mcp/stackhawk

Verified Publisher

By mcp

•Updated 3 months ago

A Model Context Protocol (MCP) server for integrating with StackHawk's security scanning platform...

Image

Machine learning & AI

10K+

View on MCP:Hub

Overview Tags

mcp/stackhawk repository overview

⁠StackHawk MCP Server

A Model Context Protocol (MCP) server for integrating with StackHawk's security scanning platform. Provides security analytics, YAML configuration management, sensitive data/threat surface analysis, and anti-hallucination tools for LLMs.

What is an MCP Server?⁠

⁠MCP Info

Attribute	Details
Docker Image	mcp/stackhawk⁠
Author	stackhawk⁠
Repository	https://github.com/stackhawk/stackhawk-mcp⁠

⁠Image Building Info

Attribute	Details
Dockerfile	https://github.com/stackhawk/stackhawk-mcp/blob/28755aa34af52e120a069d18a1150e773e3f2707/Dockerfile⁠
Commit	`28755aa34af52e120a069d18a1150e773e3f2707`
Docker Image built by	Docker Inc.
Docker Scout Health Score
Verify Signature	`COSIGN_REPOSITORY=mcp/signatures cosign verify mcp/stackhawk --key https://raw.githubusercontent.com/docker/keyring/refs/heads/main/public/mcp/latest.pub`
Licence	Other

⁠Available Tools (7)

Tools provided by this Server	Short Description
`get_app_findings_for_triage`	Get triage-worthy findings for a project or application at or above the configured failureThreshold (or High/Medium if not set).
`get_organization_info`	Get information about a StackHawk organization
`list_applications`	List applications in a StackHawk organization
`run_stackhawk_scan`	Run a StackHawk scan using the CLI and stream results back to the chat.
`setup_stackhawk_for_project`	Set up StackHawk for a new project.
`validate_field_exists`	Validate that a field path exists in the StackHawk schema
`validate_stackhawk_config`	Validate a StackHawk YAML configuration file

⁠Tools Details

⁠Tool: `get_app_findings_for_triage`

Get triage-worthy findings for a project or application at or above the configured failureThreshold (or High/Medium if not set). Accepts app_id, config_path, or config_content.

Parameters	Type	Description
`app_id`	`string` optional	StackHawk application ID (optional)
`config_content`	`string` optional	YAML content of the StackHawk config file (optional, takes precedence over config_path)
`config_path`	`string` optional	Path to StackHawk config file (optional, default: stackhawk.yml)

⁠Tool: `get_organization_info`

Get information about a StackHawk organization

Parameters	Type	Description
`org_id`	`string`	Organization ID

⁠Tool: `list_applications`

List applications in a StackHawk organization

Parameters	Type	Description
`org_id`	`string`	Organization ID
`page_size`	`integer` optional	Page size (optional)

⁠Tool: `run_stackhawk_scan`

Run a StackHawk scan using the CLI and stream results back to the chat. Optionally specify a config path (default: stackhawk.yml).

Parameters	Type	Description
`config_path`	`string` optional	Path to StackHawk config file (default: stackhawk.yml)

⁠Tool: `setup_stackhawk_for_project`

Set up StackHawk for a new project. Finds or creates the application and generates a complete stackhawk.yml configuration file ready for scanning.

Parameters	Type	Description
`host`	`string`	Target URL to scan (e.g., https://localhost:3000⁠, https://ginandjuice.shop⁠)
`app_name`	`string` optional	Application name (optional, defaults to current directory name)
`environment`	`string` optional	Environment name (default: dev)
`org_id`	`string` optional	Organization ID (optional, auto-detected if omitted)

⁠Tool: `validate_field_exists`

Validate that a field path exists in the StackHawk schema

Parameters	Type	Description
`field_path`	`string`	Field path to validate

⁠Tool: `validate_stackhawk_config`

Validate a StackHawk YAML configuration file

Parameters	Type	Description
`yaml_content`	`string`	YAML content to validate

⁠Use this MCP Server

{
  "mcpServers": {
    "stackhawk": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "STACKHAWK_API_KEY",
        "mcp/stackhawk"
      ],
      "env": {
        "STACKHAWK_API_KEY": "<STACKHAWK_API_KEY>"
      }
    }
  }
}

Why is it safer to run MCP Servers with Docker?⁠

Install from MCP:Hub

StackHawk

View and Install from MCP:Hub

Tag summary

Recent tags

Content type

Image

Digest

sha256:f5c273bf0…

Size

83.4 MB

Last updated

3 months ago

docker pull mcp/stackhawk

This week's pulls

Pulls:

870

Jul 6 to Jul 12

Learn more⁠