get_project_overviewLABSCO SUMMARY
get_similar_vulnerabilities and get_business_logic_context are what turn a finding list into triage.
Scanners produce more findings than anyone can act on, and the two questions that matter are 'is this the same bug in fifteen places' and 'does this code do anything important'. Most tools answer neither. Having both as callable tools means an agent can group and prioritise rather than reading down a list. Status changes being audit-logged is the right complement — triage by agent should leave a trail.
What it is
CybeDefend's endpoint, published in two regions. Eighteen tools, and the structure is one list-and-get pair per scan type — six scan types, plus the tools that put a finding in context.
What you get
- List and get pairs for SAST, SCA, IaC, CI/CD, secret and container vulnerabilities
- list_sca_packages — the dependency inventory behind the SCA findings
- get_similar_vulnerabilities — other instances of the same problem
- get_business_logic_context — what the affected code is actually for
- get_project_overview, get_branches, update_vulnerability — the project, its branches, and triage
Requirements
OAuth 2.1 with dynamic client registration and browser sign-in. Region is chosen at signup — the EU deployment runs on Scaleway in Paris under GDPR, NIS2 and DORA. Free start: 50 AI credits and 10 scans with no card; every plan includes all scan types.
Setup effort
Paste a URL, then authorize — add the endpoint to your client, then approve the OAuth consent screen
USE CASES
01
Triaging a scan by impact
Read the finding, check what the affected code does, and see how many other places have the same issue.
02
Checking dependencies
List the SCA packages alongside the vulnerabilities found in them.
03
Finding leaked secrets and misconfiguration
The same connection covers secret scanning, IaC and CI/CD findings.
04
Keeping data in the EU
Choose the EU endpoint at signup — Scaleway Paris, with the compliance posture documented.
18 tools
Listed in project docs. Your client may show a different list.
get_brancheslist_vulnerabilities_sastget_vulnerability_sastlist_vulnerabilities_scaget_vulnerability_scalist_sca_packageslist_vulnerabilities_iacget_vulnerability_iaclist_vulnerabilities_cicdget_vulnerability_cicdlist_vulnerabilities_secretget_vulnerability_secretlist_vulnerabilities_containerget_vulnerability_containerget_similar_vulnerabilitiesupdate_vulnerabilityget_business_logic_contextBEFORE YOU INSTALL
What to know first
Tools you get
18 tools named in the project's documentation.
Requires
- an MCP client that can reach a remote endpoint
- OAuth 2.1 + DCR, browser sign-in
INSTALLATION
Connect your client
Add the endpoint to your client, then approve the OAuth consent screen.
Server setup
ENDPOINT URL
https://mcp-eu.cybedefend.com/mcpRequirements
- OAuth 2.1 + DCR, browser sign-in
