MCP guide · Security Suite

@guardbee/security-suite bundles GuardBee’s secret scanner, dependency auditor, SSL inspector, and DNS intelligence into one meta-package. Add a single MCP server to Claude or run the guardbee CLI in CI.
What does it do?
Instead of installing four MCP servers, use one package for chat-based secret/CVE/TLS/DNS work plus shared --fail-on / SARIF options for CI.
Who is it for?
- Teams that want an all-in-one MCP quickly
- DevSecOps adding secret + dependency gates on PRs
- Agencies running multi-domain SSL/DNS checks
What it is not
- Replacing DB Gateway, Security Proxy, Vulnerability Scanner, or AI Code Scanner (not in the suite)
- Replacing a full enterprise SCA/ASM platform
Features
| Feature | Description |
|---|---|
| Single MCP server | npx @guardbee/security-suite serve |
| CLI | secret-scan, dep-audit, ssl-inspect, dns-check |
| Shared flags | –fail-on, –format=text|json|sarif |
| CI samples | GitHub Actions / GitLab SARIF upload |
| Telemetry opt-out | GUARDBEE_TELEMETRY=0 |
MCP tools
| Tool | Description |
|---|---|
secret-scan tools | File/directory secret scanning via the suite |
dep-audit tools | npm/pip OSV CVE checks |
ssl-inspect tools | TLS certificate / cipher checks |
dns-check tools | DNS + SPF/DMARC/DKIM |
Install with npm
Global install (handy for Claude Desktop / Cursor):
npm install -g @guardbee/security-suiteor via npx (recommended with -y in config):
npx -y @guardbee/security-suiteGlobal CLI: npm install -g @guardbee/security-suite — then guardbee secret-scan ., guardbee dep-audit ., guardbee ssl-inspect example.com, guardbee dns-check example.com.
Claude Desktop configuration
Config file paths:
- macOS
~/Library/Application Support/Claude/claude_desktop_config.json - Windows
%APPDATA%\Claude\claude_desktop_config.json - Linux
~/.config/Claude/claude_desktop_config.json
Merge this block, then restart Claude Desktop:
{
"mcpServers": {
"guardbee": {
"command": "npx",
"args": [
"-y",
"@guardbee/security-suite",
"serve"
]
}
}
}Cursor and other MCP clients
In Cursor, add the same command / args / env under Settings → MCP. stdio MCP servers use the same contract as Claude Desktop.
Example prompts in Claude
- “Scan my project for secrets, then audit npm dependencies”
- “Check SSL and DNS health for example.com together”
- “How do I emit SARIF for CI?”
Related links
See surface risk with Guardbee
MCP servers speed up security work in chat. Start a 14-day free trial for brand scans and BeeAI.
Frequently asked questions
What’s included?
mcp-secret-scanner, mcp-dependency-auditor, mcp-ssl-inspector, mcp-dns-intelligence.
Is DB Gateway included?
No — install it separately.
API key?
Not for these four tools.