{"name":"io.github.CallMarcus/securityscorecard-mcp","slug":"callmarcus-securityscorecard-mcp","title":null,"description":"Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial).","url":"https://mcp.market/server/callmarcus-securityscorecard-mcp","rating":null,"grade":"B","score":83,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":25,"stars":0,"forks":1,"downloads_week":86,"last_push_at":"2026-11-03T19:11:59.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/CallMarcus/security-scorecard-mcp","website":null,"version":"2.0.0","remotes":[],"packages":[{"registryType":"npm","identifier":"@callmarcus/securityscorecard-mcp","version":"2.0.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"SecurityScorecard API token (get one from your SecurityScorecard dashboard).","isRequired":true,"format":"string","isSecret":true,"name":"SECURITY_SCORECARD_API_TOKEN"},{"description":"Optional default company domain for queries (e.g. example.com).","format":"string","name":"COMPANY_DOMAIN"}]}],"tools":[{"name":"analyze_email_security","description":"\\u{1F4E7} EMAIL SECURITY: Analyze SPF, DMARC, DKIM issues with domain-by-domain breakdown and cross-validation. INTELLIGENT RESPONSES: Use 'minimal' for simple counts like 'how many SPF missing?' (10-30 tokens). Use 'standard' for email security overview (200-400 tokens). Use 'detailed' for comprehensive email analysis.","write_action":true,"price_micros":0,"input_schema":null},{"name":"analyze_issue_types","description":"\\u{1F50D} ISSUE BREAKDOWN: Get detailed breakdown of security issues by specific types (SPF, DMARC, patching, etc.). INTELLIGENT RESPONSES: Use 'minimal' for specific counts (20-50 tokens). Use 'standard' for issue type summary (200-300 tokens). Use 'detailed' for comprehensive breakdown.","write_action":false,"price_micros":0,"input_schema":null},{"name":"analyze_security_risks","description":"\\u{1F6A8} SECURITY RISKS: Comprehensive security risk analysis with intelligent prioritization. Analyzes critical vulnerabilities, risk patterns, and provides actionable remediation guidance with flexible response modes.","write_action":false,"price_micros":0,"input_schema":null},{"name":"api_discovery","description":"Search and discover SecurityScorecard API endpoints. Returns both human-readable summary and structured JSON for programmatic use.","write_action":false,"price_micros":0,"input_schema":null},{"name":"create_improvement_plan","description":"\\u{1F3AF} IMPROVEMENT PLAN: Generate security improvement recommendations. INTELLIGENT RESPONSES: Use 'minimal' for simple questions like 'what should I fix first?' (50-100 tokens). Use 'standard' for improvement summary (300-500 tokens). Use 'detailed' for full roadmap.","write_action":true,"price_micros":0,"input_schema":null},{"name":"discover_assets","description":"\\u{1F50D} ASSET INVENTORY: Discover domains and IPs with security context and data completeness validation. INTELLIGENT RESPONSES: Use 'minimal' for simple questions like 'how many assets?' (20-50 tokens). Use 'standard' for asset overview (200-400 tokens). Use 'detailed' for comprehensive inventory.","write_action":false,"price_micros":0,"input_schema":null},{"name":"query_security_data","description":"Direct API access with smart endpoint validation. Uses API discovery to validate endpoints, suggest alternatives, and provide parameter hints.","write_action":false,"price_micros":0,"input_schema":null},{"name":"security_dashboard","description":"\\u{1F4CA} SECURITY STATUS: Get comprehensive security score, grade, and key metrics with intelligent response modes. Supports minimal responses for quick queries and detailed analysis for comprehensive security overviews.","write_action":false,"price_micros":0,"input_schema":null},{"name":"validate_data_completeness","description":"\\u2705 DATA VALIDATION: Cross-validate tool results for accuracy and completeness. INTELLIGENT RESPONSES: Use 'minimal' for validation status (25 tokens). Use 'standard' for validation summary (200-400 tokens). Use 'detailed' for full data audit.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":83,"grade":"B","scanned_at":"2026-11-04T06:33:29.731Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-11-04T06:33:29.669Z","components":{"code":{"score":25,"max":25,"notes":["12 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@callmarcus/securityscorecard-mcp","version":"2.0.0","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-10-04T18:52:54.652Z","repositoryUrl":"git+https://github.com/CallMarcus/security-scorecard-mcp.git","weeklyDownloads":86}],"repo":{"found":true,"owner":"CallMarcus","repo":"security-scorecard-mcp","archived":false,"pushedAt":"2026-11-03T19:11:59Z","stars":0,"forks":1,"openIssues":4,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/9679799?v=4","ownerCreatedAt":"2014-11-11T17:46:54Z","license":"NOASSERTION"},"icon":{"url":"https://avatars.githubusercontent.com/u/9679799?v=4&s=128","source":"registry","width":128,"height":128},"presence":{"stars":0,"forks":1,"downloadsWeek":86,"license":"NOASSERTION","lastPushAt":"2026-11-03T19:11:59.000Z","score":25}}}},"grade_history":[],"reviews":[]}