O360 MCP Server

by offensive360 Your server? Claim it

local only

O360 MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 48 installs a week from npm. Last commit 2 Aug 2026.

Run Offensive360 SAST scans (60+ languages) on local code; findings with file/line and fixes

Installs per day peak 400 · avg 13

a month agotoday

Installs / week

npm · o360-mcp

Stars

0 open issues

2 Aug 2026

Last commit

0 releases in 90 days

MIT

License

JavaScript

Nothing serious here today

Today is the operative word: we check O360 MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add o360-mcp -- npx -y o360-mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "o360-mcp": {
      "args": [
        "-y",
        "o360-mcp"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.o360-mcp]
command = "npx"
args = ["-y", "o360-mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "o360-mcp": {
      "args": [
        "-y",
        "o360-mcp"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "o360-mcp": {
      "args": [
        "-y",
        "o360-mcp"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: O360_URL (Offensive360 instance base URL), O360_TOKEN (External scan token (free for public repos: https://offensive360.com/free-for-open-source/)). The author declared them in the registry entry; get the values from the project itself.

Alternatives to O360 MCP

same job, measured the same way

Cdbx

by cdbx

Build Apps and run code in 30 languages — sandboxed, with persistent sessions for agent loops.

answering

LeakRank Guard

by prototeemo

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

56 installs/wk local only

Shopify Theme Inspector

by dragnoir

Profile Shopify Liquid performance, find slow theme code, and explain fixes in plain language.

34 installs/wk local only

STUzhy Py Execute MCP

by smithery

Run Python code in a secure sandbox without local setup. Declare inline dependencies and execute s…

answering

Contextweaver

by wchiway

Semantic code retrieval engine with hybrid search, context expansion, and 40+ language support.

58 installs/wk local only

Vinv

by vinvai

Vinv runs, tests, and finds issues in your services — with zero code changes.

113 installs/wk local only

remem-mcp — Local-first MCP Memory + CodeGraph + Wiki

by tinhien11

Local-first memory for AI coding agents. Memory + CodeGraph + Wiki in one SQLite file.

92 installs/wk local only

Pentest Tools

by pentest-tools

MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

answering

O360 MCP — questions

Answers built from our own checks of this server.

Why is there no uptime for O360 MCP?

O360 MCP runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package o360-mcp was installed 48 times last week.

How do I connect O360 MCP?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls o360-mcp straight from npm; nothing to host, nothing to sign up for.

How many people use O360 MCP?

The npm package o360-mcp was installed 48 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is O360 MCP open source?

Yes — it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.