MCP server

AppSec Toolbox MCP

io.github.ai-ronin-systems/appsec-toolbox-mcp

Checked 26 Oct 2026, 08:31 UTC · Checked against OSV.dev for malware and vulnerabilities; never run by us

Passive AppSec scanners as eight parameterless MCP tools; the audited repository is data.

Runs on your computer

Website Source

At a glance

Type: MCP server
Publisher: Not verified
Status: Runs on your computer
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
Last checked: 26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to Cursor Add to VS Code VS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add appsec-toolbox-mcp -- docker run -i --rm ghcr.io/ai-ronin-systems/appsec-toolbox-mcp:0.3.0

Claude Desktop

{"mcpServers":{"appsec-toolbox-mcp":{"command":"docker","args":["run","-i","--rm","ghcr.io/ai-ronin-systems/appsec-toolbox-mcp:0.3.0"]}}}

Codex (config.toml)

[mcp_servers.appsec-toolbox-mcp]
command = "docker"
args = ["run","-i","--rm","ghcr.io/ai-ronin-systems/appsec-toolbox-mcp:0.3.0"]

Gemini CLI

{"mcpServers":{"appsec-toolbox-mcp":{"command":"docker","args":["run","-i","--rm","ghcr.io/ai-ronin-systems/appsec-toolbox-mcp:0.3.0"]}}}

Cursor

{"mcpServers":{"appsec-toolbox-mcp":{"command":"docker","args":["run","-i","--rm","ghcr.io/ai-ronin-systems/appsec-toolbox-mcp:0.3.0"]}}}

VS Code

{"servers":{"appsec-toolbox-mcp":{"type":"stdio","command":"docker","args":["run","-i","--rm","ghcr.io/ai-ronin-systems/appsec-toolbox-mcp:0.3.0"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

Related MCP servers

ShipLatch
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
Namespace guard for merged toolboxes
Pre-connection collision audit for merged MCP toolboxes, trust-graded, with signed routing receipts.
searchcode
Code intelligence for LLMs. Analyze, search, and retrieve code from any public git repository.
SiteCheck Web Intel
129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402
AgentAegis
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
nittim
Production-safety audits for AI-generated code, with a fix for every finding.
Pageaudit
Technical SEO, passive security and page-delivery audits with evidence and suggested fixes.
Perimeter Watch
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.ai-ronin-systems/appsec-toolbox-mcp.svg)](https://aptlynx.net/servers/io.github.ai-ronin-systems/appsec-toolbox-mcp)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents