mcpdirectory.dev
9,129 servers · updated 23 Sept

Draugr MCP server

community Active last commit 17 d

What it does

Draugr is an MCP server that runs multiple security scanners (Trivy, Semgrep, Gitleaks) against your application and ranks findings by actual risk to your specific deployment. It helps teams determine whether code is safe to ship by considering exposure and importance alongside severity.

  • Scan a codebase, container images, and infrastructure configuration in one command to get a unified SARIF report with findings ranked by priority.
  • Gate pull requests on newly introduced security findings rather than being blocked by pre-existing ones using draugr diff.
  • Describe your application architecture once in a YAML file and have Draugr automatically select and run the appropriate security checks for your components.

Before you enable it

An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.