Secobserve MCP server

Read from the package source without running it. The installed server may list more.

• _print_config

  Print a registration snippet for one MCP client.

• secobserve_api_import

  Pull findings into SecObserve from an upstream API it already has credentials for.

• secobserve_approve_observation_log
• secobserve_assess_observation

  Record a human assessment on one observation: change its severity, status, priority or VEX justification.

• secobserve_bulk_assess_observations

  Apply one identical assessment to up to 250 observations by id.

• secobserve_call_action
• secobserve_createwrite action

  Create a record in SecObserve (product, branch, service, rule, policy, member, ...).

• secobserve_deletewrite action

  Permanently delete a SecObserve record. Deletion cascades and cannot be undone.

• secobserve_describe_resource

  Read the deployed instance's OpenAPI schema for one resource: filters, fields, enums.

• secobserve_get

  Fetch one SecObserve record by id, with all its fields.

• secobserve_list
• secobserve_list_resources

  List every SecObserve resource this server can reach, with its verbs and named actions.

• secobserve_product_metrics
• secobserve_run_periodic_taskwrite action

  Trigger one of SecObserve's scheduled background jobs now, or list which jobs exist.

• secobserve_status

  Read instance-level facts: version, health, public settings, queue statistics, PURL types.

• secobserve_trigger_scanwrite action

  Run SecObserve's own OSV or VulnerableCode scan over a product's known components.

• secobserve_updatewrite action

  Change fields of an existing SecObserve record.

• secobserve_upload_filewrite action
• secobserve_vex_document

• Code scan24 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 8 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Safety score

83/100

higher than 68% of 915 Security servers

Tools

19

the typical Security server has 6

Tools that change things

32%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

1

more than 60% of 587 Security servers

Downloads a week

87

more than 60% of 248 Security servers with a package

Secobserve: common questions

Is Secobserve MCP server safe?

Mostly: it is graded B (83/100). Read the Secobserve safety report

How do I install Secobserve?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Secobserve need an API key?

Yes. The registry entry asks for SECOBSERVE_API_TOKEN.

Is Secobserve maintained?

The last commit was 40 days ago (2026-09-25). The latest release is v1.0.0.

What can I use instead of Secobserve?

Servers from other publishers that do the same job: OpenQR MCP server, MCP ZAP Server MCP server and Sn1per MCP Server: pentest, recon and attack surface scanning. Compare all Secobserve alternatives.

How does Secobserve compare with other Security MCP servers?

safety score 83/100 (higher than 68% of 915 Security servers); tools 19 (the typical Security server has 6); tools that change things 32% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.