v1.0.0
First public release of the SecurityScorecard MCP server.
A Model Context Protocol server exposing 9 operational security tools over the SecurityScorecard REST API, with a self-contained hybrid-search (semantic + keyword) API reference covering 628 endpoints.
Highlights
- 9 focused tools: dashboard, risk analysis, improvement plans, asset discovery, email security, issue-type analysis, data-completeness validation, API discovery, and direct query access.
- Token-efficient response modes (minimal / standard / detailed).
- 0 known dependency vulnerabilities (
npm audit). - Embedding pipeline on the maintained
@huggingface/transformers. - Offline test suite (23 tests) covering the API client and search ranking; CI across Node 18/20/22.
Disclaimer
This is an independent, community-built open-source project. It is not affiliated with, endorsed by, or associated with SecurityScorecard, Inc. It is built solely against SecurityScorecard's publicly available API documentation. You must supply your own API credentials and comply with SecurityScorecard's terms of service.
Note: the prior pre-1.0 releases and their archives were removed; project history was reset for this public launch.