Skip to content
appsgit

Bugsy

Bugsy is an MCP server that adds developer tools to AI assistants such as Claude Desktop, Claude Code and Cursor. Automatic security vulnerability remediation for your code. It has 68 GitHub stars, is released under the MIT license and runs locally with npx -y mobbdev.

github.com/mobb-dev/bugsy (opens in a new tab)

Data as of from the GitHub API; description from the project's repository. Report an error

View on GitHub (opens in a new tab)

Install Bugsy

Generated from the server's published package. Replace your-value with your own values.

Claude Desktop

claude_desktop_config.json
{
  "mcpServers": {
    "bugsy": {
      "command": "npx",
      "args": [
        "-y",
        "mobbdev"
      ],
      "env": {
        "API_KEY": "your-value"
      }
    }
  }
}

Settings > Developer > Edit Config. macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\. Restart Claude Desktop afterwards.

Claude Code

claude mcp add --env API_KEY=your-value --transport stdio bugsy -- npx -y mobbdev

Cursor

.cursor/mcp.json
{
  "mcpServers": {
    "bugsy": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mobbdev"
      ],
      "env": {
        "API_KEY": "your-value"
      }
    }
  }
}

Project file; use ~/.cursor/mcp.json to enable it in every project.

VS Code

.vscode/mcp.json
{
  "inputs": [
    {
      "type": "promptString",
      "id": "api_key",
      "description": "API_KEY",
      "password": true
    }
  ],
  "servers": {
    "bugsy": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mobbdev"
      ],
      "env": {
        "API_KEY": "${input:api_key}"
      }
    }
  }
}

Config formats checked against the official docs on Oct 7, 2026: modelcontextprotocol.io (opens in a new tab), code.claude.com (opens in a new tab), cursor.com (opens in a new tab), code.visualstudio.com (opens in a new tab).

Environment variables

Variables the server reads at startup.

NameRequiredDescription
API_KEYsecretNoShown in the README's example configuration.
API_URLNoShown in the README's example configuration.
MVS_AUTO_FIXNoShown in the README's example configuration.

About Bugsy

Bugsy is a command-line interface (CLI) tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identify and fix security vulnerabilities in their code.

  • ai
  • code-assistant
  • mcp
  • npm-package
  • remediation
  • security
  • security-tools

Similar MCP servers

More developer tools MCP servers

All Developer tools

FAQ

Bugsy FAQ

Still curious? Email info@appsgit.com.

How do I install the Bugsy MCP server?

Add the command npx -y mobbdev to your MCP client: put it in claude_desktop_config.json for Claude Desktop, run claude mcp add for Claude Code, or add it to .cursor/mcp.json (Cursor) or .vscode/mcp.json (VS Code). The snippets on this page are ready to paste.

Is Bugsy free?

The server is open source under the MIT license, so running it is free. It needs credentials (API_KEY) for the service it connects to, which may require a paid account.

Is Bugsy actively maintained?

The most recent commit was on Aug 31, 2026. The latest release is v1.5.18, published Aug 31, 2026. appsgit only lists MCP servers with a commit in the last six months.