shyshlakov/pci-dss-mcp

What it does

shyshlakov/pci-dss-mcp is a Model Context Protocol (MCP) server that performs automated static analysis on Go payment codebases to ensure PCI DSS v4.0.1 compliance. It includes 12 specialized scanners that detect critical security issues including PAN/CVV data exposure, weak cryptographic implementations, missing audit logs, vulnerable dependencies, TLS misconfigurations, and authentication weaknesses. Each finding is mapped directly to specific PCI DSS requirements for easy remediation.

Key Features

• 12 dedicated security scanners for payment systems
• PAN (Primary Account Number) and CVV exposure detection
• Cryptographic weakness identification
• Audit log validation
• Vulnerable dependency scanning
• TLS configuration analysis
• Authentication mechanism verification
• CycloneDX 1.6 SBOM (Software Bill of Materials) generation
• Direct mapping of findings to PCI DSS requirements

How to set up

As an MCP server, integration typically involves configuring it within an MCP-compatible client environment. Installation and setup instructions should be available in the GitHub repository (shyshlakov/pcidssmcp). The tool is designed to work with Go codebases and requires access to the source code for analysis.