Stackhawk MCP Server: Install & Setup

Install Stackhawk in Claude Code

Claude Code

claude mcp add stackhawk -e STACKHAWK_API_KEY=... -- uvx stackhawk-mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "stackhawk": {
      "command": "uvx",
      "args": [
        "stackhawk-mcp"
      ],
      "env": {
        "STACKHAWK_API_KEY": "..."
      }
    }
  }
}

Replace each ... with your own value.

Frequently asked questions

What does the Stackhawk MCP server do?

An MCP server that provides interaction with StackHawk's security scanning platform.

Is the Stackhawk MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does Stackhawk run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Stackhawk to Claude Code?

Run: claude mcp add stackhawk -e STACKHAWK_API_KEY=... -- uvx stackhawk-mcp

More security & identity MCP servers

View all

Trent

trnt-ai/trent-agent-plugin

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

RemoteAccount needed

RealAgent

1227

RedDateTech/RealAgentMCP

AI agent real-name identity: SM2 keypair, QR real-name link, SD-JWT VP generate/verify.

LocalFree

Audit

P4ST4S/mcp-audit

Transparent proxy that intercepts, signs, rate-limits, redacts and audits MCP tool calls without modifying client or server.

LocalFreeGo

Power Automate

2195

sapientsai/power-automate-mcp-server

Inspect, operate, and author Microsoft Power Automate cloud flows from an agent context.

LocalFree

SDK

rohan-protocol/sdk

Stateless privacy shield, WebMCP semantic firewall, and gasless on-chain state settlement for autonomous AI agents on Midnight Network.

LocalAccount neededTypeScript

Microsoft Project

HorizunGroup/horizun-msproject-mcp

Audit, reschedule and author Microsoft Project schedules. No Java, no Project install.

LocalFree