Awesome MCP › Security & Reverse Engineering

cycodehq/cycode-cli

⭐ 100 Python repository created 2022-07-04

Cycode CLI is a locally installed application that scans a repository for four classes of security problem: hardcoded secrets and credentials, infrastructure-as-code misconfigurations, software composition analysis findings in dependencies, and static application security testing issues in the code itself. It authenticates against a Cycode account, supports configuration through commands or environment variables, works behind proxies with custom certificates, and installs as a pre-commit hook so scanning happens before code is committed rather than after it is pushed. The MCP relevance is an experimental mcp command that starts the CLI as an MCP server, exposing its scanning capabilities as tools. That changes how findings are handled: instead of a developer reading scanner output and deciding what to do, an assistant can run a scan, read the findings, locate the offending code and propose or apply a fix in the same session — with the important consequence that a leaked secret is identified while the change is still local. The project is Python. Because it is a commercial product's client, useful operation requires a Cycode account, and the MCP mode is documented as experimental rather than stable. The audience is teams already using Cycode who want scanning results actionable from inside an assistant session.

https://github.com/cycodehq/cycode-cli

mcpsecuritysastscasecrets-scanningiacpythoncycodedevsecops