com.blackduck/mcp-serverdev-tools

Black Duck Security Scanner

Verified · yesterday

AI-powered security scanning using Black Duck Signal for vulnerability detection.

Install

claude mcp add mcp-server -- npx -y @black-duck/[email protected]

Our take

Black Duck MCP brings Signal security scans into coding assistants, with tools for changed-code scans and targeted file or directory scans. It comes from the established Black Duck org and has tests and real implementation behind it, but it requires a Signal license/API key and downloads Black Duck scanning binaries at runtime. Best fit is teams already evaluating or using Black Duck Signal, not a general free security scanner.

reviewed by hand · 2026-07-05

Something wrong or dead here? Report it

Verification record

last verified: yesterday
github stars: 0
last commit: 25 days ago
archived: no
license: MIT
npm: @black-duck/mcp-server
downloads / wk: 410
latest version: 1.1.7
in registry since: 2026-06-11

github.com/blackducksoftware/mcp-server