加载中…
Passive AppSec scanners as eight parameterless MCP tools; the audited repository is data.
AppSec Toolbox MCP 是 ChatHome Skills 收录的 MCP 条目，来源为 Official MCP Registry，质量分 78/100。 作为 Model Context Protocol 服务器，它向 Claude、Cursor、Copilot 等兼容 MCP 的 LLM 客户端暴露可直接调用的工具，让 agent 的能力超出模型内置范围。 该条目由 ChatHome Skills 的每日抓取从官方 registry 和 GitHub 发现查询中收录，每次运行都会重新核验仓库事实、新鲜度信号和安装元数据。 质量分综合了官方 registry 收录情况、可用安装命令、许可证完整性、仓库活跃度和 GitHub star 趋势，完整算法说明见来源页。安装命令已列于上方，可直接复制使用。 在将 AppSec Toolbox MCP 加入生产 agent 工作流前，请核对上方的最近更新日期和仓库状态——下方事实快照是最近一次抓取的时点值。
docker run -i --rm ghcr.io/ai-ronin-systems/appsec-toolbox-mcp:0.3.0运行此命令前，请先核对上游源码。
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-10-25T13:57:57.911846Z",
"publishedAt": "2026-10-25T13:57:57.911846Z",
"statusChangedAt": "2026-10-25T13:57:57.911846Z"
}
},
"server": {
"name": "io.github.ai-ronin-systems/appsec-toolbox-mcp",
"title": "AppSec Toolbox MCP",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.3.0",
"packages": [
{
"transport": {
"type": "stdio"
},
"identifier": "ghcr.io/ai-ronin-systems/appsec-toolbox-mcp:0.3.0",
"registryType": "oci",
"runtimeArguments": [
{
"name": "--read-only",
"type": "named",
"description": "Read-only root filesystem"
},
{
"name": "--cap-drop",
"type": "named",
"value": "ALL",
"description": "Drop all Linux capabilities"
},
{
"name": "--security-opt",
"type": "named",
"value": "no-new-privileges:true",
"description": "No privilege escalation"
},
{
"name": "--tmpfs",
"type": "named",
"value": "/tmp:rw,nosuid,nodev,size=3g",
"description": "Scanner caches; counts toward --memory"
},
{
"name": "--memory",
"type": "named",
"value": "6g",
"description": "Memory cap, including the /tmp tmpfs"
},
{
"name": "--pids-limit",
"type": "named",
"value": "512",
"description": "Process cap"
},
{
"name": "--mount",
"type": "named",
"value": "type=bind,src={target_dir},dst=/runner/target,readonly",
"variables": {
"target_dir": {
"format": "filepath",
"isRequired": true,
"description": "Absolute host path of the repository to audit"
}
},
"isRequired": true,
"description": "The repository to audit, mounted read-only"
},
{
"name": "--mount",
"type": "named",
"value": "type=bind,src={output_dir},dst=/runner/output",
"variables": {
"output_dir": {
"format": "filepath",
"isRequired": true,
"description": "Absolute host path for the evidence; must be writable by the container user"
}
},
"isRequired": true,
"description": "Where reports, the run manifest, and the audit log are written"
}
],
"environmentVariables": [
{
"name": "APPSEC_LANGS",
"default": "auto",
"description": "Language profiles: auto, none, or a list such as python,node"
}
]
}
],
"repository": {
"url": "https://github.com/ai-ronin-systems/appsec-toolbox-mcp",
"source": "github"
},
"websiteUrl": "https://github.com/ai-ronin-systems/appsec-toolbox-mcp",
"description": "Passive AppSec scanners as eight parameterless MCP tools; the audited repository is data."
}
}