{
  "markdown": "# Offensive360 MCP Server\n\nRun [Offensive360](https://offensive360.com) SAST scans from inside your AI assistant.\nThis [Model Context Protocol](https://modelcontextprotocol.io) server gives Claude Code,\nClaude Desktop, Cursor, and any other MCP client two tools:\n\n| Tool | What it does |\n|---|---|\n| `o360_scan_path` | Zips a local directory, runs a full SAST scan (60+ languages, taint/data-flow analysis), returns findings with file/line, severity, and fixes |\n| `o360_scan_status` | Queue position of a running scan |\n\nAsk your assistant things like *\"scan this project with Offensive360 and fix the criticals\"* —\nit scans, reads the findings, and starts patching.\n\n## Setup\n\nYou need an Offensive360 **External scan token**:\n\n- **Open-source / public repos:** free — request one at\n  [offensive360.com/free-for-open-source](https://offensive360.com/free-for-open-source/)\n- **Commercial:** any admin of your instance can create one under **Settings → Tokens**\n\n### Claude Code\n\n```bash\nclaude mcp add offensive360 \\\n  -e O360_URL=https://sast.offensive360.com \\\n  -e O360_TOKEN=<your-token> \\\n  -- npx -y o360-mcp\n```\n\n### Claude Desktop / Cursor (JSON)\n\n```json\n{\n  \"mcpServers\": {\n    \"offensive360\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"o360-mcp\"],\n      \"env\": {\n        \"O360_URL\": \"https://sast.offensive360.com\",\n        \"O360_TOKEN\": \"<your-token>\"\n      }\n    }\n  }\n}\n```\n\n`O360_URL` can point at your own on-premise or air-gapped instance — the server\ntalks only to the instance you configure.\n\n## Notes\n\n- Scans are synchronous; typical duration is 1–5 minutes depending on codebase size.\n  The default client timeout is 900s (`timeout_seconds` parameter to override).\n- Common junk directories (`node_modules`, `.git`, `dist`, …) are excluded from the\n  upload automatically; add more via the `exclude` parameter.\n- Findings are also visible in your Offensive360 dashboard with full data-flow traces.\n- Requires Node 18+.\n\n## About Offensive360\n\nOne platform for SAST, DAST, MAST, SCA, malware & binary analysis, and license\ncompliance — flat pricing, cloud or fully air-gapped on-premise.\n[offensive360.com](https://offensive360.com) · [Book a demo](https://offensive360.com/demo/)\n",
  "bytes": 2210,
  "sha": "94eab6c463943359874b88abd7946753f55b441e4bb262a8ca2cf6b1792e39ec",
  "repo_slug": "offensive360/mcp-server",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_com_offensive360_o360_mcp_624f26ec/readme"
}