MCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.
| Tool name | Description | Destructive? |
|---|---|---|
| analyze_anomalous_calls_by_process | โ no | |
| list_suppression_rules | โ no | |
| get_suppression_rule | โ no | |
| preview_suppression_rule | โ no | |
| create_suppression_rule | โ no |
| update_suppression_rule | โ no | |
| delete_suppression_ruleโ | โ yes | |
| describe_capabilities | โ no | |
| list_anomalous_network_calls | โ no | |
| list_blocked_domain_calls | โ no | |
| list_https_outbound_calls | โ no | |
| list_suspicious_process_events | โ no | |
| list_secrets_in_build_log | โ no | |
| list_imposter_commit_detections | โ no | |
| get_my_tenant | โ no | |
| list_threat_incidents | โ no | |
| get_threat_incident | โ no | |
| check_npm_package_exposure | โ no | |
| check_ioc_in_baseline | โ no | |
| search_action_usage | โ no | |
| list_detections | โ no | |
| check_npm_package_on_dev_machines | โ no | |
| check_pypi_package_exposure | โ no | |
| check_python_package_on_dev_machines | โ no | |
| ping | โ no | |
| list_tenant_github_orgs | โ no | |
| list_recent_workflow_runsโ | โ yes | |
| list_github_api_calls_in_runโ | โ yes | |
| find_endpoint_calls_in_tenant | โ no | |
| find_repos_using_endpoint | โ no |
{
"mcpServers": {
"stepsecurity": {
"command": "npx",
"args": [
"-y",
"@stepsecurity/stepsecurity-mcp"
]
}
}
}