issues.listLABSCO SUMMARY
AppSec triage where the code already is.
Findings only matter if someone acts on them, and acting normally happens in a dashboard far from the editor. This puts the same operations, filter by severity, archive the false positives, adjust a rule, into the assistant already looking at the repository, and the tool list is loaded from ZeroPath's manifest at startup so it tracks the API.
What it is
A Python MCP server that fronts ZeroPath's REST API, so an AI assistant can list and triage findings, manage custom rules and review scans.
What you get
- Issue tools for listing, filtering, triaging, updating status, severity and notes, and regenerating patches
- Scan tools for scan history, scan detail and rescanning a pull request
- Repository listing with filters, so findings can be narrowed to part of the codebase
- Code inspection: search, read and list files in connected repositories
- Full create, read, update and delete for custom security rules
- Security Compass tools for project mappings, rule sync, the coverage audit and linked issues
Requirements
Python 3.12 or newer, a ZeroPath account with API key access (a token ID and a token secret), and an MCP client. Install it with pip or run it with uvx.
Setup effort
One command plus a key — pip install git+https://github.com/ZeroPathAI/zeropath-mcp-server.git, then supply credentials
USE CASES
01
Clearing a backlog of findings
Ask for the critical and high issues still pending review, then archive the false positives with a reason attached.
02
Understanding one finding without leaving the editor
Read the issue, then search and read the file it points at over the same connection.
03
Tightening a custom rule that fires too often
Update the rule from the conversation rather than switching to the dashboard.
04
Re-checking a pull request after a fix
Trigger the rescan and read the scan detail back in the same thread.
32 tools
Listed in project docs. Your client may show a different list.
issues.archiveissues.unarchiveissues.markFalsePositiveissues.markTruePositiveissues.updateStatusissues.updateSeverityissues.requestInvestigationissues.requestBulkInvestigationissues.getInvestigationStatusissues.regeneratePatchissues.updateNotesscans.listscans.getscans.rescanPRrepositories.listcode.searchcode.readcode.listFilesrules.listrules.getrules.createrules.updaterules.deletesecurityCompass.getIntegrationsecurityCompass.testConnectionsecurityCompass.addProjectMappingsecurityCompass.removeProjectMappingsecurityCompass.syncRulessecurityCompass.getMappingAuditsecurityCompass.getLinkedIssuessecurityCompass.getSyncHistoryBEFORE YOU INSTALL
What to know first
Tools you get
32 tools named in the project's documentation.
Requires
- ZEROPATH_TOKEN_ID in your environment
- ZEROPATH_TOKEN_SECRET in your environment
- ZEROPATH_ORG_ID in your environment
INSTALLATION
Connect your client
Add the block to your client, or run the command directly.
Server setup
Configuration file
JSON
{
"mcpServers": {
"zeropath": {
"command": "uvx",
"args": [
"--from",
"git+https://github.com/ZeroPathAI/zeropath-mcp-server",
"zeropath-mcp-server"
],
"env": {
"ZEROPATH_BASE_URL": "https://zeropath.com",
"ZEROPATH_TOKEN_ID": "<YOUR_ZEROPATH_TOKEN_ID>",
"ZEROPATH_TOKEN_SECRET": "<YOUR_ZEROPATH_TOKEN_SECRET>",
"ZEROPATH_ORG_ID": "<YOUR_ZEROPATH_ORG_ID>"
}
}
}
}pip
TERMINAL
pip install git+https://github.com/ZeroPathAI/zeropath-mcp-server.git
