O360 MCP Server
by offensive360com.offensive360/o360-mcpv1.0.2
MCP server for Offensive360 — run SAST scans on a directory and get findings back inside your AI assistant
context tax
queued
security
queued
cold start
queued
freshness
Maintained2mo ago
Install O360 MCP server
Install in Claude Code
claude mcp add o360 -e O360_TOKEN='<o360-token>' -- npx -y o360-mcpInstall in Cursor
{
"mcpServers": {
"o360": {
"command": "npx",
"args": [
"-y",
"o360-mcp"
],
"env": {
"O360_TOKEN": "<o360-token>"
}
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
Install in Claude Desktop
{
"mcpServers": {
"o360": {
"command": "npx",
"args": [
"-y",
"o360-mcp"
],
"env": {
"O360_TOKEN": "<o360-token>"
}
}
}
}Settings → Developer → Edit Config (claude_desktop_config.json), then restart.
Install in VS Code
{
"servers": {
"o360": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"o360-mcp"
],
"env": {
"O360_TOKEN": "<o360-token>"
}
}
}
}Add to .vscode/mcp.json in your workspace.
Install in Windsurf
{
"mcpServers": {
"o360": {
"command": "npx",
"args": [
"-y",
"o360-mcp"
],
"env": {
"O360_TOKEN": "<o360-token>"
}
}
}
}Add to ~/.codeium/windsurf/mcp_config.json.
Configuration
| Variable | Required | Secret | Description |
|---|---|---|---|
| O360_URL | — | — | Offensive360 instance base URL |
| O360_TOKEN | yes | yes | External scan token (free for public repos: https://offensive360.com/free-for-open-source/) |
Freshness
Maintained — last maintenance signal 2mo ago. The newest of the signals below sets the band.
Last commit (default branch)
2026-08-02 · 2mo ago · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
2026-08-02 · 2mo ago · official registry · v1.0.2
FAQ
›How do I install the O360 MCP server in Claude Code?
Run: claude mcp add o360 -e O360_TOKEN='<o360-token>' -- npx -y o360-mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does O360 require an API key?
Yes. It expects O360_TOKEN, of which 1 is a secret.
›Can I use O360 as a remote (hosted) MCP server?
No hosted endpoint is published; it runs locally over stdio.
›Is O360 in the official MCP registry?
Yes, as com.offensive360/o360-mcp.