io.github.4hmetuyar/vulnerability-scanner

Official

by GuardBee · TypeScript

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

The MCP server io.github.4hmetuyar/vulnerability-scanner triggers GuardBee vulnerability scans, queries resulting findings, and provides AI-assisted remediation guidance. It is focused on initiating scan workflows and then using the scan outputs to support follow-up actions.

🛠️ Key Features

Triggers GuardBee scans
Queries and returns findings
AI-assisted remediation guidance

🚀 Use Cases

Run GuardBee-based vulnerability scans for a target
Review scan findings retrieved by the server
Get guidance to remediate vulnerabilities based on those findings

⚡ Developer Benefits

Centralizes scan triggering and findings retrieval for GuardBee
Couples findings with remediation guidance for next steps

⚠️ Limitations

No additional capabilities, tool count, topics, or configuration details are provided in the available source data.

Topics

ai-securitykvkkmcpmcp-securitymodel-context-protocolowaspsecurity-scanner

packages/vulnerability-scanner/README.md4 KBView on GitHub

@guardbee/mcp-vulnerability-scanner

🇬🇧 English | 🇹🇷 Türkçe

Trigger a GuardBee security scan directly from a Claude conversation. Run OWASP checks, query findings, and have the AI prioritize remediation recommendations.

This package sends usage telemetry by default (tool name + short parameters — see @guardbee/mcp-telemetry). Disable with GUARDBEE_TELEMETRY=0.

A GuardBee API key is required. Get one at app.guardbee.ai/developers.

Features

Trigger a Scan from Claude — start a GuardBee scan on any URL with one command
Status Queries — check scan progress and summary counts in real time
Finding Filters — query by severity, scan ID, or brand ID
Remediation Guidance — an explanation and an actionable recommendation for every finding
Scan Scenarios — quick, kvkkFocus, gdprFocus, ccpaFocus
36 Scan Modules — all of GuardBee's modules are supported
25 Unit Tests — a test suite that doesn't require API calls

Quick Start

bash

npm install -g @guardbee/mcp-vulnerability-scanner

Add to claude_desktop_config.json:

json

{
  "mcpServers": {
    "guardbee-vulnerability-scanner": {
      "command": "npx",
      "args": ["-y", "@guardbee/mcp-vulnerability-scanner"],
      "env": {
        "GUARDBEE_API_KEY": "gb_..."
      }
    }
  }
}

Get your API key at app.guardbee.ai/developers.

MCP Tools

Tool	Description
`start_scan`	Starts a scan for a URL or brand ID; with `wait=true` waits for completion
`get_scan_status`	Live status and summary counts by scan ID
`list_scans`	Lists workspace scans with filters
`get_findings`	Fetches findings filtered by severity / scanId / brandId
`scan_and_report`	Scan + wait + return critical/high findings and remediation recommendations

Example Usage

You can ask Claude:

"Scan https://example.com and give me a security report"

"List my recent scans"

"Show critical findings for scan clz001 and explain how to fix them"

"Run a KVKK-focused scan on example.com"

Example Output

code

⚠️  Security scan complete for https://example.com
   Scan ID  : clz001abc
   🔴 Critical : 2
   🟠 High     : 5
   🟡 Medium   : 8
   🔵 Low      : 3
   ⚪ Info     : 12
   ✅ Passed   : 18

Use get_findings with scanId="clz001abc" to see details and remediation steps.

Scan Scenarios

Scenario	Description
`quick`	All 36 modules — comprehensive general scan
`kvkkFocus`	Focused on KVKK compliance modules
`gdprFocus`	Focused on GDPR compliance modules
`ccpaFocus`	Focused on CCPA compliance modules

Environment Variables

Variable	Description
`GUARDBEE_API_KEY`	GuardBee API key (required)
`GUARDBEE_BASE_URL`	Custom endpoint (default: `https://app.guardbee.ai`)

Development