Install Black Duck Security Scanner in Claude Code
npm
claude mcp add black-duck-security-scanner -- npx -y @black-duck/mcp-server{
"mcpServers": {
"black-duck-security-scanner": {
"command": "npx",
"args": [
"-y",
"@black-duck/mcp-server"
]
}
}
}MCP Bundle (.mcpb)
curl -LO https://github.com/blackducksoftware/mcp-server/releases/download/v1.1.8/black-duck-mcp-1.1.8.mcpbDownload black-duck-mcp-1.1.8.mcpb and double-click it to install in Claude Desktop.MCP Bundles install in one click in Claude Desktop. Download the file, then open it.
Frequently asked questions
What does the Black Duck Security Scanner MCP server do?
AI-powered security scanning using Black Duck Signal for vulnerability detection.
Is the Black Duck Security Scanner MCP server free?
Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.
Does Black Duck Security Scanner run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add Black Duck Security Scanner to Claude Code?
Run: claude mcp add black-duck-security-scanner -- npx -y @black-duck/mcp-server
More security & identity MCP servers
View allBray
forgesworn/bray
Trust-aware Nostr for AI agents -- 235 tools covering social, DMs, zaps, trust, and identity
armor
studiomeyer-io/mcp-armor
Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.
Chain Signer
Kevthetech143/chain-signer
Security suite for AI agents: flag drains, permit-phishing & risky actions before signing.
Arcwall
rom-baro/arcwall-mcp
Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.
commit-check
commit-check/commit-check-mcp
Commit policy as code for AI agents: check commit messages, branch names and authors before a push
AgentTrust
agenttrust/mcp-server
Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.