Cybersec-toolkit MCP Server

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

Local serverstdio

What is the Cybersec-toolkit MCP Server?

Cybersec-toolkit is an MCP integration. Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

Packages and local setup

The published oci package is ghcr.io/26zl/cybersec-toolkit:1.3.0. Its declared MCP transport is stdio.

The package declares CYBERSEC_MCP_ALLOW_EXTERNAL: Set to 1 only for explicitly authorized external scopes.; CYBERSEC_MCP_ALLOW_SCRIPTS: Set to 1 to enable unsandboxed run_script execution..

This package has launch arguments in its registry record. Use the maintainer’s configuration for those arguments rather than launching it with only the package name.

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository. This profile uses version 1.3.0 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related developer tools MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
CYBERSEC_MCP_ALLOW_EXTERNALSet to 1 only for explicitly authorized external scopes.Optional
CYBERSEC_MCP_ALLOW_SCRIPTSSet to 1 to enable unsandboxed run_script execution.Optional