AI Plugin Index
Black Duck Security Scanner
Verified · blackduck.comMCP server by blackducksoftware · updated · ★ 1 · 196 downloads a week
AI-powered security scanning using Black Duck Signal for vulnerability detection. Black Duck Security Scanner is published by blackduck.com from its verified domain in the official MCP Registry.
Last commit 49 days ago
MIT: permissive, fine for commercial use
Clear description, published package or server URL, original repository
No risky patterns in the files we checked
Install Black Duck Security Scanner
Built from the published package, never by AIclaude mcp add black-duck-security-scanner -- npx -y @black-duck/mcp-serverRun in your terminal. Add --scope user to use it in every project.
Step-by-step: install Black Duck Security Scanner in Claude Code
{
"mcpServers": {
"black-duck-security-scanner": {
"command": "npx",
"args": [
"-y",
"@black-duck/mcp-server"
]
}
}
}Settings, Developer, Edit config. Paste into claude_desktop_config.json and restart.
Step-by-step: install Black Duck Security Scanner in Claude Desktop
{
"mcpServers": {
"black-duck-security-scanner": {
"command": "npx",
"args": [
"-y",
"@black-duck/mcp-server"
]
}
}
}Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project).
{
"servers": {
"black-duck-security-scanner": {
"command": "npx",
"args": [
"-y",
"@black-duck/mcp-server"
]
}
}
}Add to .vscode/mcp.json. VS Code uses "servers", not "mcpServers".
Step-by-step: install Black Duck Security Scanner in VS Code
codex mcp add black-duck-security-scanner -- npx -y @black-duck/mcp-server{
"mcpServers": {
"black-duck-security-scanner": {
"command": "npx",
"args": [
"-y",
"@black-duck/mcp-server"
]
}
}
}Add to ~/.gemini/config/mcp_config.json (all projects) or .agents/mcp_config.json (this project).
Step-by-step: install Black Duck Security Scanner in Antigravity CLI
gemini mcp add black-duck-security-scanner npx -y @black-duck/mcp-serverGemini CLI was replaced by Antigravity CLI in June 2026 and remains only for enterprise licences and paid API keys.
Step-by-step: install Black Duck Security Scanner in Gemini CLI
MCP servers run with your permissions and can read what you give them access to. Some need an API key: check the README and add it under env in the black-duck-security-scanner block.
Security check
ANo download-and-run commands, hidden instructions or signs of sending keys out were found.
Checked automatically: README.md, package.json. This looks for known risky patterns and is not a full audit. How grades work
Alternatives to Black Duck Security Scanner
All alternatives →
Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.
Model Context Protocol registry, transports, and OAuth bridges for Electric Agents
Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth
Public Preview — Security proxy for MCP servers: The Firewall for Model Context Protocol
OAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.
Register [Model Context Protocol](https://modelcontextprotocol.io) servers as tool integrations for an executor. Supports both stdio-launched servers and remote (HTTP) servers, with optional OAuth.
Black Duck Security Scanner: common questions
How do I install Black Duck Security Scanner?
In Claude Code run claude mcp add black-duck-security-scanner -- npx -y @black-duck/mcp-server. For Claude Desktop, Cursor and VS Code, paste the config shown above and restart. See the install guides.
Is Black Duck Security Scanner the official server?
Black Duck Security Scanner is published by blackduck.com from its verified domain in the official MCP Registry.
Is Black Duck Security Scanner free?
The code is published under the MIT licence. The service it connects to may have its own pricing.
Is Black Duck Security Scanner safe to use?
It scores 77 of 100. Grades: maintenance B, licence A, quality C. Security check: grade A, no risky patterns found in the files checked. Review the code before you install. How grades work.
What are alternatives to Black Duck Security Scanner?
Similar MCP servers: OpenWork MCP Gateway, Agents MCP, MCP Remote, Agentmesh MCP Proxy.
Does Black Duck Security Scanner work with ChatGPT?
Not directly. It runs locally, and ChatGPT only connects to remote servers with a URL. Use it in Claude Code, Claude Desktop, Cursor, VS Code or Codex.