Securityscorecard MCP Server
by callmarcusio.github.CallMarcus/securityscorecard-mcpv2.0.0
Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial).
context tax
queued
security
queued
cold start
queued
freshness
Active5d ago
Install Securityscorecard MCP server
Install in Claude Code
claude mcp add securityscorecard -e SECURITY_SCORECARD_API_TOKEN='<security-scorecard-api-token>' -- npx -y @callmarcus/securityscorecard-mcpInstall in Cursor
{
"mcpServers": {
"securityscorecard": {
"command": "npx",
"args": [
"-y",
"@callmarcus/securityscorecard-mcp"
],
"env": {
"SECURITY_SCORECARD_API_TOKEN": "<security-scorecard-api-token>"
}
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
Install in Claude Desktop
{
"mcpServers": {
"securityscorecard": {
"command": "npx",
"args": [
"-y",
"@callmarcus/securityscorecard-mcp"
],
"env": {
"SECURITY_SCORECARD_API_TOKEN": "<security-scorecard-api-token>"
}
}
}
}Settings → Developer → Edit Config (claude_desktop_config.json), then restart.
Install in VS Code
{
"servers": {
"securityscorecard": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@callmarcus/securityscorecard-mcp"
],
"env": {
"SECURITY_SCORECARD_API_TOKEN": "<security-scorecard-api-token>"
}
}
}
}Add to .vscode/mcp.json in your workspace.
Install in Windsurf
{
"mcpServers": {
"securityscorecard": {
"command": "npx",
"args": [
"-y",
"@callmarcus/securityscorecard-mcp"
],
"env": {
"SECURITY_SCORECARD_API_TOKEN": "<security-scorecard-api-token>"
}
}
}
}Add to ~/.codeium/windsurf/mcp_config.json.
Configuration
| Variable | Required | Secret | Description |
|---|---|---|---|
| SECURITY_SCORECARD_API_TOKEN | yes | yes | SecurityScorecard API token (get one from your SecurityScorecard dashboard). |
| COMPANY_DOMAIN | — | — | Optional default company domain for queries (e.g. example.com). |
Freshness
Active — last maintenance signal 5d ago. The newest of the signals below sets the band.
Last commit (default branch)
2026-10-04 · 5d ago · GitHub
Latest release
2026-10-04 · 5d ago · GitHub · v2.0.0
Package published
no data · npm/PyPI
Registry entry updated
2026-10-04 · 5d ago · official registry · v2.0.0
FAQ
›How do I install the Securityscorecard MCP server in Claude Code?
Run: claude mcp add securityscorecard -e SECURITY_SCORECARD_API_TOKEN='<security-scorecard-api-token>' -- npx -y @callmarcus/securityscorecard-mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does Securityscorecard require an API key?
Yes. It expects SECURITY_SCORECARD_API_TOKEN, of which 1 is a secret.
›Can I use Securityscorecard as a remote (hosted) MCP server?
No hosted endpoint is published; it runs locally over stdio.
›Is Securityscorecard in the official MCP registry?
Yes, as io.github.CallMarcus/securityscorecard-mcp.