Warning This project is a work in progress. Use at your own risk.
SD Elements MCP Server
MCP server for SD Elements API v2 (STDIO only). Use it from MCP clients to manage projects, surveys, countermeasures, scans, reports, diagrams, and users.
Quick start
npm ci
npm run start
Required configuration
SDE_HOST:https://your-sdelements-instance.comSDE_API_KEY:your-api-key-here
Client setup (Cursor + Claude Desktop)
Both clients use the same mcpServers object — the only difference is where you paste it.
- Cursor: add this under MCP settings (Cursor “MCP Servers” /
mcpServers). - Claude Desktop: add this to
claude_desktop_config.json.
Pick one execution style:
- Option A (recommended): run from the GitHub repo via
npx(builds on install)
{
"mcpServers": {
"sdelements": {
"command": "npx",
"args": ["-y", "github:sdelements/sde-mcp"],
"env": {
"SDE_HOST": "https://your-sdelements-instance.com",
"SDE_API_KEY": "your-api-key-here"
}
}
}
}
- Option B: run from a local checkout (build output)
{
"mcpServers": {
"sdelements": {
"command": "node",
"args": ["/absolute/path/to/sde-mcp/dist/main.js"],
"env": {
"SDE_HOST": "https://your-sdelements-instance.com",
"SDE_API_KEY": "your-api-key-here"
}
}
}
}
Build
npm run build
Local checkout build (for Option B)
npm ci
npm run build
Tools
- Projects / profiles / risk policies:
list_projects,get_project,create_project,update_project,delete_project,create_project_from_code,list_profiles,list_risk_policies,get_risk_policy - Applications:
list_applications,get_application,create_application,update_application - Business units:
list_business_units,get_business_unit - Countermeasures:
list_countermeasures,get_countermeasure,update_countermeasure,add_countermeasure_note,get_task_status_choices - Surveys:
get_project_survey,get_survey_answers_for_project,update_project_survey,find_survey_answers,set_project_survey_by_text,add_survey_answers_by_text,remove_survey_answers_by_text,commit_survey_draft,add_survey_question_comment - Scans:
list_scan_connections,scan_repository,get_scan_status,list_scans - Diagrams:
list_project_diagrams,get_diagram,create_diagram,update_diagram,delete_diagram - Reports / Cube:
list_advanced_reports,get_advanced_report,update_advanced_report,run_advanced_report,create_advanced_report,execute_cube_query - Users:
list_users,get_user,get_current_user - Generic:
test_connection,api_request
Notes
- Missing env vars: tools will fail if
SDE_HOST/SDE_API_KEYaren’t set.