Security MCP
Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses
Connector by pratham-jain33 · GitHub account verified by the MCP Registry
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/pratham-jain33-security-mcp
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 3 read · 0 write · 0 deleteRead-only
- Secrets
- None asked for
- Install scripts
- Not scanned yet
- Runs as
- Python package
Tools by what they do 3
Read from the source code; the running server may list different tools.
Read 3 · Look things up without changing anything.
audit_sitecheck_cvelookup_attack
Tools (3)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
audit_siteAudits a website's security posture and returns a grade from A+ to F. Checks HTTP security headers (HSTS, CSP, X-Frame-Options and more), the SSL/TLS certificate (valid, issuer, days until expiry), and DNS email-auth records (SPF, DMARC, DKIM). Every finding comes with a plain-English explanation. Use when the user asks how secure a site is, or wants a quick security review of their own website. Takes a domain like "example.com". Defensive audit only: makes normal HTTPS and DNS requests, no scanning or probing beyond that.
check_cveChecks whether a vulnerability is actively exploited right now and how likely it is to be exploited soon. Looks the CVE up in CISA's Known Exploited Vulnerabilities catalog (confirmed real-world exploitation, free public feed) and gets its EPSS score from FIRST (probability of exploitation in the next 30 days, free API). No keys or signup needed. Use when the user asks if a CVE is dangerous, being exploited, or worth patching first. Takes a CVE ID like "CVE-2021-44228". Returns a plain-English verdict, never a traceback.
lookup_attackExplains a cyber attack technique in plain English. Give a MITRE ATT&CK technique ID like "T1566" or a keyword like "phishing", and get back what the technique is, how attackers use it, how to spot it, and how to defend. Data comes from the public MITRE ATT&CK catalog bundled with this server: no API key, no network needed. Use when the user asks how an attack works, what a technique ID means, or how to defend against something. Defensive knowledge only: explains attacks so people can stop them, never how to carry them out.
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Weekly downloads
- 35
- Last commit
- Oct 11, 2026 (17 days ago)
- Last release
- Sep 30, 2026 (28 days ago)
- Last package publish
- Sep 29, 2026 (29 days ago)
From GitHub (fetched Oct 24, 2026) and the package registry.
Details
- Registry name
io.github.pratham-jain33/security-mcp- Version
- 0.1.1
- Auth
- No auth
- Packages
- pypi security-mcp
- License
- MIT
- Repository
- github.com/pratham-jain33/security-mcp
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
More from pratham-jain33
Cite this page
Security MCP. Agent Mart. https://agentmart.dev/connectors/pratham-jain33-security-mcp (last updated 2026-10-24)