Install Security in Claude Code
This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:
claude mcp add security -- <command to start the server>Frequently asked questions
What does the Security MCP server do?
Query the ORKL API to fetch threat reports, analyze threat actors and retrieve intelligence sources.
Is the Security MCP server free?
The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.
Does Security run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add Security to Claude Code?
Follow the install steps in the project's README at https://github.com/fr0gger/MCP_Security, then register it with "claude mcp add".
More security & identity MCP servers
View allDatabase Sentinel
Farenhytee/database-sentinel
Read-only security audit for Supabase. Four tools surface RLS gaps, permissive policies, exposed functions and grants; an audit prompt returns scored findings with fix SQL.
Volatility
Gaffx/volatility-mcp
Memory forensics with Volatility 3, exposing plugins such as pslist and netscan through REST APIs.
Bastion
Gowthaman90/mcp-bastion
Security proxy for MCP servers: tool-definition pinning, tool-poisoning and exfiltration detection, injection blocking, secret redaction and audit trails.
Roadrecon
atomicchonk/roadrecon_mcp_server
Analyze ROADrecon gather results from Azure tenant enumeration.
CodeInspectus
Synvoya/codeinspectus
Local security scanner for AI-generated JS/TS that combines Opengrep, Gitleaks and Trivy with checks for exposed secrets, Supabase RLS and prompt injection.
CyberChef
doublegate/CyberChef-MCP
GCHQ CyberChef's encryption, encoding, compression and forensics operations, plus analysis tools such as hash identification, cipher solving and RSA attacks.