BoostSecurity MCP server

BoostSecurity MCP serves as a protective layer for AI-assisted development workflows, analyzing every package an AI agent suggests to prevent the introduction of unsafe dependencies. By flagging risky packages and recommending secure alternatives, it allows teams to confidently use AI coding assistants without compromising security.

Installation

Requirements

To use BoostSecurity MCP, you'll need an MCP-compatible client such as Cursor, Claude Code, Windsurf, or VS Code.

Setting Up in Different Environments

Cursor Configuration

Go to Settings → Cursor Settings → MCP → Add new global MCP server

Use the following configuration:

{
  "mcpServers": {
    "boost-security": {
      "url": "https://mcp.boostsecurity.io/mcp",
      "transport": "http"
    }
  }
}

Once configured, check under Cursor Settings → MCP & Integrations to confirm the BoostSecurity MCP tool is enabled for validate_package.

Claude Code Configuration

Run the following command to add the BoostSecurity MCP server:

claude mcp add --scope user --transport http boost-security https://mcp.boostsecurity.io/mcp

To verify the setup, type /mcp within Claude and confirm that BoostSecurity MCP appears as enabled.

Windsurf Configuration

Navigate to Windsurf Settings → Cascade MCP Servers and add:

{
  "mcpServers": {
        "boost-security": {
            "serverUrl": "https://mcp.boostsecurity.io/mcp"
        }
    }
}

Alternatively, add this configuration to your Windsurf MCP config file. You may need to restart Windsurf for changes to take effect.

To verify the setup, go to Windsurf Settings → Manage MCPs and check that the BoostSecurity MCP connection is enabled with the validate_package tool.

VS Code Configuration

1. Open Command Palette (View → Command Palette)
2. Search for and select "MCP: Open User Configuration"
3. Add the following configuration:

{
  "servers": {
    "boost-security": {
      "type": "http",
      "url": "https://mcp.boostsecurity.io/mcp"
    }
  }
}

Restart VS Code, then enable the MCP connection by selecting "Start" on the MCP configuration.

Other MCP Clients

For any other MCP-compliant client, configure it to connect to:

• Transport type: http
• Remote server URL: https://mcp.boostsecurity.io/mcp

Available Tools

BoostSecurity MCP provides a package validation tool:

• validate_package: Checks if a package is safe to use and suggests alternatives for unsafe packages

Optimizing Usage

For best results, add specific instructions to your AI agent prompts:

Always use the BoostSecurity MCP tool `validate_package` to ensure a package is safe before adding it to a project. 
Use the package versions recommended by BoostSecurity.

This ensures the AI consistently validates packages before recommending them for your project.

How to install this MCP server

For Claude Code

To add this MCP server to Claude Code, run this command in your terminal:

claude mcp add-json "boost-security" '{"url":"https://mcp.boostsecurity.io/mcp","transport":"http"}'

See the official Claude Code MCP documentation for more details.

For Cursor

There are two ways to add an MCP server to Cursor. The most common way is to add the server globally in the ~/.cursor/mcp.json file so that it is available in all of your projects.

If you only need the server in a single project, you can add it to the project instead by creating or adding it to the .cursor/mcp.json file.

Adding an MCP server to Cursor globally

To add a global MCP server go to Cursor Settings > Tools & Integrations and click "New MCP Server".

When you click that button the ~/.cursor/mcp.json file will be opened and you can add your server like this:

{
    "mcpServers": {
        "boost-security": {
            "url": "https://mcp.boostsecurity.io/mcp",
            "transport": "http"
        }
    }
}

Adding an MCP server to a project

To add an MCP server to a project you can create a new .cursor/mcp.json file or add it to the existing one. This will look exactly the same as the global MCP server example above.

How to use the MCP server

Once the server is installed, you might need to head back to Settings > MCP and click the refresh button.

The Cursor agent will then be able to see the available tools the added MCP server has available and will call them when it needs to.

You can also explicitly ask the agent to use the tool by mentioning the tool name and describing what the function does.

For Claude Desktop

To add this MCP server to Claude Desktop:

1. Find your configuration file:

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json
• Linux: ~/.config/Claude/claude_desktop_config.json

2. Add this to your configuration file:

{
    "mcpServers": {
        "boost-security": {
            "url": "https://mcp.boostsecurity.io/mcp",
            "transport": "http"
        }
    }
}

3. Restart Claude Desktop for the changes to take effect