Cybersec Toolkit MCP Server
I am a friend of virtue, not of fortune. Gjergj Kastrioti Skanderbeg (1405 1468)
People who work with blue team, bug bounty and ctf tools and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Python.
VERIFIED ACTIVE
LAST COMMIT 2026-09-18 · ★ 57 · #114 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18
MIT · Python servers · how we verify → /methodology
01 · Install Cybersec Toolkit
before you install - you'll need
Set CYBERSEC_MCP_ALLOW_EXTERNAL, CYBERSEC_MCP_ALLOW_SCRIPTS before connecting.
Docker
docker run -i --rm ghcr.io/26zl/cybersec-toolkit:1.2.1 Claude Desktop - add to config
{
"mcpServers": {
"26zl-cybersec-toolkit": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/26zl/cybersec-toolkit:1.2.1"
]
}
}
} Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as container (OCI image) - can be sandboxed away from your filesystem
license MIT - declared in the repository
registry namespace io.github.26zl is GitHub-verified and matches the repo owner
03 · What Cybersec Toolkit can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v1.2.1 · 2026-09-09
Richer tool definitions for list_tools and manage_remote_hosts - fuller descriptions and Literal enum types for method / action, so the input schema every MCP client sees is self-documenting and validated.…
v1.2.0 · 2026-09-07
MCP server: crypto solver venv, install-aware advisors, and AI-directive sanitizing. · Fixes · MCP registry manifest is now accepted - the OCI package no longer carries a version field, and the image ships the required…
v1.1.1 · 2026-08-22
Patch release. · Distribution & discoverability · Prebuilt container image on GHCR - no local build needed: docker run --rm ghcr.io/26zl/cybersec-toolkit --profile ctf · MCP registry manifest (server.json) for…
04 · Who maintains Cybersec Toolkit
cybersec-toolkit is maintained by 26zl. It's the only MCP server we track from this author; the repo dates to Feb 2026.
05 · Facts
- repository
- github.com/26zl/cybersec-toolkit
- category
- security - ranked #114 of 204 actively-maintained security servers as of 2026-09-18.
- release cadence
- 5 releases in the last 90 days (latest 2026-09-09)
- registry
- io.github.26zl/cybersec-toolkit (active, first published 2026-08-22 · 3 versions)
- packages
- oci:ghcr.io/26zl/cybersec-toolkit:1.2.1
06 · Cybersec Toolkit FAQ
What is Cybersec Toolkit?
I am a friend of virtue, not of fortune. Gjergj Kastrioti Skanderbeg (1405 1468)
Is Cybersec Toolkit still maintained?
Yes - as of 2026-09-18, its last commit was 2026-09-18 and it shipped 5 releases in the last 90 days. We re-verify nightly.
How do I install Cybersec Toolkit?
Run `docker run -i --rm ghcr.io/26zl/cybersec-toolkit:1.2.1`. The README documents 2 environment variables (CYBERSEC_MCP_ALLOW_EXTERNAL, CYBERSEC_MCP_ALLOW_SCRIPTS) to set first. Set CYBERSEC_MCP_ALLOW_EXTERNAL, CYBERSEC_MCP_ALLOW_SCRIPTS before connecting. You can also paste the ready-made client config above.
07 · Alternatives to Cybersec Toolkit
Alternatives to Cybersec Toolkit
Maintained security servers if Cybersec Toolkit isn't the fit.
- Treg To OpenRouter for tools and data. Compare catalog providers and call them from one hosted MCP endpoint. ★ 1,627 · 2026-09-18
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,105 · 2026-09-16
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 652 · 2026-09-17
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 625 · 2026-09-18
- Decionis CommerceGate MCP Commerce preflights, D365 authorization, signed evidence, and reports; no marketplace or ERP writes. ★ 533 · 2026-09-18
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 353 · 2026-09-15
Pairs well with
Servers that cover what Cybersec Toolkit doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Change This File · Keyblind · Codemore · Pkgxray · IBKR Portfolio Builder
More Python MCP servers · DaVinci Resolve Lite MCP · Zotero MCP (54yyyu) · Django Admin MCP · ReNoUn - Crypto Regime Classification · Server Kalshi · see all