Vulnerability Scanner

io.github.GuardBee由 GitHub 帳號 GuardBee 發布v0.4.1更新於 Nov 3, 2026

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

已驗證STDIO僅桌面網頁搜尋與抓取安全與監控

概覽

AI 產生的概覽

讓 AI 助理對網址發起 GuardBee 安全掃描，並回傳漏洞發現與修補建議。

可以做什麼
  • 對網址或品牌 ID 發起 GuardBee 掃描，可選擇等待掃描完成
  • 依掃描 ID 查詢掃描狀態與各等級數量摘要
  • 列出工作區最近的掃描紀錄並支援篩選
  • 依嚴重程度、掃描 ID 或品牌 ID 取得漏洞發現，含標題、說明與修補建議
  • 執行完整掃描並直接回傳重大與高風險問題及修補指引
適用情境
適合讓助理對網站執行 OWASP 類安全检查、彙整重大與高風險問題並提出修補方式，也支援以 KVKK、GDPR 或 CCPA 合規為重點的掃描。
執行需求
透過 npm 套件以 stdio 在本機執行，通常以 npx 啟動。需在 GUARDBEE_API_KEY 環境變數提供 GuardBee API 金鑰；可選用 GUARDBEE_BASE_URL 覆寫預設端點。需要能連線至 GuardBee 服務的網路。
安裝前請注意
API 金鑰屬於憑證，透過環境變數傳入。掃描會針對實際網址發起並消耗 GuardBee 工作區資源。設定 GUARDBEE_TELEMETRY=1 會開啟遙測，將伺服器、工具、成功與否、耗時及檔案路徑等短參數值傳送至遙測套件，較長字串與 content、token、password 等欄位會以佔位符取代。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Vulnerability Scanner，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

@guardbee/mcp-vulnerability-scanner

🇬🇧 English | 🇹🇷 Türkçe | 🇨🇳 中文 | 🇯🇵 日本語 | 🇰🇷 한국어 | 🇧🇷 Português | 🇪🇸 Español | 🇩🇪 Deutsch

[npm version] [npm downloads] [License: MIT]

Trigger a GuardBee security scan directly from a Claude conversation. Run OWASP checks, query findings, and have the AI prioritize remediation recommendations.

Telemetry is off by default. With GUARDBEE_TELEMETRY=1 it sends the server, tool, success, duration and short parameter values such as a file path; longer strings and fields like content, token or password are replaced with a placeholder. See @guardbee/mcp-telemetry.

A GuardBee API key is required. Get one at app.guardbee.ai/developers.

Features

  • Trigger a Scan from Claude — start a GuardBee scan on any URL with one command
  • Status Queries — check scan progress and summary counts in real time
  • Finding Filters — query by severity, scan ID, or brand ID
  • Remediation Guidance — an explanation and an actionable recommendation for every finding
  • Scan Scenarios — quick, kvkkFocus, gdprFocus, ccpaFocus
  • 36 Scan Modules — all of GuardBee's modules are supported
  • 25 Unit Tests — a test suite that doesn't require API calls

Quick Start

bash
npm install -g @guardbee/mcp-vulnerability-scanner

Add to claude_desktop_config.json:

json
{  "mcpServers": {    "guardbee-vulnerability-scanner": {      "command": "npx",      "args": ["-y", "@guardbee/mcp-vulnerability-scanner"],      "env": {        "GUARDBEE_API_KEY": "gb_..."      }    }  }}

Get your API key at app.guardbee.ai/developers.

MCP Tools

ToolDescription
start_scanStarts a scan for a URL or brand ID; with wait=true waits for completion
get_scan_statusLive status and summary counts by scan ID
list_scansLists workspace scans with filters
get_findingsFetches findings filtered by severity / scanId / brandId
scan_and_reportScan + wait + return critical/high findings and remediation recommendations

Example Usage

You can ask Claude:

"Scan https://example.com and give me a security report"

"List my recent scans"

"Show critical findings for scan clz001 and explain how to fix them"

"Run a KVKK-focused scan on example.com"

Example Output

⚠️  Security scan complete for https://example.com   Scan ID  : clz001abc   🔴 Critical : 2   🟠 High     : 5   🟡 Medium   : 8   🔵 Low      : 3   ⚪ Info     : 12   ✅ Passed   : 18
Use get_findings with scanId="clz001abc" to see details and remediation steps.

Scan Scenarios

ScenarioDescription
quickAll 36 modules — comprehensive general scan
kvkkFocusFocused on KVKK compliance modules
gdprFocusFocused on GDPR compliance modules
ccpaFocusFocused on CCPA compliance modules

Environment Variables

VariableDescription
GUARDBEE_API_KEYGuardBee API key (required)
GUARDBEE_BASE_URLCustom endpoint (default: https://app.guardbee.ai)

Development

bash
npm installnpm test          # 25 unit testsnpm run build     # TypeScript compile

License

MIT — GuardBee

Feedback

Questions, ideas, or a false positive? Start a thread in GitHub Discussions or open an issue. If GuardBee is useful to you, a ⭐ on the repository helps others find it.

來源：packages/vulnerability-scanner/README.md，提交 bc5997d

工具

5

start_scan

Start a GuardBee security scan on a URL. Returns a scan ID you can use to check status and get findings.

輸入參數urlwaitbrandIdscenario

get_scan_status

Get the current status and summary of a GuardBee scan by ID

輸入參數scanId必填

list_scans

List recent GuardBee scans in your workspace

輸入參數pagestatusbrandIdpageSize

get_findings

Get vulnerability findings from a GuardBee scan with optional severity filter. Includes title, description, and remediation recommendation per finding.

輸入參數pagescanIdbrandIdpageSizeseverity

scan_and_report

Run a full GuardBee scan and immediately return all critical and high findings with remediation guidance. Best for quick security assessments.

輸入參數url必填scenario

版本歷史

3
  1. v0.4.1最新Oct 30, 2026
  2. v0.3.2Oct 22, 2026
  3. v0.2.5Oct 13, 2026

評分

已滿足適用檢查項的 90%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分
  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分