MCP server

Sectora

io.github.megabrainee/sectora

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.

Website Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Working at last check

Tools

14

Token cost

About 2,029 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http sectora https://mcp.sectora.io/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.sectora]
url = "https://mcp.sectora.io/mcp"

Gemini CLI

{"mcpServers":{"sectora":{"httpUrl":"https://mcp.sectora.io/mcp"}}}

Cursor

{"mcpServers":{"sectora":{"url":"https://mcp.sectora.io/mcp"}}}

VS Code

{"servers":{"sectora":{"type":"http","url":"https://mcp.sectora.io/mcp"}}}

Antigravity

agy mcp add sectora https://mcp.sectora.io/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"sectora","server_url":"https://mcp.sectora.io/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"sectora","server_url":"https://mcp.sectora.io/mcp"}

Tools

• assess_dependency ~209 tokens
  Check a single package@version for known vulnerabilities via OSV.dev (npm, PyPI, Go, Maven, NuGet, RubyGems, Packagist, crates.io, etc.). Returns advisories with CVE IDs, severity, fixed versions, and references. Free tier eligible.
• assess_tech_risk ~143 tokens
  Assess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.
• get_kev_recent ~87 tokens
  Get recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.
• get_my_posture ~148 tokens
  Get Shield WAF posture score and breakdown for a domain registered under this account. Returns 0-100 score, letter grade, per-component breakdown (origin lock, virtual patching, TLS, etc.), and edge_health (whether Shield is actually intercepting traffic). Requires API key.
• get_scan ~105 tokens
  Get a scan with all its findings (full detail: title, description, evidence, remediation, CVSS). Requires API key.
• get_threat_stats ~72 tokens
  Get statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.
• get_trending_cves ~92 tokens
  Get currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.
• get_weaponization_score ~123 tokens
  Get the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.
• list_my_findings ~223 tokens
  List the API key owner's open security findings across all scans. Use this to answer "what's my current exposure?" Filter by severity, status, or domain. Returns finding summaries; call get_scan for full detail. Requires API key.
• list_my_scans ~111 tokens
  List the API key owner's recent scans with summary counts. Requires API key.
• lookup_cve ~127 tokens
  Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.
• lookup_ip_reputation ~132 tokens
  Look up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Accepts IPv4 or IPv6 (the Shield network sees both).
• scan_url ~277 tokens
  Kick off a DAST security scan against a public URL the API key owner controls. Two-step flow: first call returns a preview (target, profile, ETA, quota remaining); confirm by calling again with confirm:true to actually start the scan. Returns scan_id; poll status with get_scan. Domain must be verifi
• search_cves ~180 tokens
  Search for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.

Browse

• GitHub tools
• IPv4 tools
• Company data
• GitHub and code hosting
• Databases
• Security scanning

Related MCP servers

• PG1 Sovereign Threat Intelligence
  Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.
• Craftedtrust Shield
  Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.
• ContrastAPI
  55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
• AgentAegis
  Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
• SiteCheck Web Intel
  129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402
• Polyform
  Pay-per-call data APIs for AI agents. USDC on Base via x402. 33 tools, no signup.
• OT Intel API
  OT/ICS threat intel for AI agents: 40 tools, pay per call in USDC on Base via x402.
• Tooloracle Cybershield
  CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.megabrainee/sectora.svg)](https://aptlynx.net/servers/io.github.megabrainee/sectora)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents