SecureNow MCP server
online · 100% uptimeai.securenow/securenow·v8.12.4Production security for Node.js apps: investigate live attacks, block IPs, tune detections.
0 stars252 downloads/wk
Reviews
Write oneNobody has reviewed SecureNow yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
SecureNow tools
Tool list not cached yet. `describe` through the gateway fetches it live.
Public scan report
scanner v0.1.10 · 2026-10-27 · same rubric, same numbers if you re-run it
- Code scan71 source files scanned8/25
- Live reliabilityremote reachable in 475ms (auth required)20/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualityOAuth resource metadata advertised on 40115/15
- Maintenancelast push 196 days ago4/15
- Maintainer identitynamespace and repository owner differ; GitHub account older than a year; website matches verified namespace8/10
Findings (2)
- highShell command built from a string (injection risk)
exec.shell-concatfirewall-iptables.js: …─── function iptablesSetup() { try { exec(`iptables -N ${CHAIN_NAME}`); } catch (_) {} // chain m… - mediumeval / new Function used
exec.evalnextjs.js: … 'function' ? __non_webpack_require__ : eval('require'); return nodeRequire(name); …
How SecureNow compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 65/100
- higher than 20% of 915 Security servers
- Uptime
- 100%
- of our recent checks; the typical remote Security server answers 100%
- Response time
- 1,243 ms
- faster than 5% of 547 Security servers
- Downloads a week
- 252
- more than 77% of 248 Security servers with a package
Install SecureNow in Claude Code, Cursor or VS Code
claude mcp add --transport http securenow https://api.securenow.ai/mcp
What the publisher says
From the SecureNow repository's README, as published. We do not edit it. Read it on GitHub
SecureNow
OpenTelemetry instrumentation for Node.js and Next.js applications - send traces and logs to SigNoz or any OTLP-compatible backend.
Official npm package: securenow
🚀 Quick Start
For Next.js Applications
The easiest way to add observability to Next.js!
# Just install - setup is automatic!
npm install securenow🎉 The installer will automatically:
- Detect your Next.js project
- Create instrumentation.ts (or .js)
- Create .env.local template
Just answer "Y" when prompted!
Then configure your .env.local:
SECURENOW_APPID=my-nextjs-app
SECURENOW_INSTANCE=http://your-signoz-server:4318Alternative: Use the CLI command
npx securenow initDone! 🎉 See Next.js Complete Guide for details.
For Node.js Applications (Express, Fastify, NestJS, etc.)
Tracing Only
# 1. Install
npm install securenow
# 2. Set environment variables
export SECURENOW_APPID=my-app
export SECURENOW_INSTANCE=http://your-signoz-server:4318
# 3. Run with preload
NODE_OPTIONS="-r securenow/register" node app.js
# or
NODE_OPTIONS="-r securenow/register" npm startTracing + Logging (Recommended)
# 1. Install
npm install securenow
# 2. Set environment variables
export SECURENOW_APPID=my-app
export SECURENOW_INSTANCE=http://your-signoz-server:4318
export SECURENOW_LOGGING_ENABLED=1
# 3. Run with preload (adds logging)
NODE_OPTIONS="-r securenow/register -r securenow/console-instrumentation" node app.js
# Now all console.log/info/warn/error automatically go to SigNoz!📦 Installation
npm install securenow
# or
yarn add securenow
# or
pnpm add securenow⚙️ Configuration
Environment Variables
# Required: Your application identifier
SECURENOW_APPID=my-app-name
# Optional: Your SigNoz/OTLP collector endpoint
# Default: https://freetrial.securenow.ai:4318
SECURENOW_INSTANCE=http://your-signoz-server:4318
# Optional: Enable Logging
SECURENOW_LOGGING_ENABLED=1 # Enable automatic log collection
# Optional: Additional configuration
SECURENOW_NO_UUID=1 # Don't append UUID to service name
OTEL_LOG_LEVEL=info # debug|info|warn|error
SECURENOW_DISABLE_INSTRUMENTATIONS=fs,dns # Disable specific instrumentations
OTEL_EXPORTER_OTLP_HEADERS="x-api-key=..." # Authentication headers
# Optional: Request body capture (for debugging)
SECURENOW_CAPTURE_BODY=1 # Capture request bodies in traces
SECURENOW_MAX_BODY_SIZE=10240 # Max body size in bytes
SECURENOW_SENSITIVE_FIELDS="field1,field2" # Additional fields to redactLegacy Environment Variables (still supported)
export securenow=<API-KEY>
export securenow_instance='http://<dedicated_instance>:4318'🎯 Supported Frameworks & Libraries
SecureNow automatically instruments:
Web Frameworks
- ✅ Next.js (App Router & Pages Router)
- ✅ Express.js
- ✅ Fastify
- ✅ NestJS
- ✅ Koa
- ✅ Hapi
Databases
- ✅ PostgreSQL
- ✅ MySQL / MySQL2
- ✅ MongoDB
- ✅ Redis
Logging
- ✅ Automatic console logging (console.log, info, warn, error)
- ✅ Structured logging with OpenTelemetry
- ✅ Automatic trace-log correlation
- ✅ Works with all frameworks
Other
- ✅ HTTP/HTTPS requests
- ✅ GraphQL
- ✅ gRPC
- ✅ And many more via OpenTelemetry auto-instrumentation
📚 Documentation
Quick Starts
- Next.js Quick Start - Get started in 30 seconds
- Logging Quick Start - Add logging in 2 minutes
Complete Guides
- Next.js Complete Guide - Full Next.js integration guide
- Logging Complete Guide - Full logging setup for all frameworks
- 📚 Complete Documentation - All guides and references
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
SecureNow: common questions
- Is SecureNow MCP server safe?
- With care: it is graded C, so read the findings first (65/100). Read the SecureNow safety report
- How do I install SecureNow?
- It runs remotely at api.securenow.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does SecureNow need an API key?
- No key to paste: it signs you in with OAuth when your client connects.
- Is SecureNow maintained?
- The last commit was 204 days ago (2026-04-14). The latest release is v8.12.4.
- Is SecureNow up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of SecureNow?
- Servers from other publishers that do the same job: prodlint MCP server, Skylos MCP server and Wireshark MCP server.
- How does SecureNow compare with other Security MCP servers?
- safety score 65/100 (higher than 20% of 915 Security servers); uptime 100% (of our recent checks; the typical remote Security server answers 100%); response time 1,243 ms (faster than 5% of 547 Security servers). Full comparison.
Alternatives to SecureNow
Same job from other publishers: the closest match first, then the best rated.
- prodlintProduction readiness for vibe-coded apps. 52 checks for security, reliability, and performance.not reviewedGrowingA
- SkylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.not reviewedEstablishedC
- WiresharkProfessional network analysis with tshark. Security audits, deep-dives, and threat detection.not reviewedEstablishedA
- Prodcheck4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.not reviewedGrowingA
- Bawbel ScannerSecurity scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.not reviewedGrowingB