Bright's Model Context Protocol (MCP) integration brings AI-powered application security testing directly into your development workflow. Your AI coding assistant can discover API endpoints, run…
neuralegion-mcp is an MCP project maintained in the neuralegion/mcp repository. The maintainer describes its purpose as “Bright's Model Context Protocol (MCP) integration brings AI-powered application security testing directly into your development workflow. Your AI coding assistant can discover API endpoints, run…”. Read the project documentation for the complete scope.
The maintainer’s configuration uses https://app.brightsec.com/mcp. Check the project’s account and authentication instructions when adding the endpoint to your client.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| listProjects | List all projects accessible to your API key. Use this to find project IDs needed for other operations. |
| runDiscovery | Discover API endpoints using crawling (crawlerUrls) or API definitions (fileId from uploadApiDefinition). Before running, check if the project already has… |
| getDiscoveryStatus | Get the current status of a discovery run. |
| listDiscoveries | List discovery history for a project. View past discovery runs or monitor ongoing endpoint discovery. |
| uploadApiDefinition | Upload an API definition file (OpenAPI/Swagger) by URL or content. Returns a file ID to reference in discovery runs. |
| listEntrypoints | List discovered API endpoints/URLs for a project. Use this to select entrypoints for scans or evaluate attack surface coverage. Supports filtering by HTTP… |
| getEntrypoint | Get detailed information about a specific entrypoint by ID, including headers, body, and configuration. |
| addEntrypoint | Add a new entrypoint to a project. Entrypoints define HTTP requests (method, URL, headers, body) that can be used for security scanning. |
| editEntrypoint | Update an existing entrypoint. Modify the HTTP request definition, authentication, or repeater settings. |
| runScan | Start a security scan against selected entrypoints. Supports targeting specific entrypoints by ID or by status (e.g., new, changed, vulnerable). Configure… |
| getScanStatus | Get the current status of a running scan. |
| listScans | List scan history for a project. View past scan results or check the status of multiple ongoing scans. |
| listTests | List all available security tests (e.g., SQL injection, XSS, CSRF) that can be included in scans. |
| listIssues | List security vulnerabilities found for a project. Filter by severity (Low, Medium, High, Critical), status (new, recurring, resolved, ignored), or entrypoint. |
| listAuths | List authentication configurations for a project. Use before scanning protected endpoints that require authentication. |
| getAuth | Get detailed information about a specific authentication configuration. |
| addAuth | Create a new authentication configuration. Supports multiple auth types: static headers, OAuth 2.0/OIDC, multi-step HTTP flows, NTLM, browser-based login… |
| editAuth | Update an existing authentication configuration. |
| createRepeater | Create a repeater for accessing private/local targets. After creation, run the Bright CLI to start the repeater and establish the connection. |
| listRepeaters | List repeaters and their connection status. Verify a repeater is connected before scanning non-public applications. |
{
"mcpServers": {
"brightsec": {
"url": "https://app.brightsec.com/mcp",
"headers": {
"Authorization": "YOUR_AUTHORIZATION"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
Queries the NIST National Vulnerability Database (NVD) via its API.
Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.
Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.
A comprehensive Model Context Protocol (MCP) server for ABP.IO framework with 48+ tools for application development, UI generation, and management