MCP.Market

SecureNow MCP server

online · 100% uptime
by securenow.ai·ai.securenow/securenow·v8.12.4

Production security for Node.js apps: investigate live attacks, block IPs, tune detections.

C65/100grade C
What users say
No reviews yet
Be the first
Safety scan
C65/100

full report

Adoption
Growing

0 stars252 downloads/wk

Reviews

Write one

Nobody has reviewed SecureNow yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

SecureNow tools

Tool list not cached yet. `describe` through the gateway fetches it live.

Public scan report

scanner v0.1.10 · 2026-10-27 · same rubric, same numbers if you re-run it

1 high1 medium
  • Code scan71 source files scanned8/25
  • Live reliabilityremote reachable in 475ms (auth required)20/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityOAuth resource metadata advertised on 40115/15
  • Maintenancelast push 196 days ago4/15
  • Maintainer identitynamespace and repository owner differ; GitHub account older than a year; website matches verified namespace8/10

Findings (2)

  • highShell command built from a string (injection risk)exec.shell-concat
    firewall-iptables.js: …─── function iptablesSetup() { try { exec(`iptables -N ${CHAIN_NAME}`); } catch (_) {} // chain m…
  • mediumeval / new Function usedexec.eval
    nextjs.js: … 'function' ? __non_webpack_require__ : eval('require'); return nodeRequire(name); …
Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How SecureNow compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
65/100
higher than 20% of 915 Security servers
Uptime
100%
of our recent checks; the typical remote Security server answers 100%
Response time
1,243 ms
faster than 5% of 547 Security servers
Downloads a week
252
more than 77% of 248 Security servers with a package

Install SecureNow in Claude Code, Cursor or VS Code

claude mcp add --transport http securenow https://api.securenow.ai/mcp
Add to Cursor

What the publisher says

From the SecureNow repository's README, as published. We do not edit it. Read it on GitHub

SecureNow

OpenTelemetry instrumentation for Node.js and Next.js applications - send traces and logs to SigNoz or any OTLP-compatible backend.

Official npm package: securenow

🚀 Quick Start

For Next.js Applications

The easiest way to add observability to Next.js!

# Just install - setup is automatic!
npm install securenow

🎉 The installer will automatically:

  • Detect your Next.js project
  • Create instrumentation.ts (or .js)
  • Create .env.local template

Just answer "Y" when prompted!

Then configure your .env.local:

SECURENOW_APPID=my-nextjs-app
SECURENOW_INSTANCE=http://your-signoz-server:4318

Alternative: Use the CLI command

npx securenow init

Done! 🎉 See Next.js Complete Guide for details.

For Node.js Applications (Express, Fastify, NestJS, etc.)

Tracing Only

# 1. Install
npm install securenow

# 2. Set environment variables
export SECURENOW_APPID=my-app
export SECURENOW_INSTANCE=http://your-signoz-server:4318

# 3. Run with preload
NODE_OPTIONS="-r securenow/register" node app.js
# or
NODE_OPTIONS="-r securenow/register" npm start

Tracing + Logging (Recommended)

# 1. Install
npm install securenow

# 2. Set environment variables
export SECURENOW_APPID=my-app
export SECURENOW_INSTANCE=http://your-signoz-server:4318
export SECURENOW_LOGGING_ENABLED=1

# 3. Run with preload (adds logging)
NODE_OPTIONS="-r securenow/register -r securenow/console-instrumentation" node app.js

# Now all console.log/info/warn/error automatically go to SigNoz!

📦 Installation

npm install securenow
# or
yarn add securenow
# or
pnpm add securenow

⚙️ Configuration

Environment Variables

# Required: Your application identifier
SECURENOW_APPID=my-app-name

# Optional: Your SigNoz/OTLP collector endpoint
# Default: https://freetrial.securenow.ai:4318
SECURENOW_INSTANCE=http://your-signoz-server:4318

# Optional: Enable Logging
SECURENOW_LOGGING_ENABLED=1                 # Enable automatic log collection

# Optional: Additional configuration
SECURENOW_NO_UUID=1                         # Don't append UUID to service name
OTEL_LOG_LEVEL=info                         # debug|info|warn|error
SECURENOW_DISABLE_INSTRUMENTATIONS=fs,dns   # Disable specific instrumentations
OTEL_EXPORTER_OTLP_HEADERS="x-api-key=..."  # Authentication headers

# Optional: Request body capture (for debugging)
SECURENOW_CAPTURE_BODY=1                    # Capture request bodies in traces
SECURENOW_MAX_BODY_SIZE=10240               # Max body size in bytes
SECURENOW_SENSITIVE_FIELDS="field1,field2"  # Additional fields to redact

Legacy Environment Variables (still supported)

export securenow=<API-KEY>
export securenow_instance='http://<dedicated_instance>:4318'

🎯 Supported Frameworks & Libraries

SecureNow automatically instruments:

Web Frameworks

  • ✅ Next.js (App Router & Pages Router)
  • ✅ Express.js
  • ✅ Fastify
  • ✅ NestJS
  • ✅ Koa
  • ✅ Hapi

Databases

  • ✅ PostgreSQL
  • ✅ MySQL / MySQL2
  • ✅ MongoDB
  • ✅ Redis

Logging

  • ✅ Automatic console logging (console.log, info, warn, error)
  • ✅ Structured logging with OpenTelemetry
  • ✅ Automatic trace-log correlation
  • ✅ Works with all frameworks

Other

  • ✅ HTTP/HTTPS requests
  • ✅ GraphQL
  • ✅ gRPC
  • ✅ And many more via OpenTelemetry auto-instrumentation

📚 Documentation

Quick Starts

  • Next.js Quick Start - Get started in 30 seconds
  • Logging Quick Start - Add logging in 2 minutes

Complete Guides

  • Next.js Complete Guide - Full Next.js integration guide
  • Logging Complete Guide - Full logging setup for all frameworks
  • 📚 Complete Documentation - All guides and references

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

SecureNow: common questions

Is SecureNow MCP server safe?
With care: it is graded C, so read the findings first (65/100). Read the SecureNow safety report
How do I install SecureNow?
It runs remotely at api.securenow.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does SecureNow need an API key?
No key to paste: it signs you in with OAuth when your client connects.
Is SecureNow maintained?
The last commit was 204 days ago (2026-04-14). The latest release is v8.12.4.
Is SecureNow up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of SecureNow?
Servers from other publishers that do the same job: prodlint MCP server, Skylos MCP server and Wireshark MCP server.
How does SecureNow compare with other Security MCP servers?
safety score 65/100 (higher than 20% of 915 Security servers); uptime 100% (of our recent checks; the typical remote Security server answers 100%); response time 1,243 ms (faster than 5% of 547 Security servers). Full comparison.

Alternatives to SecureNow

Same job from other publishers: the closest match first, then the best rated.

  • prodlint
    Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.
    A
  • Skylos
    Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
    C
  • Wireshark
    Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
    A
  • Prodcheck
    4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.
    A
  • Bawbel Scanner
    Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
    B