网络安全评分连接器

npm install
npm run build

{
  "mcpServers": {
    "securityscorecard": {
      "command": "node",
      "args": ["/path/to/securityscorecard-mcp/dist/index.js"],
      "env": {
        "SSC_API_KEY": "your_api_key_here"
      }
    }
  }
}

TRANSPORT_MODE=http SSC_API_KEY=your_api_key_here npm start

SSC_API_KEY=your_api_key_here docker compose up

"What's the security score for acme.com? Show me their factor breakdown and any active security issues."

"List my portfolios and show me all companies in my 'Critical Vendors' portfolio that have a score below 70."

"Search the attack surface for any exposed assets related to example.com and check if they have any CVEs being actively exploited."

"Who are the fourth-party vendors for microsoft.com? Are any of them below a B grade?"

"How does acme.com compare to the healthcare industry average? Show me the historical trend for the past year."

src/
├── cli/                  # CLI entry point
├── controllers/          # Business logic (extensible)
├── services/
│   ├── securityscorecard.service.ts   # SSC API client
│   └── securityscorecard.types.ts     # Type definitions
├── tools/
│   ├── index.ts          # Tool registration hub
│   ├── scorecard.tools.ts
│   ├── portfolio.tools.ts
│   ├── findings.tools.ts
│   ├── vendor.tools.ts
│   ├── questionnaire.tools.ts
│   ├── actionplan.tools.ts
│   ├── asi.tools.ts
│   └── events.tools.ts
├── resources/
│   └── scorecard.resources.ts  # MCP resources
├── utils/
│   ├── config.ts         # Zod-validated config
│   ├── logger.ts         # Pino structured logging
│   └── error.ts          # Error formatting
└── index.ts              # Server entry point