ZeroPath MCP Server logo

ZeroPath MCP Server

by ZeroPathAI

The ZeroPath MCP server allows developers to interact with product security findings using natural language within AI-assisted tools. It enables querying SAST issues, secrets, patches, and more directly from ZeroPath.

View on GitHub

Last updated: N/A

What is ZeroPath MCP Server?

The ZeroPath MCP Server is an open-source server that allows developers to query security findings (SAST issues, secrets, patches) from ZeroPath directly within AI-assisted tools like Claude Desktop, Cursor, and Windsurf. It eliminates the need for dashboards and manual ticket triage, providing security context where developers are already working.

How to use ZeroPath MCP Server?

To use the server, you need to generate an API key from ZeroPath, configure environment variables with the API key and organization ID, install uv for dependency management, clone the repository, set up the environment, and add the server entry to your MCP configuration in your AI tool. Then, you can use the available tools like search_vulnerabilities, get_issue, and approve_patch via natural language prompts within your AI assistant.

Key features of ZeroPath MCP Server

  • Natural language querying of security findings

  • Integration with AI-assisted development tools

  • Access to SAST issues, secrets, and patches

  • Patch approval functionality

  • Code context retrieval

Use cases of ZeroPath MCP Server

  • Querying for specific types of vulnerabilities (e.g., SSRF)

  • Retrieving detailed information about a particular security issue

  • Approving suggested patches for vulnerabilities

  • Integrating security context into AI-assisted code analysis

  • Automating security triage and remediation workflows

FAQ from ZeroPath MCP Server

What is an MCP?

MCP stands for Machine Communication Protocol. It's a protocol that allows AI tools to communicate with external services.

Where do I get my API key?

You can generate an API key from your ZeroPath organization settings at https://zeropath.com/app/settings/api

What AI tools are compatible with the ZeroPath MCP Server?

The server is compatible with any MCP-compatible environment, including Claude Desktop, Cursor, and Windsurf.

How do I contribute to the project?

You can contribute by opening issues for bugs, submitting pull requests for improvements, or joining the discussion on Discord.

What if I don't have a ZeroPath account?

You will need a ZeroPath account to use this server, as it retrieves security findings from the ZeroPath platform.