MCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.
| Tool name | Description | Destructive? |
|---|---|---|
| analyze_anomalous_calls_by_process | ✓ no | |
| list_suppression_rules | ✓ no | |
| get_suppression_rule | ✓ no | |
| preview_suppression_rule | ✓ no | |
| create_suppression_rule | ✓ no |
| update_suppression_rule | ✓ no | |
| delete_suppression_rule⚠ | ⚠ yes | |
| describe_capabilities | ✓ no | |
| list_anomalous_network_calls | ✓ no | |
| list_blocked_domain_calls | ✓ no | |
| list_https_outbound_calls | ✓ no | |
| list_suspicious_process_events | ✓ no | |
| list_secrets_in_build_log | ✓ no | |
| list_imposter_commit_detections | ✓ no | |
| get_my_tenant | ✓ no | |
| list_threat_incidents | ✓ no | |
| get_threat_incident | ✓ no | |
| check_npm_package_exposure | ✓ no | |
| check_ioc_in_baseline | ✓ no | |
| search_action_usage | ✓ no | |
| list_detections | ✓ no | |
| check_npm_package_on_dev_machines | ✓ no | |
| check_pypi_package_exposure | ✓ no | |
| check_python_package_on_dev_machines | ✓ no | |
| ping | ✓ no | |
| list_tenant_github_orgs | ✓ no | |
| list_recent_workflow_runs⚠ | ⚠ yes | |
| list_github_api_calls_in_run⚠ | ⚠ yes | |
| find_endpoint_calls_in_tenant | ✓ no | |
| find_repos_using_endpoint | ✓ no |
{
"mcpServers": {
"stepsecurity": {
"command": "npx",
"args": [
"-y",
"@stepsecurity/stepsecurity-mcp"
]
}
}
}