Megalinter MCP server
io.github.DownAtTheBottomOfTheMoleHole/megalinter·v4.0.0·3 starsMCP server for running Ox Security MegaLinter via mega-linter-runner
not scanned yet
3 stars74 downloads/wk
Reviews
Write oneNobody has reviewed Megalinter yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Megalinter tools
No tool declarations could be read from the package source. They show once the server is installed.
How Megalinter compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 94/100
- higher than 97% of 915 Security servers
- GitHub stars
- 3
- more than 80% of 587 Security servers
- Downloads a week
- 74
- more than 55% of 248 Security servers with a package
Release history: 2 versions in the registry since 2026-03-08, latest 2026-11-03, typically one every 240 days.
Install Megalinter in Claude Code, Cursor or VS Code
Runs npx -y @downatthebottomofthemolehole/megalinter-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add megalinter -- npx -y @downatthebottomofthemolehole/megalinter-mcp-server
What the publisher says
From the Megalinter repository's README, as published. We do not edit it. Read it on GitHub
MegaLinter MCP Server
<!-- mcp-name: io.github.downatthebottomofthemolehole/megalinter-mcp-server -->
Note: This is a community-maintained MCP server. It is not an official Model Context Protocol server, but it is sanctioned by Ox Security as a complement to their official MegaLinter tools.
A Model Context Protocol (MCP) server for running Ox Security MegaLinter through mega-linter-runner. Works with any CI/CD platform (GitHub Actions, GitLab CI, Azure DevOps, CircleCI, Jenkins) or locally.
Overview
This server provides 15 MCP tools in total: 10 core tools and 5 convenience aliases across execution, discovery, and analysis workflows.
- megalinterquickaction for short, natural requests with sensible defaults.
- megalinter_run to execute MegaLinter with configurable runtime and runner options.
- megalinterwriteconfig to generate a minimal .mega-linter.yml file.
- megalinterlistflavors to return common MegaLinter flavors.
- megalintergetlinters to discover available linters by language, security focus, and auto-fix capability.
- megalintergetsecurity_info to group security linters by threat category.
- megalintergetreporters to list supported report output formats and CI-targeted reporters.
- megalinterparsereports to parse JSON or SARIF report artefacts.
- megalintergetissue_summary to aggregate report issues by linter and severity.
- megalintergetsecurity_recommendations to generate security-focused remediation guidance.
Quick Start (Short Prompts)
If you prefer short prompts, use megalinterquickaction first:
- @megalinter quick scan this repository
- @megalinter security scan
- @megalinter summarise errors
- @megalinter list python security linters
- @megalinter write config
Or use ultra-short aliases for minimal typing:
- @megalinter scan — Quick scan with defaults
- @megalinter summary — Summarise last run's errors
- @megalinter parse — Parse JSON report
- @megalinter help_quick — Context-aware help for your project
Platform Compatibility
This MCP server is platform-agnostic and works universally:
- ✅ Locally — Run MegaLinter from your IDE or command line
- ✅ GitHub Actions — Integrate with workflows
- ✅ GitLab CI/CD — Use in GitLab pipelines
- ✅ Azure DevOps — Run in Azure Pipelines
- ✅ CircleCI, Jenkins, Bitbucket Pipelines — Any CI/CD platform with Docker support
- ✅ AI Agents & Copilot — Automated code quality checks via MCP
The only requirement is Docker (or a compatible container runtime like Colima).
Tool Matrix
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Megalinter: common questions
- Is Megalinter MCP server safe?
- Yes, by our scan: it is graded A (94/100). Read the Megalinter safety report
- How do I install Megalinter?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Megalinter need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Megalinter maintained?
- The last commit was 40 days ago (2026-09-24). The latest release is v4.0.0.
- What can I use instead of Megalinter?
- Servers from other publishers that do the same job: Skylos MCP server, Snyk MCP server and CrowdStrike Falcon MCP Server.
- How does Megalinter compare with other Security MCP servers?
- safety score 94/100 (higher than 97% of 915 Security servers); github stars 3 (more than 80% of 587 Security servers); downloads a week 74 (more than 55% of 248 Security servers with a package). Full comparison.
Alternatives to Megalinter
Same job from other publishers: the closest match first, then the best rated.
- SkylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.not reviewedEstablishedC
- SnykEasily find and fix security issues in your applications leveraging Snyk platform capabilities.not reviewedEstablishedB
- CrowdStrike Falcon MCP ServerConnects AI agents with CrowdStrike Falcon for security analysis and automation.not reviewedEstablishedA
- WiresharkProfessional network analysis with tshark. Security audits, deep-dives, and threat detection.not reviewedEstablishedA
- VirustotalMCP server for querying VirusTotal API with comprehensive security analysis tools.not reviewedEstablishedB
