shyshlakov/pci-dss-mcp
MCP Security & AuthStatic analysis MCP server that scans Go payment‑service codebases and maps every detected PCI DSS v4.0.1 violation to its specific requirement ID before the code ships
Features
- Runs 12 specialized scanners plus an orchestrator and AI triage engine over Go payment‑service projects
- Each finding carries a `requirement_id` linked to a concrete PCI DSS v4.0.1 line item
- Provides detailed taint‑flow detection for HTTP input flowing into log, error, or panic sinks across major Go frameworks and loggers
Recent releases
View all 14 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
go
docker
Similar tools
Alternative to
Semgrep
CodeQL
gosec