{
  "markdown": "# Symbiotic MCP Server\n\nA Model Context Protocol (MCP) server for security analysis using Symbiotic CLI\n\n## Description\n\nThis server exposes security analysis tools via the MCP protocol for any MCP-compatible client. It allows scanning code and infrastructure files without affecting your workspace.\n\n### Available Tools\n\n- **`code_scan_files`** - Static code analysis\n- **`infra_scan_files`** - Infrastructure security scanning\n- **`security_scan_files`** - Comprehensive security scan (code + infrastructure)\n- **`get_supported_languages`** - List of supported programming languages\n\n## Cursor Integration\n\n### Setting up the Security Review Command\n\n1. Create a `.cursor` directory in your project root if it doesn't exist\n2. Create or update `.cursor/commands/security-review.md` with the contents of [security-review.md](security-review.md)\n\n### Using the Command\n\n1. Open the chat panel in Cursor (Cmd+L or Ctrl+L)\n2. Type `/security-review` followed by optional file paths or glob patterns\n3. The command will perform a comprehensive security analysis, including:\n   - Scanning selected files or the entire workspace\n   - Analyzing for security vulnerabilities\n   - Triaging findings and filtering false positives\n   - Providing a detailed report with severity levels and remediation suggestions\n   - Offering to apply automatic fixes for identified issues\n\n## Installation\n\n1. **Install symbiotic-cli**\n\n```bash\nhttps://github.com/SymbioticSec/cli/releases\n```\n\n2. **Get API token**\n\nCreate an account on [Symbiotic Security](https://symbioticsec.ai) and retrieve your API token.\n\n3. **Build and start**\n\nClone this repository and install dependencies:\n\n```bash\nnpm install\nnpm run build\n```\n\n## MCP Configuration\n\nIn VSCode, open `MCP: Open User Configuration` and add in `servers`:\n\n```json\n{\n \"servers\": {\n  \"symbiotic-security\": {\n       \"command\": \"node\",\n      \"args\": [\"path/to/build/index.js\"],\n      \"env\": {\n        \"SYMBIOTIC_API_TOKEN\": \"your_token_here\",\n    }\n  },\n}\n```\n\nConfiguration for other MCP clients may vary but generally follows the same structure.\n\n```json\n{\n  \"mcpServers\": {\n    \"symbiotic-security\": {\n      \"command\": \"node\",\n      \"args\": [\"path/to/build/index.js\"],\n      \"env\": {\n        \"SYMBIOTIC_API_TOKEN\": \"your_token_here\"\n      }\n    }\n  }\n}\n```\n\n**Important environment variables:**\n\n- `SYMBIOTIC_API_TOKEN` *(required)* - Your Symbiotic API token\n\n**Note:** Configuration file name and location may vary depending on your MCP client.\n\n## Transport Modes\n\n- **STDIO** (default) - Standard communication for MCP\n- **SSE** - Server-Sent Events over HTTP\n- **Streamable HTTP** - HTTP with `/mcp` endpoint\n\n```bash\n# STDIO (default)\nnode build/index.js\n\n# HTTP server on port 9593\nSERVER_PORT=9593 node build/index.js\n```\n\n## Authentication\n\nThe server requires a valid Symbiotic Security API token. Configuration is done via MCP environment variables.\n\n**Minimal required configuration:**\n\n```json\n\"env\": {\n  \"SYMBIOTIC_API_TOKEN\": \"your_token_here\"\n}\n```\n\n## How It Works\n\n1. Receives code files via MCP\n2. Creates temporary files\n3. Executes `symbiotic-cli`\n4. Automatic cleanup of temporary files\n5. Returns formatted results\n",
  "bytes": 3174,
  "sha": "3eb1146c79c64f863ad687c1d8f8bf37a020afbf84d7490addfd7552771850a3",
  "repo_slug": "symbioticsec/mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_symbioticsec_mcp_b4aa8d57/readme"
}