Boost MCP server

The BoostSecurity MCP server acts as a security checkpoint for AI-assisted development, analyzing and validating packages that AI agents suggest or introduce to your projects. It helps prevent potential security risks by flagging unsafe dependencies and recommending secure alternatives.

Installation Requirements

Supported Clients

• Cursor
• Claude Code
• Windsurf
• VS Code
• Other MCP-compatible clients

Supported Languages and Ecosystems

• Python (PyPI)
• Go (Go Modules)
• JavaScript/TypeScript (npm)
• Java (Maven)
• C# (NuGet)

Setting Up the MCP Server

Cursor Configuration

1. Navigate to Settings → Cursor Settings → MCP → Add new global MCP server
2. Add the following configuration:

{
  "mcpServers": {
    "boost-security": {
      "url": "https://mcp.boostsecurity.io/mcp",
      "transport": "http"
    }
  }
}

3. Verify that the BoostSecurity MCP tool is enabled for validate_package under Cursor Settings → MCP & Integrations

Claude Code Configuration

Run the following command to add the server:

claude mcp add --scope user --transport http boost-security https://mcp.boostsecurity.io/mcp

To verify configuration, type /mcp within Claude to check that BoostSecurity MCP appears as enabled.

Windsurf Configuration

1. Navigate to Windsurf Settings → Cascade MCP Servers
2. Add the following configuration:

{
  "mcpServers": {
    "boost-security": {
      "serverUrl": "https://mcp.boostsecurity.io/mcp"
    }
  }
}

3. Alternatively, add this to your Windsurf MCP config file (e.g., ~/.codeium/windsurf/mcp_config.json)
4. Relaunch Windsurf if needed
5. Verify in Windsurf Settings → Manage MCPs that BoostSecurity MCP appears enabled with the validate_package tool

VSCode Configuration

1. Navigate to View → Command Palette → MCP:Open User Configuration
2. Add the following configuration:

{
  "servers": {
    "boost-security": {
      "type": "http",
      "url": "https://mcp.boostsecurity.io/mcp"
    }
  }
}

3. Relaunch VS Code if needed
4. Enable the MCP connection by selecting Start on the MCP configuration
5. When properly configured, the state will change to Running

Other MCP Clients

For any MCP-compliant client, configure with:

• Transport type: http
• Remote server URL: https://mcp.boostsecurity.io/mcp

Using BoostSecurity MCP

The server provides the validate_package tool, which checks if a package is safe to use and suggests alternatives for unsafe packages.

Getting Better Results

To ensure your AI agent consistently uses the security validation, add the following instruction to your agent:

Always use the BoostSecurity MCP tool `validate_package` to ensure a package is safe before adding it to a project. 
Use the package versions recommended by BoostSecurity.

This ensures that any packages the AI attempts to include in your project will be vetted for security issues, reducing supply chain risks in your development workflow.

How to install this MCP server

For Claude Code

To add this MCP server to Claude Code, run this command in your terminal:

claude mcp add-json "boost-security" '{"url":"https://mcp.boostsecurity.io/mcp","transport":"http"}'

See the official Claude Code MCP documentation for more details.

For Cursor

There are two ways to add an MCP server to Cursor. The most common way is to add the server globally in the ~/.cursor/mcp.json file so that it is available in all of your projects.

If you only need the server in a single project, you can add it to the project instead by creating or adding it to the .cursor/mcp.json file.

Adding an MCP server to Cursor globally

To add a global MCP server go to Cursor Settings > Tools & Integrations and click "New MCP Server".

When you click that button the ~/.cursor/mcp.json file will be opened and you can add your server like this:

{
    "mcpServers": {
        "boost-security": {
            "url": "https://mcp.boostsecurity.io/mcp",
            "transport": "http"
        }
    }
}

Adding an MCP server to a project

To add an MCP server to a project you can create a new .cursor/mcp.json file or add it to the existing one. This will look exactly the same as the global MCP server example above.

How to use the MCP server

Once the server is installed, you might need to head back to Settings > MCP and click the refresh button.

The Cursor agent will then be able to see the available tools the added MCP server has available and will call them when it needs to.

You can also explicitly ask the agent to use the tool by mentioning the tool name and describing what the function does.

For Claude Desktop

To add this MCP server to Claude Desktop:

1. Find your configuration file:

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json
• Linux: ~/.config/Claude/claude_desktop_config.json

2. Add this to your configuration file:

{
    "mcpServers": {
        "boost-security": {
            "url": "https://mcp.boostsecurity.io/mcp",
            "transport": "http"
        }
    }
}

3. Restart Claude Desktop for the changes to take effect