Endor Labs

The Endor Labs MCP server integrates security scanning directly into IDEs like Cursor and Visual Studio Code, enabling real-time vulnerability detection and security analysis as developers write code. Built around the endorctl CLI tool, it provides four core capabilities: dependency vulnerability checking, vulnerability database lookups, resource context retrieval, and comprehensive security scans that detect open source risks, common security issues, and exposed credentials in Git repositories. The implementation supports configurable language-specific scanning, environment variable customization, and selective tool management, making it valuable for shift-left security practices where developers need immediate feedback on security issues during development rather than waiting for CI/CD pipeline results.