English Français العربية

com.offensive360/o360-mcp

Registre officiel Outils de développement

Run Offensive360 SAST scans (60+ languages) on local code; findings with file/line and fixes

Code source Documentation

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

NPM package o360-mcp
Claude Code 
claude mcp add o360-mcp -e 'O360_URL=https://sast.offensive360.com' -e 'O360_TOKEN=<your o360_token>' -- npx -y o360-mcp@1.0.2
Configuration JSON (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "o360-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "o360-mcp@1.0.2"
            ],
            "env": {
                "O360_URL": "https://sast.offensive360.com",
                "O360_TOKEN": "<your o360_token>"
            }
        }
    }
}

Variables d'environnement

  • O360_URL Offensive360 instance base URL
  • O360_TOKEN obligatoire secret External scan token (free for public repos: https://offensive360.com/free-for-open-source/)

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. Offensive360 MCP Server
  2. Setup
  3. Notes
  4. About Offensive360

Offensive360 MCP Server

Run Offensive360 SAST scans from inside your AI assistant. This Model Context Protocol server gives Claude Code, Claude Desktop, Cursor, and any other MCP client two tools:

ToolWhat it does
o360_scan_pathZips a local directory, runs a full SAST scan (60+ languages, taint/data-flow analysis), returns findings with file/line, severity, and fixes
o360_scan_statusQueue position of a running scan

Ask your assistant things like "scan this project with Offensive360 and fix the criticals" — it scans, reads the findings, and starts patching.

Setup

You need an Offensive360 External scan token:

Claude Code
claude mcp add offensive360 \
  -e O360_URL=https://sast.offensive360.com \
  -e O360_TOKEN=<your-token> \
  -- npx -y o360-mcp
Claude Desktop / Cursor (JSON)
{
  "mcpServers": {
    "offensive360": {
      "command": "npx",
      "args": ["-y", "o360-mcp"],
      "env": {
        "O360_URL": "https://sast.offensive360.com",
        "O360_TOKEN": "<your-token>"
      }
    }
  }
}

O360_URL can point at your own on-premise or air-gapped instance — the server talks only to the instance you configure.

Notes

  • Scans are synchronous; typical duration is 1–5 minutes depending on codebase size. The default client timeout is 900s (timeout_seconds parameter to override).
  • Common junk directories (node_modules, .git, dist, …) are excluded from the upload automatically; add more via the exclude parameter.
  • Findings are also visible in your Offensive360 dashboard with full data-flow traces.
  • Requires Node 18+.

About Offensive360

One platform for SAST, DAST, MAST, SCA, malware & binary analysis, and license compliance — flat pricing, cloud or fully air-gapped on-premise. offensive360.com · Book a demo

Questions fréquentes

Qu'est-ce que com.offensive360/o360-mcp ?

Run Offensive360 SAST scans (60+ languages) on local code; findings with file/line and fixes

Comment installer com.offensive360/o360-mcp ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add o360-mcp -e 'O360_URL=https://sast.offensive360.com' -e 'O360_TOKEN=<your o360_token>' -- npx -y o360-mcp@1.0.2. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour com.offensive360/o360-mcp ?

Oui. Il attend O360_TOKEN, à renseigner dans sa configuration.

com.offensive360/o360-mcp est-il open source ?

Oui. Son code est sur GitHub sous licence MIT.

Qui maintient com.offensive360/o360-mcp ?

Il est publié par offensive360. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.