mcpbeat

Black Duck Security Scanner MCP Server

com.blackduck/mcp-server
local only

Black Duck Security Scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 319 installs a week from npm. Last commit 18 Jul 2026.

AI-powered security scanning using Black Duck Signal for vulnerability detection.

Installs per day peak 106 · avg 41 · +30% w/w
a month agotoday
319
Installs / week
npm · @black-duck/mcp-server
0
Stars
0 open issues
18 Jul 2026
Last commit
0 releases in 90 days
MIT
License
language unknown

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add mcp-server -- npx -y @black-duck/mcp-server
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "mcp-server": {
      "args": [
        "-y",
        "@black-duck/mcp-server"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.mcp-server]
command = "npx"
args = ["-y", "@black-duck/mcp-server"]
.cursor/mcp.json
{
  "mcpServers": {
    "mcp-server": {
      "args": [
        "-y",
        "@black-duck/mcp-server"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "mcp-server": {
      "args": [
        "-y",
        "@black-duck/mcp-server"
      ],
      "command": "npx"
    }
  }
}

Black Duck Security Scanner — questions

Answers built from our own checks of this server.

Why is there no uptime for Black Duck Security Scanner?
Black Duck Security Scanner runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @black-duck/mcp-server was installed 319 times last week.
How do I connect Black Duck Security Scanner?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @black-duck/mcp-server straight from npm; nothing to host, nothing to sign up for.
How many people use Black Duck Security Scanner?
The npm package @black-duck/mcp-server was installed 319 times in the last week. Week over week that is +30%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Black Duck Security Scanner open source?
Yes — it is published under the MIT licence and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.