BLT

Provides access to BLT data and actions via MCP, enabling AI-driven bug logging, triage, and remediation workflows.

typescript

0

GitHub Stars

typescript

Language

4 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "owasp-blt-blt-mcp": {
      "command": "node",
      "args": [
        "/absolute/path/to/blt-mcp/dist/index.js"
      ],
      "env": {
        "BLT_API_KEY": "your_api_key_here",
        "BLT_API_BASE": "https://blt.owasp.org/api"
      }
    }
  }
}

You can integrate BLT functionality into AI agents and development workflows using the BLT MCP Server. It exposes BLT data and actions through a consistent MCP interface, enabling streamlined logging, triage, and remediation workflows across IDEs and chat interfaces.

How to use

You will connect an MCP client to the BLT MCP Server to access BLT resources and utilize its tools. Start by running the server locally and then configure your MCP client to communicate with it. Once connected, you can submit new issues, view leaderboards, triage vulnerabilities, plan remediations, and review contributions through natural language prompts.

How to install

Prerequisites: ensure you have Node.js 18 or higher and npm or yarn installed on your machine.

# Install dependencies
npm install

# Build the server
npm run build

Configuration and usage notes

To run the MCP server locally, you typically execute the server entry point used by MCP clients. The final runtime command shown in examples uses the standard Node.js execution of the compiled bundle.

node dist/index.js

Available tools

submit_issue

Report new bugs and vulnerabilities into the BLT system.

award_bacon

Award bacon points to contributors as gamification rewards.

update_issue_status

Change the status of an issue (open, in_progress, resolved, closed, wont_fix).

add_comment

Add comments to existing issues to provide updates or context.

triage_vulnerability

Guide AI through vulnerability triage and severity assessment.

plan_remediation

Create comprehensive remediation plans for security issues.

review_contribution

Evaluate security contributions and provide quality assessments.