semvec/pypi-packages huggingface dataset:
codesecure-mcp 1.0.0b8
Enterprise-grade security analysis MCP server hub for IDE integration
License: MIT
Requires Python: >=3.10

# CodeSecure MCP Server 🔒

Enterprise-grade security analysis MCP server hub for IDE integration, powered by FastMCP. CodeSecure provides a unified interface for security scanning, dependency auditing, and AI-powered remediation guidance.

[![FastMCP](https://img.shields.io/badge/MCP-FastMCP-blue)](https://github.com/jlowin/fastmcp)
[![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)

## 🚀 Overview

CodeSecure MCP is a unified **Model Context Protocol** server that exposes security scanning and compliance tools to any MCP-compatible client including **VS Code**, **Cursor**, **Antigravity**, **CLI**, and **CI/CD pipelines**.

It orchestrates multiple industry-standard security tools and enriches their findings using advanced AI models from Google Gemini, AWS Kiro, and Azure.

## 🏗️ Architecture

- **MCP Server**: FastMCP-powered server orchestration.
- **Scanner Engine**: Parallel execution of 9 security tools.
- **AI Manager**: Multi-provider fallback and batch processing logic.
- **Security Layer**: Secure-by-design subprocess execution and input sanitation.

## 🔧 Core Features

- **Multi-Scanner Engine**: Bandit, Semgrep, Checkov, detect-secrets, pip-audit, etc.
- **AI Enrichment**: Powered by Google Gemini, AWS Kiro, and Azure OpenAI.
- **False Positive Detection**: >90% confidence filtering via AI.
- **Async Job Management**: Real-time progress tracking and concurrency control.
- **Multi-Format Reports**: Interactive HTML, JSON, SARIF 2.1.0, and Markdown.
- **Framework Mapping**: OWASP Top 10, MITRE ATT&CK, NIST, and CWE.

## 📦 Installation

```bash
pip install codesecure-mcp
codesecure init
```

Detailed instructions for all platforms can be found in the [**Installation Guide**](docs/Installation-Guide.md).

## 🚀 Usage

### As CLI

```bash
# Run a comprehensive scan with Google AI enrichment
codesecure scan ./my-project --provider google

# List all available security tools
codesecure list-scanners
```

### As MCP Server (IDE Integration)

Add to your IDE's MCP configuration:

```json
{
  "mcpServers": {
    "codesecure": {
      "command": "codesecure",
      "args": ["mcp-server"]
    }
  }
}
```

See the [**How-to-Use Guide**](docs/How-to-Use-Guide.md) for full command reference and MCP tool specifications.

## 📋 Documentation

- [**Product Requirements (PRD)**](docs/Codesecure-MCP-PRD.md)
- [**Technical Design (TDD)**](docs/CodeSecure-MCP-TDD.md)
- [**Installation Guide**](docs/Installation-Guide.md)
- [**How-to-Use Guide**](docs/How-to-Use-Guide.md)

## 🛡️ Standards & Security

- **SARIF 2.1.0**: Standardized reporting format.
- **CWE/OWASP/MITRE**: Comprehensive framework coverage.
- **Secure-by-Design**: Enforced `shell=False`, path validation, and log sanitization.

## 📄 License

MIT © 2026 Noviq Technologies