1. Conduid
  2. Security
  3. Stepsecurity MCP
MCP server · Security

Stepsecurity MCP

by · github.com/step-security/stepsecurity-mcp

Model Context Protocol (MCP) server for the StepSecurity platform

Unclaimed last commit 6 months ago security
InstallView source
34Low

Scored a month ago · breakdown

About Stepsecurity MCP

Stepsecurity MCP is an MCP server published by step-security in the Security category: model Context Protocol (MCP) server for the StepSecurity platform.

The repository has 5 stars and 0 forks, with the last commit 6 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/step-security/stepsecurity-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (7)

list_anomalous_network_callsNew outbound calls off the baseline

Parameters not published.

list_blocked_domain_callsEgress-policy blocks

Parameters not published.

list_detectionsGeneric escape hatch for less-common types (source-code overwritten, harden-runner-config-changed, agent-tampered, etc.)

Parameters not published.

list_https_outbound_callsHTTPS calls with method + path

Parameters not published.

list_imposter_commit_detectionsAction pinned to a non-tag/non-branch SHA

Parameters not published.

list_secrets_in_build_logSecret patterns in CI logs (masked)

Parameters not published.

list_suspicious_process_eventsMemory-read, reverse-shell, privileged container

Parameters not published.

Ask AI

✦

Ask AI about Stepsecurity MCP

Powered by Claude · Grounded in docs

I know everything about Stepsecurity MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Stepsecurity MCP

How do I install Stepsecurity MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Stepsecurity MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Stepsecurity MCP still maintained?

The last commit was 6 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.