Sentrasec MCP

Give your AI coding agent access to security scanning, explanation and fixes, without leaving the editor.

Version 0.3.1Released July 29, 2026Transport stdio

The Sentrasec MCP server lets AI coding agents work with your security data through the Model Context Protocol. Your agent can run scans, explain findings, list rules and suggest fixes, all against your own workspace.

It ships inside the sentrasec binary, so there is nothing extra to install.

Install

The MCP server is part of the Sentrasec CLI. Install it once:

$ curl -fsSL https://cli.sentrasec.ai/install.sh | bash

Full install options are in the CLI documentation.

How clients run it

MCP clients launch the server over stdio with this command. You rarely run it by hand:

$ sentrasec mcp serve

In client configuration that is { "command": "sentrasec", "args": ["mcp", "serve"] }.

Connect your client

Pick your tool for a configuration you can copy:

Claude Code, added with a single command
Cursor, added to ~/.cursor/mcp.json
Claude Desktop, added to the desktop config
VS Code, added to .vscode/mcp.json

Set an app id and app key first, so the server knows what to scan and who is scanning, then see the available tools.

The server runs locally over stdio. No network port is opened, and your source does not leave your machine to be analysed.

Looking for MCP config scanning instead?

This site is about Sentrasec acting as an MCP server for your agent. If you want Sentrasec to scan a repo's own mcp.json / agent-framework configs for risk — untrusted servers, secrets in env blocks, unpinned versions, excessive tool scope — that is a different, unrelated command, sentrasec mcp-scan, documented on the CLI site.