SRAI Security Review MCP (npx launcher)

Run SRAI MCP without cloning the private repo.

Quick use

npx -y srai-security-review-mcp \
  --api-url https://app.yoursrai.com \
  --api-token YOUR_SRAI_TOKEN

Or set values in .env:

SRAI_API_URL=https://app.yoursrai.com
SRAI_API_TOKEN=YOUR_SRAI_TOKEN

Then run:

npx -y srai-security-review-mcp

The launcher will:

• create a local Python virtualenv at ~/.srai-security-review-mcp/venv
• install Python dependencies
• run python -m srai_mcp_server

MCP config examples

Cursor / Windsurf

{
  "mcpServers": {
    "srai-security-review": {
      "command": "npx",
      "args": [
        "-y",
        "srai-security-review-mcp"
      ],
      "env": {
        "SRAI_API_URL": "https://app.yoursrai.com",
        "SRAI_API_TOKEN": "YOUR_SRAI_TOKEN"
      }
    }
  }
}

With Jira + Confluence integration

{
  "mcpServers": {
    "srai-security-review": {
      "command": "npx",
      "args": [
        "-y",
        "srai-security-review-mcp"
      ],
      "env": {
        "SRAI_API_URL": "https://app.yoursrai.com",
        "SRAI_API_TOKEN": "YOUR_SRAI_TOKEN",
        "JIRA_BASE_URL": "https://yourcompany.atlassian.net",
        "JIRA_EMAIL": "[email protected]",
        "JIRA_API_TOKEN": "YOUR_JIRA_TOKEN",
        "CONFLUENCE_BASE_URL": "https://yourcompany.atlassian.net",
        "CONFLUENCE_EMAIL": "[email protected]",
        "CONFLUENCE_API_TOKEN": "YOUR_CONFLUENCE_TOKEN"
      }
    }
  }
}

Options

• --api-url
• --api-token
• --env-file (defaults to ./.env if present)
• --jira-base-url
• --jira-email
• --jira-api-token
• --confluence-base-url
• --confluence-email
• --confluence-api-token
• --python (custom Python binary)
• --force-install (reinstall Python dependencies)
• --print-config

Requirements

• Node.js 18+
• Python 3.12+
• Network access on first run (to install Python dependencies)