blackduck-mcp

> MCP server for Black Duck Software Composition Analysis — lets AI assistants (Claude, Cursor, VS Code) query component vulnerabilities and find safe upgrade paths.

---

git clone https://github.com/maheshkumargangula/blackduck-mcp.git
cd blackduck-mcp
npm install && npm run build

Then wire it into your MCP client (see Integration below).

---

MCP Client (Claude / Cursor / VS Code)
         |
         | MCP Protocol (stdio)
         v
  ┌─────────────────────────────────┐
  │        blackduck-mcp            │
  │                                 │
  │  src/index.ts  ←  tool registry │
  │        │                        │
  │        ├── search_component     │
  │        ├── list_component_vers. │
  │        ├── get_version_vulns    │
  │        ├── get_upgrade_guidance │
  │        └── analyze_component ──────── (orchestrator)
  │               │                 │
  │        src/client.ts            │
  │  (auth + retry + API mapping)   │
  └─────────────┬───────────────────┘
                │
                │ HTTPS REST
                v
  ┌─────────────────────────────────┐
  │   Black Duck Server             │
  │   POST /api/tokens/authenticate │
  │   GET  /api/search/kb-components│
  │   GET  .../versions             │
  │   GET  .../vulnerabilities      │
  │   GET  .../upgrade-guidance     │
  └─────────────────────────────────┘

analyze_component is the high-level orchestrator. It calls the other four API methods in sequence: search → version lookup → vulnerability check → upgrade guidance.

---

• Node.js 18+ (ESM + URL global required)
• **A running Black