Summary
AppSec triage where the code already is.
Findings only matter if someone acts on them, and acting normally happens in a dashboard far from the editor. This puts the same operations, filter by severity, archive the false positives, adjust a rule, into the assistant already looking at the repository, and the tool list is loaded from ZeroPath's manifest at startup so it tracks the API.
What it is
A Python MCP server that fronts ZeroPath's REST API, so an AI assistant can list and triage findings, manage custom rules and review scans.
What you get
- Issue tools for listing, filtering, triaging, updating status, severity and notes, and regenerating patches
- Scan tools for scan history, scan detail and rescanning a pull request
- Repository listing with filters, so findings can be narrowed to part of the codebase
- Code inspection: search, read and list files in connected repositories
- Full create, read, update and delete for custom security rules
- Security Compass tools for project mappings, rule sync, the coverage audit and linked issues
Requirements
Python 3.12 or newer, a ZeroPath account with API key access (a token ID and a token secret), and an MCP client. Install it with pip or run it with uvx.