{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.ai-ronin-systems/appsec-toolbox-mcp","description":"Passive AppSec scanners as eight parameterless MCP tools; the audited repository is data.","title":"AppSec Toolbox MCP","repository":{"url":"https://github.com/ai-ronin-systems/appsec-toolbox-mcp","source":"github"},"version":"0.3.0","websiteUrl":"https://github.com/ai-ronin-systems/appsec-toolbox-mcp","packages":[{"registryType":"oci","identifier":"ghcr.io/ai-ronin-systems/appsec-toolbox-mcp:0.3.0","transport":{"type":"stdio"},"runtimeArguments":[{"description":"Read-only root filesystem","type":"named","name":"--read-only"},{"description":"Drop all Linux capabilities","type":"named","name":"--cap-drop","value":"ALL"},{"description":"No privilege escalation","type":"named","name":"--security-opt","value":"no-new-privileges:true"},{"description":"Scanner caches; counts toward --memory","type":"named","name":"--tmpfs","value":"/tmp:rw,nosuid,nodev,size=3g"},{"description":"Memory cap, including the /tmp tmpfs","type":"named","name":"--memory","value":"6g"},{"description":"Process cap","type":"named","name":"--pids-limit","value":"512"},{"description":"The repository to audit, mounted read-only","isRequired":true,"variables":{"target_dir":{"description":"Absolute host path of the repository to audit","isRequired":true,"format":"filepath"}},"type":"named","name":"--mount","value":"type=bind,src={target_dir},dst=/runner/target,readonly"},{"description":"Where reports, the run manifest, and the audit log are written","isRequired":true,"variables":{"output_dir":{"description":"Absolute host path for the evidence; must be writable by the container user","isRequired":true,"format":"filepath"}},"type":"named","name":"--mount","value":"type=bind,src={output_dir},dst=/runner/output"}],"environmentVariables":[{"description":"Language profiles: auto, none, or a list such as python,node","default":"auto","name":"APPSEC_LANGS"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-10-25T13:57:57.911846Z","publishedAt":"2026-10-25T13:57:57.911846Z","updatedAt":"2026-10-25T13:57:57.911846Z","isLatest":true}}}