Installation

The package installs the two commands of the product, on the server that will host them: security-review-mcp (MCP server, used by the agents) and security-review-controller (controller: web interface, REST API, database and administration). See two services, two roles.

Python 3.14 or later. The project targets the mcp SDK 2.x (MCPServer); with an internal mirror limited to mcp 1.x, the mcp.server.mcpserver import will not work.

From PyPI

pip install security-review-mcp
pip install "security-review-mcp[postgres]"   # with the PostgreSQL driver

The published package contains the web interface already built.

Docker image

To run the server in containers, pull the published image (the -pg variant contains the PostgreSQL driver), or build it from the repository:

docker pull ghcr.io/cyr-ius/security-review-mcp:latest-pg    # or docker.io/cyrius44/security-review-mcp
docker build -t security-review-mcp:pg --build-arg EXTRAS=postgres .

The same image runs the MCP server and the controller: see Docker.

Other cases

Installation from the sources or without Internet access: see Installation: other cases.

Next step: deploy the server.