# Bugsy (MCP server)

> Bugsy is an MCP server that adds developer tools to AI assistants such as Claude Desktop, Claude Code and Cursor. Automatic security vulnerability remediation for your code. It has 68 GitHub stars, is released under the MIT license and runs locally with npx -y mobbdev.

Bugsy is a command-line interface (CLI) tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identify and fix security vulnerabilities in their code.

## Key facts

| Fact | Value |
|---|---|
| Repository | https://github.com/mobb-dev/bugsy |
| GitHub stars | 68 |
| License | MIT |
| Language | TypeScript |
| Transport | stdio |
| Packages | npm: mobbdev |
| Remote URL | none |
| Needs API key | yes |
| Official | yes |
| Works with | Claude Desktop, Claude Code, Cursor, VS Code |
| Category | Developer tools |
| Latest release | v1.5.18 (Aug 31, 2026) |
| Last commit | Aug 31, 2026 |

## Install

### Claude Desktop (claude_desktop_config.json)

```json
{
  "mcpServers": {
    "bugsy": {
      "command": "npx",
      "args": [
        "-y",
        "mobbdev"
      ],
      "env": {
        "API_KEY": "your-value"
      }
    }
  }
}
```

Settings > Developer > Edit Config. macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\. Restart Claude Desktop afterwards.

### Claude Code

```sh
claude mcp add --env API_KEY=your-value --transport stdio bugsy -- npx -y mobbdev
```

### Cursor (.cursor/mcp.json)

```json
{
  "mcpServers": {
    "bugsy": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mobbdev"
      ],
      "env": {
        "API_KEY": "your-value"
      }
    }
  }
}
```

Project file; use ~/.cursor/mcp.json to enable it in every project.

### VS Code (.vscode/mcp.json)

```json
{
  "inputs": [
    {
      "type": "promptString",
      "id": "api_key",
      "description": "API_KEY",
      "password": true
    }
  ],
  "servers": {
    "bugsy": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mobbdev"
      ],
      "env": {
        "API_KEY": "${input:api_key}"
      }
    }
  }
}
```

Config formats checked against the official docs on 2026-10-07.

## Environment variables

- `API_KEY` (secret): Shown in the README's example configuration.
- `API_URL`: Shown in the README's example configuration.
- `MVS_AUTO_FIX`: Shown in the README's example configuration.

## Similar MCP servers

- [flightclaw](https://appsgit.com/mcp-servers/flightclaw): Search ~300 airlines and book flights with a checkout link. (77 stars, MIT, official)
- [SAS Viya](https://appsgit.com/mcp-servers/sas-viya): Execute SAS code and query Compute, CAS, and model APIs on SAS Viya via OAuth 2.0. (66 stars, Apache-2.0, official)
- [Keboola MCP Server](https://appsgit.com/mcp-servers/keboola-mcp-server): Connect your AI assistants to Keboola and expose your data, transformations, SQL queries, ... (85 stars, MIT, official)
- [Preflight](https://appsgit.com/mcp-servers/preflight): New Relic MCP server for observing AI coding assistants (Claude Code, Cursor, Copilot, etc.). (65 stars, Apache-2.0, official)
- [WTFM](https://appsgit.com/mcp-servers/wtfm): Your coding agent writes the user docs from your codebase, screenshots included. (95 stars, Apache-2.0, official)
- [MCP Devkit Server](https://appsgit.com/mcp-servers/mcp-devkit-server): Provides AI assistants with direct access to Mapbox developer APIs and documentation. (61 stars, MIT, official, needs API key)

---

Canonical page: https://appsgit.com/mcp-servers/bugsy
Source: appsgit (https://appsgit.com), the app store for github. Data from the GitHub API, refreshed daily.
Machine access: JSON API https://appsgit.com/api/v1/apps (OpenAPI: https://appsgit.com/openapi.json), MCP server https://mcp.appsgit.com/mcp, full index https://appsgit.com/llms-full.txt.