Skip to content

Black Duck Security Scanner

AI-powered security scanning using Black Duck Signal for vulnerability detection.

build.protocol_tooling.mcp

Install Black Duck Security Scanner in your MCP client

Black Duck Security Scanner is a Model Context Protocol server. Add it to your MCP client config once, restart, and the server's tools become available to your AI assistant. The same JSON snippet below works across all four major clients — only the config file path differs.

  1. Locate your client's MCP config file.
    • Cursor: ~/.cursor/mcp.json
    • Claude Desktop (macOS): ~/Library/Application Support/Claude/claude_desktop_config.json
    • Claude Desktop (Windows): %APPDATA%\Claude\claude_desktop_config.json
    • VS Code: Settings → Extensions → MCP
    • Windsurf: Settings → MCP Servers
  2. Add Black Duck Security Scanner to the mcpServers map — paste the snippet below into your config file. If you already have other MCP servers, merge the entry into the existing mcpServers object.
  3. Restart your client so it picks up the new server.
  4. Verify — ask the assistant to list available tools; Black Duck Security Scanner's tools should appear.
{
  "mcpServers": {
    "black-duck-security-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@black-duck/mcp-server"
      ]
    }
  }
}

Install Black Duck Security Scanner in Cursor

Open ~/.cursor/mcp.json in your editor, paste the snippet above into mcpServers, save, and restart Cursor. Black Duck Security Scanner will show up in the assistant's tool list on next launch.

Install Black Duck Security Scanner in Claude Desktop (macOS)

Open ~/Library/Application Support/Claude/claude_desktop_config.json in your editor, paste the snippet above into mcpServers, save, and restart Claude Desktop (macOS). Black Duck Security Scanner will show up in the assistant's tool list on next launch.

Install Black Duck Security Scanner in Claude Desktop (Windows)

Open %APPDATA%\Claude\claude_desktop_config.json in your editor, paste the snippet above into mcpServers, save, and restart Claude Desktop (Windows). Black Duck Security Scanner will show up in the assistant's tool list on next launch.

Install Black Duck Security Scanner in VS Code

Open Settings → Extensions → MCP in your editor, paste the snippet above into mcpServers, save, and restart VS Code. Black Duck Security Scanner will show up in the assistant's tool list on next launch.

npm package: @black-duck/mcp-server

Transport

Black Duck Security Scanner supports the following MCP transports. Most AI clients use stdio by default for locally-installed servers.

stdio

Other Model Context Protocol servers in the same space as Black Duck Security Scanner. Each one adds different capabilities to your AI assistant — pick based on the data sources or workflows you need.

Browse the full MCP server directory or use Stork's one-line install to let your agent pick the right server automatically.