Back to Browse

Agentic Sdlc MCP Server

Developer ToolsModerate6.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

Agentic SDLC governance and security controls for AI coding agents working with GitHub.

About

Agentic SDLC governance and security controls for AI coding agents working with GitHub.

Security Report

6.7
Moderate6.7Moderate Risk

The provided material is a GitHub-focused SDLC governance MCP server with preview-first write behavior, base-SHA policy binding, and documented trust boundaries, and no malicious or exfiltration patterns appear in the supplied files. The main concerns are a plaintext GitHub token in a local configuration file offered as a compatibility path and an unauthenticated loopback HTTP profile that any local process could use with the server's token. The full source under src/ was truncated and not reviewed, so the score reflects only the supplied files. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

5 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

database

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

GitHub token with the least privileges required by the tools you call.Required

Environment variable: GITHUB_TOKEN

Optional default GitHub organization or user name.Optional

Environment variable: GITHUB_OWNER

Optional default GitHub repository name.Optional

Environment variable: GITHUB_REPO

Optional default branch used when repository metadata is unavailable.Optional

Environment variable: SDLC_DEFAULT_BRANCH

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-sakuracianna-agentic-sdlc-mcp": {
      "env": {
        "GITHUB_REPO": "your-github-repo-here",
        "GITHUB_OWNER": "your-github-owner-here",
        "GITHUB_TOKEN": "your-github-token-here",
        "SDLC_DEFAULT_BRANCH": "your-sdlc-default-branch-here"
      },
      "args": [
        "-y",
        "agentic-sdlc-mcp"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!