How do I install the firebreak mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

It reads `FIREBREAK_HOST` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Firebreak MCP Server

<strong>The security MCP server that turns your AI into a penetration tester.</strong>

Remote serverstreamable-httpTypeScript

What is the Firebreak MCP Server?

The security MCP server that turns your AI into a penetration tester.

What you get

MCP-native — — not a CLI wrapper. Built from the ground up for AI tool calling
VCVD — — 47 vulnerability patterns specific to AI-generated code that traditional scanners miss
Proof over theory — — every finding includes the actual HTTP request/response that proves the vulnerability
Safe by design — — rate limited, scope-locked, non-destructive. Can't accidentally DROP your database

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
firebreak_best_practice	Security best practices for a topic
firebreak_check_pattern	Scan code for insecure patterns
firebreak_explain_vuln	Explain a vulnerability type
firebreak_security_checklist	Generate a security checklist
firebreak_owasp_check	Map a finding to OWASP Top 10
firebreak_analyze_rls	Analyze SQL for RLS policy issues
firebreak_scan_quick	Fast scan, critical+high only (2-3 min)
firebreak_scan_full	Full pen test (black/gray/white box)
firebreak_scan_target	Focused scan on one area
firebreak_scan_status	Check progress of a running scan
firebreak_scan_stop	Stop a scan, keep partial results
firebreak_results	Scan summary with security score (A-F)
firebreak_finding_detail	Full evidence for a specific finding
firebreak_finding_fix	Generate fix code for a finding
firebreak_replay	Re-test a finding to verify it's fixed
firebreak_compare	Diff two scans (fixed / new / unchanged)
firebreak_scan_history	List previous scans for a target
firebreak_attack_chain	Multi-step attack chains
firebreak_report_generate	Export report (JSON, Markdown, HTML)
firebreak_report_executive	Non-technical executive summary

How to install the Firebreak MCP Server

{
  "mcpServers": {
    "firebreak": {
      "url": "http://localhost:9090/mcp"
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Example prompts to try

“Use Firebreak to firebreak best practice.”
“Use Firebreak to firebreak check pattern.”
“Use Firebreak to firebreak explain vuln.”

Frequently asked questions

<strong>The security MCP server that turns your AI into a penetration tester.</strong> Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.