{"name":"io.github.pratham-jain33/security-mcp","slug":"pratham-jain33-security-mcp","title":"Security MCP","description":"Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses","url":"https://mcp.market/server/pratham-jain33-security-mcp","rating":null,"grade":"A","score":92,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":30,"stars":0,"forks":0,"downloads_week":934,"last_push_at":"2026-09-30T04:30:50.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/pratham-jain33/security-mcp","website":null,"version":"0.1.1","remotes":[],"packages":[{"registryType":"pypi","identifier":"security-mcp","version":"0.1.1","transport":{"type":"stdio"}}],"tools":[{"name":"audit_site","description":"Audits a website's security posture and returns a grade from A+ to F. Checks HTTP security headers (HSTS, CSP, X-Frame-Options and more), the SSL/TLS certificate (valid, issuer, days until expiry), and DNS email-auth records (SPF, DMARC, DKIM). Every finding comes with a plain-English explanation. Use when the user asks how secure a site is, or wants a quick security review of their own website. T","write_action":false,"price_micros":0,"input_schema":null},{"name":"check_cve","description":"Checks whether a vulnerability is actively exploited right now and how likely it is to be exploited soon. Looks the CVE up in CISA's Known Exploited Vulnerabilities catalog (confirmed real-world exploitation, free public feed) and gets its EPSS score from FIRST (probability of exploitation in the next 30 days, free API). No keys or signup needed. Use when the user asks if a CVE is dangerous, being","write_action":false,"price_micros":0,"input_schema":null},{"name":"lookup_attack","description":"Explains a cyber attack technique in plain English. Give a MITRE ATT&CK technique ID like \"T1566\" or a keyword like \"phishing\", and get back what the technique is, how attackers use it, how to spot it, and how to defend. Data comes from the public MITRE ATT&CK catalog bundled with this server: no API key, no network needed. Use when the user asks how an attack works, what a technique ID means, or","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":92,"grade":"A","scanned_at":"2026-10-01T06:33:45.851Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-01T06:33:45.773Z","components":{"code":{"score":25,"max":25,"notes":["4 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"pypi","identifier":"security-mcp","version":"0.1.1","found":true,"weeklyDownloads":934,"license":"MIT","dependencyCount":3,"publishedAt":"2026-09-29T13:49:15.428771Z"}],"repo":{"found":true,"owner":"pratham-jain33","repo":"security-mcp","archived":false,"pushedAt":"2026-09-30T04:30:50Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/176138017?v=4","ownerCreatedAt":"2024-07-20T11:37:36Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/176138017?v=4&s=128","source":"github"},"presence":{"stars":0,"forks":0,"downloadsWeek":934,"license":"MIT","lastPushAt":"2026-09-30T04:30:50.000Z","score":30}}}},"grade_history":[],"reviews":[]}