Securityscorecard Mcp
Query SecurityScorecard ratings and portfolio data from your agent during vendor review or self-assessment.
Overview
SecurityScorecard MCP is an MCP server for the Ship phase that lets agents call the unofficial SecurityScorecard API with your dashboard token.
What is this MCP server?
- Community MCP server for SecurityScorecard API (unofficial) v1.1.1
- Stdio npm package @callmarcus/securityscorecard-mcp
- SECURITY_SCORECARD_API_TOKEN required; optional COMPANY_DOMAIN default
- Comprehensive API surface for portfolio and company domain queries from agents
- Version 1.1.1; npm @callmarcus/securityscorecard-mcp
- 2 documented env vars: SECURITY_SCORECARD_API_TOKEN (required), COMPANY_DOMAIN (optional)
- Transport: stdio; unofficial community build
What problem does it solve?
Vendor and self security scores live in a separate dashboard while you need answers inside your agent workflow.
Who is it for?
Builders with SecurityScorecard access who want agent-driven vendor diligence or score monitoring.
Skip if: Teams without SSC subscriptions, regulated decisions requiring official SSC UI only, or greenfield apps with no third-party risk process.
What do I get? / Deliverables
After install, agents can query SecurityScorecard data via MCP using your API token and optional default domain.
- MCP tools wired to SecurityScorecard API endpoints
- Agent-readable security score and portfolio query results
Recommended MCP Servers
Journey fit
How it compares
Unofficial SecurityScorecard API MCP bridge, not a penetration-test skill or WAF integration.
Common Questions / FAQ
Who is securityscorecard-mcp for?
Solo founders and small teams with SecurityScorecard API access who want ratings in Claude or Cursor during security reviews.
When should I use securityscorecard-mcp?
Use it before launch or enterprise sales when you need portfolio scores, domain benchmarks, or vendor comparisons inside the agent.
How do I add securityscorecard-mcp to my agent?
Set SECURITY_SCORECARD_API_TOKEN (and optional COMPANY_DOMAIN), add @callmarcus/securityscorecard-mcp stdio to MCP config, restart the client.