Skip to content

v1.0.0

Choose a tag to compare

@CallMarcus CallMarcus released this 06 Jun 10:39
· 57 commits to main since this release

First public release of the SecurityScorecard MCP server.

A Model Context Protocol server exposing 9 operational security tools over the SecurityScorecard REST API, with a self-contained hybrid-search (semantic + keyword) API reference covering 628 endpoints.

Highlights

  • 9 focused tools: dashboard, risk analysis, improvement plans, asset discovery, email security, issue-type analysis, data-completeness validation, API discovery, and direct query access.
  • Token-efficient response modes (minimal / standard / detailed).
  • 0 known dependency vulnerabilities (npm audit).
  • Embedding pipeline on the maintained @huggingface/transformers.
  • Offline test suite (23 tests) covering the API client and search ranking; CI across Node 18/20/22.

Disclaimer

This is an independent, community-built open-source project. It is not affiliated with, endorsed by, or associated with SecurityScorecard, Inc. It is built solely against SecurityScorecard's publicly available API documentation. You must supply your own API credentials and comply with SecurityScorecard's terms of service.

Note: the prior pre-1.0 releases and their archives were removed; project history was reset for this public launch.