Overview
StackHawk MCP Server is a Model Context Protocol (MCP) server designed to integrate with StackHawk's security scanning platform. It delivers security analytics, YAML configuration management, and sensitive data/threat surface analysis, along with anti-hallucination tooling for AI systems. On the analytics side, it exposes organization-, application-, and vulnerability-oriented tools and dashboards to surface security posture across an enterprise. For YAML, it offers creation and validation tooling, a schema reference, 24-hour TTL cached schemas, and anti-hallucination field validation to prevent invalid prompts or outputs from LLMs. Sensitive data and threat surface features map data exposure across repositories and applications, with risk scoring and surface mapping. All HTTP requests include a custom versioned User-Agent header, and authentication is via STACKHAWK_API_KEY. The MCP server can be run locally with Python, including a FastAPI HTTP server, and integrate with LLMs and IDEs like Cursor, OpenAI/Anthropic, Windsurf, and GitHub Copilot via the HTTP endpoint or CLI. The README also covers testing (pytest), code formatting (black), type checking (mypy), and example configurations for production or integration use.
Features
Security Analytics
Organization, application, and vulnerability tools.
YAML Configuration Tools
Creation, validation, schema reference, anti-hallucination field validation.
Sensitive Data & Threat Surface Analysis
Repository, application, and data exposure mapping.
Custom User-Agent
All API calls include a versioned User-Agent header.
Comprehensive Test Suite
Automated tests for all major features.
Who Is This For?
- LLM developers:Using MCP to enable secure tooling, YAML validation, and anti-hallucination guidance within LLM workflows.
- IDE users:Integrate security analytics and YAML validation into IDEs for real-time feedback.
- Security teams:Enable centralized security analytics, vulnerability tracking, and data exposure mapping across apps.
- Copilot users:Embed StackHawk MCP tools into Copilot to provide vulnerability search and YAML validation.




