@guardbee/mcp-vulnerability-scanner

@guardbee/mcp-vulnerability-scanner

🇬🇧 English | 🇹🇷 Türkçe | 🇨🇳 中文 | 🇯🇵 日本語 | 🇰🇷 한국어 | 🇧🇷 Português | 🇪🇸 Español | 🇩🇪 Deutsch

Trigger a GuardBee security scan directly from a Claude conversation. Run OWASP checks, query findings, and have the AI prioritize remediation recommendations.

Telemetry is off by default. With GUARDBEE_TELEMETRY=1 it sends the server, tool, success, duration and short parameter values such as a file path; longer strings and fields like content, token or password are replaced with a placeholder. See @guardbee/mcp-telemetry.

A GuardBee API key is required. Get one at app.guardbee.ai/developers.

Features

• Trigger a Scan from Claude — start a GuardBee scan on any URL with one command
• Status Queries — check scan progress and summary counts in real time
• Finding Filters — query by severity, scan ID, or brand ID
• Remediation Guidance — an explanation and an actionable recommendation for every finding
• Scan Scenarios — quick, kvkkFocus, gdprFocus, ccpaFocus
• 36 Scan Modules — all of GuardBee's modules are supported
• 25 Unit Tests — a test suite that doesn't require API calls

Quick Start

npm install -g @guardbee/mcp-vulnerability-scanner

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "guardbee-vulnerability-scanner": {
      "command": "npx",
      "args": ["-y", "@guardbee/mcp-vulnerability-scanner"],
      "env": {
        "GUARDBEE_API_KEY": "gb_..."
      }
    }
  }
}

Get your API key at app.guardbee.ai/developers.

MCP Tools

Tool	Description
start_scan	Starts a scan for a URL or brand ID; with wait=true waits for completion
get_scan_status	Live status and summary counts by scan ID
list_scans	Lists workspace scans with filters
get_findings	Fetches findings filtered by severity / scanId / brandId
scan_and_report	Scan + wait + return critical/high findings and remediation recommendations

Example Usage

You can ask Claude:

"Scan https://example.com and give me a security report"

"List my recent scans"

"Show critical findings for scan clz001 and explain how to fix them"

"Run a KVKK-focused scan on example.com"

Example Output

⚠️  Security scan complete for https://example.com
   Scan ID  : clz001abc
   🔴 Critical : 2
   🟠 High     : 5
   🟡 Medium   : 8
   🔵 Low      : 3
   ⚪ Info     : 12
   ✅ Passed   : 18

Use get_findings with scanId="clz001abc" to see details and remediation steps.

Scan Scenarios

Scenario	Description
quick	All 36 modules — comprehensive general scan
kvkkFocus	Focused on KVKK compliance modules
gdprFocus	Focused on GDPR compliance modules
ccpaFocus	Focused on CCPA compliance modules

Environment Variables

Variable	Description
GUARDBEE_API_KEY	GuardBee API key (required)
GUARDBEE_BASE_URL	Custom endpoint (default: https://app.guardbee.ai)

Development

npm install
npm test          # 25 unit tests
npm run build     # TypeScript compile

License

MIT — GuardBee

Feedback

Questions, ideas, or a false positive? Start a thread in GitHub Discussions or open an issue. If GuardBee is useful to you, a ⭐ on the repository helps others find it.