MCP server · Qwiet

harness-code-security-mcp

Qwiet / Harness SAST & SCA MCP server (stdio). Wraps the Qwiet API (app.shiftleft.io) and the `sl` CLI so an agent can run code analysis, triage findings with data flow, and request AutoFix remediations.

Open docs → Qwiet provider profile

One-click install for Cursor, VS Code, Claude, and 20+ other MCP clients, powered by API Commons MCP Install — visit install.apicommons.org for more information.

Provider: Qwiet Type: Documentation link Transport: stdio Host: www.npmjs.com

Documentation

https://www.npmjs.com/package/harness-code-security-mcp

Documentation link · transport stdio

Tools

sl_whoami — Return the authenticated user and activeOrganizationId
sl_ensure_cli — Download/install the `sl` CLI before analysis (1-3 min first run)
sl_analyze — Run code analysis (SAST) on the workspace; returns scan_id
sl_list_applications — List applications in the active org
sl_list_branch_scans — List scans for an app branch (latest.id)
sl_list_findings — Return counts + top_actionable (critical/high ids) + next_steps for a scan
sl_get_findings — Fetch up to 10 findings by id in one call
sl_get_finding_dataflows — Return the vulnerability data flow for a finding (triage)
sl_get_recommended_fixes — Batch AutoFix recommendations; each fix carries edits[] (file/old_string/new_string)
sl_request_finding_fix — Request an AutoFix/remediation for a finding

About MCP

The Model Context Protocol (MCP) is an open protocol Anthropic introduced for connecting LLM-based agents to external tools and data sources. Providers publish MCP servers that expose their API surface as structured, discoverable tools — an MCP-compatible client (Claude Desktop, Cursor, Cline, Continue, etc.) can connect to the server and call its tools without any per-provider integration code.

Browse every MCP server on the APIs.io network or compare with the broader Agent Skill surfaces of the same providers.