Black Duck Security Scanner
Run dependency and codebase vulnerability scans from your coding agent without leaving the editor.
Overview
Black Duck Security Scanner is an MCP server for the Ship phase that runs AI-powered vulnerability detection via Black Duck Signal from your agent.
What is this MCP server?
- Exposes Black Duck Signal vulnerability detection to MCP-compatible agents
- Stdio npm package @black-duck/mcp-server (v1.1.6)
- AI-assisted security scanning workflow for active development repos
- Fits pre-release and dependency-upgrade review loops
- Open-source server on GitHub (blackducksoftware/mcp-server)
- Server version 1.1.6
- npm package identifier @black-duck/mcp-server
- Transport: stdio
What problem does it solve?
You keep shipping features while unsure whether new dependencies or code paths introduced exploitable issues you never formally scanned.
Who is it for?
Indie developers already using or evaluating Black Duck Signal who want agent-driven scan triggers during build-and-ship cycles.
Skip if: Teams that need DNS, email, or pre-action agent gates without a Black Duck Signal subscription or equivalent setup.
What do I get? / Deliverables
Your agent can request Signal-backed vulnerability checks during development so security review stays in the same loop as coding.
- Agent-invoked vulnerability scan results via Black Duck Signal
- Repeatable security check step in your ship workflow
- Stdio MCP server wired into local development
Recommended MCP Servers
Journey fit
How it compares
SCA and vulnerability MCP bridge, not a general DNS or agent policy firewall.
Common Questions / FAQ
Who is Black Duck Security Scanner for?
Solo and small teams building software with AI agents who want Black Duck Signal vulnerability detection callable over MCP.
When should I use Black Duck Security Scanner?
Use it in Ship—after dependency updates, before releases, or when reviewing security-sensitive changes suggested by an agent.
How do I add Black Duck Security Scanner to my agent?
Install the npm package @black-duck/mcp-server, configure stdio MCP in Claude Code or Cursor, and authenticate per Black Duck Signal requirements for your environment.