Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
作者提供的说明(英文原文)
MCP server for running Ox Security MegaLinter via mega-linter-runner
这三项永远不会合并成一个分数:意见、测量和人气是不同的东西。
我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。
选择你使用的 AI 应用,然后复制设置。
你需要
你用的是哪个应用?
在上方选择你的应用。我们会记住它,下次按钮会显示“安装到 …”。
打开 Claude Desktop → Settings → Developer → Edit Config,把下面的内容粘贴到 claude_desktop_config.json
{
"mcpServers": {
"megalinter": {
"command": "npx",
"args": [
"-y",
"@downatthebottomofthemolehole/megalinter-mcp-server"
]
}
}
}在终端中运行这条命令
claude mcp add megalinter -- npx -y @downatthebottomofthemolehole/megalinter-mcp-server粘贴到项目中的 .cursor/mcp.json,或 ~/.cursor/mcp.json
{
"mcpServers": {
"megalinter": {
"command": "npx",
"args": [
"-y",
"@downatthebottomofthemolehole/megalinter-mcp-server"
]
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
粘贴到项目中的 .vscode/mcp.json
{
"servers": {
"megalinter": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@downatthebottomofthemolehole/megalinter-mcp-server"
]
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
这个服务器在你的电脑上运行,而 ChatGPT 只能连接互联网上的服务器。请选择其他应用。
你的选择通过 Cookie 保存在这台设备上,无需账户。
这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同,请以 README 为准。
它在你的电脑上运行;安装后,工具列表会显示在你的 AI 应用中。
我们检查的是任何人都能看到的信息;我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月7日
注册名称已通过 GitHub 账户 DownAtTheBottomOfTheMoleHole 验证,该账户拥有此仓库
我们还没有从 GitHub 读取这个仓库
我们还没有从 GitHub 读取这个仓库
它在你的电脑上运行,没有互联网端点
在你的电脑上运行,改用本地设置
它在你的电脑上运行;我们只能读取互联网端点的工具列表
与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时,星标数才计入。
它在 1 项适用的基础检查中通过了 1 项。我们没有阅读代码。在添加密钥或令牌之前,请先看看这个服务器要求哪些权限,并使用只具备所需权限的密钥。
注册中心没有列出必需的密钥,不过有些服务器会在首次使用时要求你登录。
它在你的电脑上运行。你的 AI 应用会在需要时启动它,数据不会经过作者的服务器(除非它自己调用在线服务)。
GitHub 仓库最后更新于–,最新版本(4.0.0)于4天前进入注册中心。
支持 MCP 的应用,例如 Claude Desktop、Claude Code、Cursor 和 VS Code。你的电脑上还需要有 Node.js。
同一分类中有:Spec Driven Development, Remote Desktop Commander, Signoff
同一分类中其他作者的服务器,按星标数排序。
如何看卡片:★ GitHub 星标i三大支柱:评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Five gates that make an agent's 'done' provable: run them, read the verdict, audit the record.
按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。
Note: This is a community-maintained MCP server. It is not an official Model Context Protocol server, but it is sanctioned by Ox Security as a complement to their official MegaLinter tools.
A Model Context Protocol (MCP) server for running Ox Security MegaLinter through mega-linter-runner. Works with any CI/CD platform (GitHub Actions, GitLab CI, Azure DevOps, CircleCI, Jenkins) or locally.
This server provides 15 MCP tools in total: 10 core tools and 5 convenience aliases across execution, discovery, and analysis workflows.
megalinter_quick_action for short, natural requests with sensible defaults.megalinter_run to execute MegaLinter with configurable runtime and runner options.megalinter_write_config to generate a minimal .mega-linter.yml file.megalinter_list_flavors to return common MegaLinter flavors.megalinter_get_linters to discover available linters by language, security focus, and auto-fix capability.megalinter_get_security_info to group security linters by threat category.megalinter_get_reporters to list supported report output formats and CI-targeted reporters.megalinter_parse_reports to parse JSON or SARIF report artefacts.megalinter_get_issue_summary to aggregate report issues by linter and severity.megalinter_get_security_recommendations to generate security-focused remediation guidance.If you prefer short prompts, use megalinter_quick_action first:
@megalinter quick scan this repository@megalinter security scan@megalinter summarise errors@megalinter list python security linters@megalinter write configOr use ultra-short aliases for minimal typing:
@megalinter scan — Quick scan with defaults@megalinter summary — Summarise last run's errors@megalinter parse — Parse JSON report@megalinter help_quick — Context-aware help for your projectThis MCP server is platform-agnostic and works universally:
The only requirement is Docker (or a compatible container runtime like Colima).
| Tool | Category | Typical outcome |
|---|---|---|
megalinter_quick_action | Interactive | Handle short natural requests with defaults |
scan | Alias | Ultra-short alias for quick scan |
summary | Alias | Ultra-short alias for error summary |
parse | Alias | Ultra-short alias for report parsing |
help_quick | Alias | Ultra-short alias for context-aware help |
megalinter_help_quick | Help | Context-aware suggestions for your project |
megalinter_run | Execution | Run linting and produce report artefacts |
megalinter_write_config | Configuration | Generate baseline .mega-linter.yml |
megalinter_list_flavors | Discovery | Identify an appropriate flavour for your stack |
megalinter_get_linters | Discovery | Filter linters by language, security, and auto-fix support |
megalinter_get_security_info | Discovery | View security linters grouped by SAST, secrets, container, and IaC |
megalinter_get_reporters | Discovery | Select output/reporting formats for local and CI workflows |
megalinter_parse_reports | Analysis | Read JSON or SARIF reports in structured form |
megalinter_get_issue_summary | Analysis | Summarise issue totals and top failing linters |
megalinter_get_security_recommendations | Analysis | Produce practical shift-left security actions |
megalinter_quick_actionInteractive shortcut that accepts a short request and routes it to the right workflow.
Inputs:
request (string, optional): Short instruction. Default: quick scan.action (string, optional): Explicit quick action (scan, config, flavors, linters, security, reporters, parse, summary, recommendations).scanMode (string, optional): Scan preset (quick, full, security, fix).target (string, optional): Directory to scan. Default: ..workingDirectory (string, optional): Command working directory.reportsPath (string, optional): Reports directory. Default: megalinter-reports.reportType (string, optional): Parse format (json or sarif).severity (string, optional): Summary filter (error, warning, info).language (string, optional): Language filter for linter queries. For scans, maps to a flavor hint (python, javascript, terraform, and similar).securityOnly (boolean, optional): Return only security linters in linter queries. For scans, forces security flavor.autoFixOnly (boolean, optional): Return only auto-fix linters in linter queries.timeoutMinutes (number, optional): Timeout for scan actions. Default: 20.summaryOnly (boolean, optional): Return concise output for scans. Default: true.flavor (string, optional): Optional flavor override for scan actions.fix (boolean, optional): Force auto-fixes for scan actions.targetPath (string, optional): Config output path for write-config requests.Examples:
request: "quick scan" -> Runs ci_light against changed files.request: "full scan" -> Runs all flavor.request: "security scan" -> Runs security flavor.request: "summarise errors" -> Returns issue summary filtered to errors.request: "parse sarif report" -> Parses SARIF output.action: "summary", severity: "error" -> Deterministic summary with no phrase parsing.action: "scan", scanMode: "security" -> Deterministic security scan.scan (Ultra-short alias)Run a quick scan with minimal typing. Accepts optional parameters for customization.
Inputs:
language (string, optional): Target language mapped to flavor (e.g., python, javascript, terraform).scanMode (string, optional): Scan preset (quick, full, security, fix). Default: quick.summaryOnly (boolean, optional): Return concise output. Default: true.Example: @megalinter scan runs a quick scan with concise output.
summary (Ultra-short alias)Summarise errors from the last MegaLinter run with minimal typing.
Inputs:
severity (string, optional): Filter by severity (error, warning, info).linterFilter (string, optional): Filter by linter name.Example: @megalinter summary shows all error/warning totals.
parse (Ultra-short alias)Parse MegaLinter report files with minimal typing.
Inputs:
reportType (string, optional): Report format (json or sarif). Default: json.reportsPath (string, optional): Reports directory path.Example: @megalinter parse parses the JSON report.
megalinter_help_quickGet context-aware help based on your current repository. Detects languages, frameworks, Docker, Terraform, and security files to suggest relevant commands.
No inputs required.
Example: @megalinter help_quick returns tailored suggestions for your project.
megalinter_runUse this tool when you need full argument-level control. For short prompts, prefer megalinter_quick_action.
Runs mega-linter-runner via npx.
Inputs:
workingDirectory (string, optional): Command working directory. Defaults to current process directory.path (string, optional): Directory path to lint.flavor (string, optional): MegaLinter flavor. Default: all.release (string, optional): MegaLinter image tag. Default: v9.image (string, optional): Full Docker image override.env (string, optional): Environment variable string passed to --env.fix (boolean, optional): Apply auto-fixes.help (boolean, optional): Show mega-linter-runner help.install (boolean, optional): Generate MegaLinter starter config.containerName (string, optional): Docker container name override.removeContainer (boolean, optional): Remove container after run.configFile (string, optional): Path to .mega-linter.yml.reportsPath (string, optional): Reports directory. Default: megalinter-reports.disableLinters (string, optional): Comma-separated list of linters to disable.lintChangedFilesOnly (boolean, optional): Sets VALIDATE_ALL_CODEBASE=false when true.runnerVersion (string, optional): npm version for mega-linter-runner (for example latest).timeoutSeconds (number, optional): Timeout in seconds. Default: 3600.summaryOnly (boolean, optional): Return concise logs. Default: false.extraArgs (string[], optional): Additional CLI arguments.megalinter_write_configWrites a minimal MegaLinter configuration.
Inputs:
targetPath (string, optional): Output file path. Default: .mega-linter.yml.applyFixes (string, optional): Value for APPLY_FIXES. Default: none.showElapsedTime (boolean, optional): Value for SHOW_ELAPSED_TIME. Default: true.flavorSuggestions (boolean, optional): Value for FLAVOR_SUGGESTIONS. Default: false.disableLinters (string[], optional): Values for DISABLE_LINTERS.megalinter_list_flavorsReturns the built-in list of common flavors (all, javascript, python, terraform, and others).
megalinter_get_lintersReturns linter metadata from the built-in catalogue and supports targeted filtering.
Inputs:
language (string, optional): Filter by language (for example python, javascript, terraform).securityOnly (boolean, optional): Return only security-focused linters.autoFixOnly (boolean, optional): Return only linters with automatic fix capability.megalinter_get_security_infoReturns security linters grouped into categories such as SAST, secrets, supply chain, container, and infrastructure.
Inputs:
megalinter_get_reportersReturns available MegaLinter reporters, including CI-targeted formats.
Inputs:
megalinter_parse_reportsParses MegaLinter report files from the reports directory.
Inputs:
reportsPath (string, optional): Report directory path. Default: megalinter-reports.reportType (string, optional): Report type (json or sarif). Default: json.megalinter_get_issue_summarySummarises issues from megalinter-report.json and can apply severity/linter filters.
Inputs:
reportsPath (string, optional): Report directory path. Default: megalinter-reports.severityFilter (string, optional): Filter results by severity (error, warning, info).linterFilter (string, optional): Filter results by linter name.megalinter_get_security_recommendationsGenerates security
只显示了开头部分;其余内容请在仓库中阅读