How do I connect Pci Dss MCP Server to Claude?

The listing records `docker run -i --rm --mount type=bind,src=/Users/you/go/src,dst=/Users/you/go/src,readonly ghcr.io/shyshlakov/pci-dss-mcp:v0.6.2` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names Claude Desktop, Claude Code, Cursor as compatible clients.

Is Pci Dss MCP Server free?

The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.

What can Pci Dss MCP Server do?

Pci Dss MCP Server documents 14 tools to the agent, including audit_log_coverage, check_auth_strength, check_data_retention. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.

Pci Dss MCP

Unclaimed

by shyshlakov

Narrow-and-deep PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server

Install

docker run -i --rm --mount type=bind,src=/Users/you/go/src,dst=/Users/you/go/src,readonly ghcr.io/shyshlakov/pci-dss-mcp:v0.6.2

Set up this server

Compare servers My Stack

This server needs project-specific setup. Follow the project instructions; no reusable public launch command is available yet.

Project instructions

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

14 of 14 tools

Documented tools (14)

From project documentation. A server handshake does not verify each tool’s description or behavior.

audit_log_coverage

Missing audit logs on payment flows (10.2.1)

check_auth_strength

Hardcoded passwords, weak policy, missing MFA, webhook signatures (8.3.1, 8.3.6, 8.4.2, 8.6.2)

check_data_retention

Missing TTL, sensitive storage, missing zeroing (3.2.1, 3.3.1)

check_dependencies

Vulnerable Go dependencies via OSV (6.3.3); govulncheck-style privacy: no module names sent to OSV.dev. See docs/checkdependencies.md. Also covers updatevulnerabilitydb.

check_encryption

Weak hashing, hardcoded keys, plain HTTP (4.2.1, 6.2.4)

check_error_handling

Error responses leaking sensitive context (6.2.4)

check_payment_page_scripts

Missing CSP/SRI/nonce on payment pages (6.4.3, 11.6.1)

check_secrets_in_configs

Credentials in config files (8.6.2)

check_tls_config

Insecure TLS configs (4.2.1)

explain_requirement

Look up a PCI DSS v4.0.1 requirement by ID

generate_compliance_report

Raw requirement pass/fail report (orchestrator over all scanners)

generate_sbom

CycloneDX 1.6 SBOM from go.mod/go.sum (6.3.2)

scan_pan_data

PAN/SAD storage and logging (3.3.1, 3.4.1, 3.5.1)

triage_findings

All scanners + AI classification + file:line context in one call

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about Pci Dss MCP Server

How do I connect Pci Dss MCP Server to Claude?: The listing records `docker run -i --rm --mount type=bind,src=/Users/you/go/src,dst=/Users/you/go/src,readonly ghcr.io/shyshlakov/pci-dss-mcp:v0.6.2` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names Claude Desktop, Claude Code, Cursor as compatible clients.
Is Pci Dss MCP Server free?: The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can Pci Dss MCP Server do?: Pci Dss MCP Server documents 14 tools to the agent, including audit_log_coverage, check_auth_strength, check_data_retention. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.