Niro MCP Server
Niro works like an autonomous, two-person team living in your repo - two roles with one goal: real security bugs, found and closed with proof.
People who work with pentesting, security and developer tools and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Shell.
VERIFIED ACTIVE
LAST COMMIT 2026-08-25 · ★ 8 · #168 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18
NOASSERTION · Shell · how we verify → /methodology
01 · Install Niro
Claude Desktop
Settings → Extensions → Install, then select the https://github.com/apxlabs-ai/niro/releases/download/v0.1.61/niro.mcpb .mcpb bundle02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as Claude Desktop extension (.mcpb bundle)
license no standard license detected - usage rights unclear; check the repo before commercial use
registry namespace io.github.apxlabs-ai is GitHub-verified and matches the repo owner
03 · What Niro can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v0.1.80 · 2026-08-18
Niro v0.1.80 · Summary · Third-party component testing now prioritizes live exploitation of applicable security advisories. · Changes · Pentests analyze third-party components at scale, validate applicable advisories…
v0.1.79 · 2026-08-18
Niro v0.1.79 · Summary · Third-party component coverage now includes offline dependency advisory scanning. · Changes · Pentests inventory runtime dependencies and use a bundled vulnerability database to identify…
v0.1.78 · 2026-08-17
Niro v0.1.78 · Summary · General pentests now include focused third-party component coverage. · Changes · A dedicated Scout identifies exposed frameworks and dependencies, researches current advisories, and proposes…
04 · Who maintains Niro
Niro is maintained by apxlabs-ai. It's the only MCP server we track from this author; the repo dates to May 2026.
05 · Facts
- repository
- github.com/apxlabs-ai/niro
- website
- https://apxlabs.ai/niro
- category
- security - ranked #168 of 204 actively-maintained security servers as of 2026-09-18.
- release cadence
- 9 releases in the last 90 days (latest 2026-08-18)
- registry
- io.github.apxlabs-ai/niro (active, first published 2026-06-18 · 6 versions)
- packages
- mcpb:https://github.com/apxlabs-ai/niro/releases/download/v0.1.61/niro.mcpb
06 · Niro FAQ
What is Niro?
Niro works like an autonomous, two-person team living in your repo - two roles with one goal: real security bugs, found and closed with proof.
Is Niro still maintained?
Yes - as of 2026-09-18, its last commit was 2026-08-25 and it shipped 9 releases in the last 90 days. We re-verify nightly.
07 · Alternatives to Niro
Alternatives to Niro
Maintained security servers if Niro isn't the fit.
- Treg To OpenRouter for tools and data. Compare catalog providers and call them from one hosted MCP endpoint. ★ 1,627 · 2026-09-18
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,105 · 2026-09-16
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 652 · 2026-09-17
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 625 · 2026-09-18
- Decionis CommerceGate MCP Commerce preflights, D365 authorization, signed evidence, and reports; no marketplace or ERP writes. ★ 533 · 2026-09-18
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 353 · 2026-09-15
Pairs well with
Servers that cover what Niro doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Long Run Hybrid Coach · Auth0 MCP Server · A X · Aikido MCP · Bawbel Scanner