Cybersec Toolkit MCP server

by 26zl·io.github.26zl/cybersec-toolkit·v1.2.1

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

A88/100grade A

What users say

No reviews yet

Safety scan

A88/100

Adoption

Growing

57 stars

Reviews

Nobody has reviewed Cybersec Toolkit yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

–Code scanpackage could not be scannedn/a
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

claude mcp add cybersec-toolkit -- docker run -i --rm ghcr.io/26zl/cybersec-toolkit:1.2.1

Is Cybersec Toolkit MCP server safe?: Yes, by our scan: it is graded A (88/100). Read the Cybersec Toolkit safety report
How do I install Cybersec Toolkit?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Cybersec Toolkit need an API key?: No secret keys are declared. It reads 2 settings from the environment.
Is Cybersec Toolkit maintained?: The last commit was 2 days ago (2026-09-18). The latest release is v1.2.1.
What can I use instead of Cybersec Toolkit?: Servers from other publishers that do the same job: Reversecore MCP server, MCPProxy MCP server and npm Registry MCP Server. Compare all Cybersec Toolkit alternatives.

Same job from other publishers: the closest match first, then the best rated.

Reversecore MCP
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
not reviewed
Established
B
MCPProxy
Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings
not reviewed
Growing
B
npm Registry MCP Server
npm registry MCP server — package intelligence, security audits, dependency analysis
More from YawLabs →
not reviewed
Growing
B
VMware NSX Security
VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.
not reviewed
Growing
A
Trent
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
not reviewed
Growing
A

Local package. It runs on your machine, not through the gateway.

CYBERSEC_MCP_ALLOW_EXTERNALSet to 1 only for explicitly authorized external scopes.
CYBERSEC_MCP_ALLOW_SCRIPTSSet to 1 to enable unsandboxed run_script execution.

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/26zl-cybersec-toolkit.svg)](https://mcp.market/server/26zl-cybersec-toolkit)