asterisk-mcp-server
13
Asterisk MCP Server is a security scanning tool that analyzes code for vulnerabilities in real time using the Model Context Protocol. It connects to the Asterisk security API, facilitating code analysis for AI assistants.
Asterisk MCP Server
Asterisk MCP Server is a middleware component that connects to the Asterisk security API to provide real-time security analysis of code. It exposes security scanning tools to AI assistants enabling them to analyze code for security vulnerabilities.
Features
- Code Snippet Scanning: Analyze individual code snippets for security vulnerabilities
- Codebase Scanning: Scan multiple files for security issues with accurate context coverage
- Change Verification: Verify if code changes in your chat history introduce security vulnerabilities
- Beautiful Settings UI: Configure the server through a graphical interface
- Flexible Transport: Support for stdio and SSE transport protocols
- Comprehensive Logging: Detailed logging with configurable verbosity
Requirements
- Python 3.10+
- pipx / uvx
- httpx
- mcp[cli]
- dearpygui (for settings UI)
Configuration
Configuration can be provided through command-line arguments or the settings UI.
Data Flow
- The IDE or code editor sends a request to the Asterisk MCP Server using the MCP protocol.
- The MCP server processes the request and forwards it to the Asterisk Vulnerability Scanner API.
- The API analyzes the code and returns security findings.
- The MCP server formats the results and returns them to the IDE/editor.
- The IDE/editor presents the security analysis to the user.
Troubleshooting
Connection Issues
- Verify that the API URL is correct and accessible
- Check that your API key is valid and has not expired
- Ensure your network allows connections to the API server
Authentication Errors
- Verify your API key is correctly set in the configuration
- Check that your API key has the necessary permissions
- Regenerate your API key from the dashboard if necessary
Timeout Errors
- Increase the API timeout setting for large codebases
- Consider analyzing smaller portions of code separately
- Check your network connection stability