Server Mode (FastAPI)

docker run -p 8080:8080 -e STACKHAWK_API_KEY=your-api-key stackhawk/stackhawk-mcp:latest python -m stackhawk_mcp.http_server

⁠Integration with AI Tools

⁠Cursor IDE

{
  "mcpServers": {
    "stackhawk": {
      "command": "docker",
      "args": ["run", "--rm", "-e", "STACKHAWK_API_KEY=${env:STACKHAWK_API_KEY}", "stackhawk/stackhawk-mcp:latest", "python", "-m", "stackhawk_mcp.server"],
      "env": {
        "STACKHAWK_API_KEY": "${env:STACKHAWK_API_KEY}"
      }
    }
  }
}

⁠🔗 Links

• StackHawk Platform: stackhawk.com⁠

Tags: security, mcp, yaml, vulnerability, testing, ai, llm, stackhawk