LocalFree server, account needed

Secobserve MCP server

nh4ttruong/secobserve-mcp

SecObserve vulnerability and license management: triage observations, manage products and rules, import scan reports and SBOMs, run scans and generate VEX.

1 GitHub stars
Source code

Install Secobserve in Claude Code

PyPI (uv)

Claude Code
claude mcp add secobserve -e SECOBSERVE_BASE_URL=... -e SECOBSERVE_API_TOKEN=... -- uvx secobserve-mcp
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "secobserve": {
      "command": "uvx",
      "args": [
        "secobserve-mcp"
      ],
      "env": {
        "SECOBSERVE_BASE_URL": "...",
        "SECOBSERVE_API_TOKEN": "..."
      }
    }
  }
}

Docker

Claude Code
claude mcp add secobserve -e SECOBSERVE_BASE_URL=... -e SECOBSERVE_API_TOKEN=... -- docker run -i --rm -e SECOBSERVE_BASE_URL -e SECOBSERVE_API_TOKEN ghcr.io/nh4ttruong/secobserve-mcp:1.0.0
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "secobserve": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "SECOBSERVE_BASE_URL",
        "-e",
        "SECOBSERVE_API_TOKEN",
        "ghcr.io/nh4ttruong/secobserve-mcp:1.0.0"
      ],
      "env": {
        "SECOBSERVE_BASE_URL": "...",
        "SECOBSERVE_API_TOKEN": "..."
      }
    }
  }
}

Replace each ... with your own value.

Frequently asked questions

What does the Secobserve MCP server do?

SecObserve vulnerability and license management: triage observations, manage products and rules, import scan reports and SBOMs, run scans and generate VEX.

Is the Secobserve MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does Secobserve run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Secobserve to Claude Code?

Run: claude mcp add secobserve -e SECOBSERVE_BASE_URL=... -e SECOBSERVE_API_TOKEN=... -- uvx secobserve-mcp

More security & identity MCP servers

View all

Securecode

1

juanisidoro/securecode-mcp

Encrypted secrets vault for Claude Code that injects secrets into local files so the AI never sees raw values, with audit logs and per-model access rules.

LocalAccount neededTypeScript

Regulated AI Compliance

1

uchit/mcp-regulated-ai-compliance

Regulated-industry AI compliance knowledge: control lookup, use-case classification and crosswalks for EU AI Act, NIST AI RMF, ISO 42001, APRA, GDPR and more.

LocalFreeTypeScript

Umbra

1

elberacasa/umbra

Trust scores and guardrails for AI-generated code: static security rules, Docker-verified build/boot checks and receipts that catch agents lying about tests.

LocalFreeTypeScript

Qiniso

1

qinisolabs/qiniso

Verify IBAN, VAT, VIN, barcodes, national and tax IDs, crypto addresses, phone numbers, dates and holidays against checksums and curated data.

Local + RemoteAccount neededTypeScript

Unphurl

1

123Ergo/unphurl-mcp

URL security signals: redirects, brand impersonation, domain age, SSL validation, parked-domain detection, structural analysis and DNS enrichment.

Local + RemoteAccount neededTypeScript

PromptSpeak Governance

1

chrbailey/promptspeak-mcp-server

Pre-execution governance for agent tool calls: risk classification, behavioral drift detection, a hold queue for dangerous operations and an audit trail.

LocalFreeTypeScript