OWASP Cheat Sheet

OWASP Cheat Sheets MCP Server

python

5

GitHub Stars

python

Language

6 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "santosomar-owasp_cheatsheets_mcp_server": {
      "command": "uvicorn",
      "args": [
        "server.app:app",
        "--host",
        "0.0.0.0",
        "--port",
        "8000"
      ]
    }
  }
}

You run a lightweight MCP server that serves OWASP Cheat Sheets through a minimal FastAPI API. It lets you list, fetch, and search cheat sheets locally or in production, making it easy to integrate cheat sheets into your tooling and workflows.

How to use

You can interact with the MCP server from a client by calling its endpoints to health-check, list available cheat sheets, retrieve a specific cheat sheet, or search for terms across cheat sheets.

Common usage patterns include starting the server on your machine or in a deployment, then querying the API to fetch or search cheat sheets as needed. The server exposes endpoints for health checks, listing cheat sheets, retrieving individual cheat sheets, and performing text searches.

How to install

Prerequisites you need before installing the MCP server.

# Prerequisites
python3 --version
# Ensure Python 3.8 or newer is installed

# Install required Python packages
pip install -r requirements.txt

Optional environment setup to reuse an existing local copy of the cheat sheets.

export CHEATSHEETS_DIR=/path/to/CheatSheetSeries/cheatsheets

Start the MCP server in development mode for rapid feedback.

uvicorn server.app:app --reload

If you prefer running in production mode, start the server with explicit host and port.

uvicorn server.app:app --host 0.0.0.0 --port 8000

Additional notes

If CHEATSHEETS_DIR is not set, the server will clone the cheat sheet repository on first start, which requires network access.

In production deployments, consider using a process manager or exposing the service behind a reverse proxy for reliability and security.

Available tools

health

GET /health returns a basic operational status of the MCP server.

list_cheatsheets

GET /cheatsheets returns a list of available cheat sheet files in the configured cheatsheets directory.

get_cheat_sheet

GET /cheatsheets/{name} retrieves the content of a specific cheat sheet by name.

search_cheat_sheets

GET /search?q=term searches cheat sheets for a term and returns matching file names.