mcpbeat Sign in

Sectora MCP Server

by megabrainee Your server? Claim it
answering

Sectora is answering right now. Last checked 10 min ago. It exposes 14 tools.

Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.

The linked repository no longer exists on GitHub — it was deleted or made private.

Uptime history 91 days of history · worst day 93%
91 days agonow
100.0%
Uptime 24h
91 of 91 checks
14
Tools
read from the server
173 ms
Response time
average over 24h
open, no key
Access
streamable-http

What changed 1

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 5 October 2026. No other catalogue keeps this.

4 Oct a tool description was rewritten scan_url

This one has been quiet for a while

Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

run in your terminal
claude mcp add sectora --transport http https://mcp.sectora.io/mcp
Settings → Connectors → Add custom connector, then paste this address
https://mcp.sectora.io/mcp
~/.codex/config.toml
[mcp_servers.sectora]
url = "https://mcp.sectora.io/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "sectora": {
      "url": "https://mcp.sectora.io/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "sectora": {
      "type": "http",
      "url": "https://mcp.sectora.io/mcp"
    }
  }
}

Available tools 14

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

assess
assess_dependency
Check a single package@version for known vulnerabilities via OSV.dev (npm, PyPI, Go, Maven, NuGet, RubyGems, Packagist, crates.io, etc.). Returns advisories with CVE IDs, severity, fixed versions, and references. Free tier eligible.
assess_tech_risk
Assess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.
lookup
lookup_cve
Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.
lookup_ip_reputation
Look up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Accepts IPv4 or IPv6 (the Shield network sees both).
scan
get_scan
Get a scan with all its findings (full detail: title, description, evidence, remediation, CVSS). Requires API key.
scan_url
Kick off a DAST security scan against a public URL the API key owner controls. Two-step flow: first call returns a preview (target, profile, ETA, quota remaining); confirm by calling again with confirm:true to actually start the scan. Returns scan_id; poll status with get_scan. Domain must be verified in the Sectora account. Daily quota: 25 scans/24h per user, plus the plan's monthly scan limit. Requires an API key with the scans:create scope.
cves
search_cves
Search for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.
findings
list_my_findings
List the API key owner's open security findings across all scans. Use this to answer "what's my current exposure?" Filter by severity, status, or domain. Returns finding summaries; call get_scan for full detail. Requires API key.
kev
get_kev_recent
Get recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.
posture
get_my_posture
Get Shield WAF posture score and breakdown for a domain registered under this account. Returns 0-100 score, letter grade, per-component breakdown (origin lock, virtual patching, TLS, etc.), and edge_health (whether Shield is actually intercepting traffic). Requires API key.
scans
list_my_scans
List the API key owner's recent scans with summary counts. Requires API key.
threat
get_threat_stats
Get statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.
trending
get_trending_cves
Get currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.
weaponization
get_weaponization_score
Get the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.

Endpoints

URLTransportStateLatencyChecked
https://mcp.sectora.io/mcp streamable-http answering 174 ms 10 min ago

Alternatives to Sectora

same job, measured the same way
overflo.ws
by overflo

Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.

7 tools answering
Threatcluster
by jam0k

Live threat intel for agents: incidents, actors, CVEs with KEV/EPSS, ransomware leak-site victims.

77 installs/wk answering
Keyboardcrumbs
by keyboardcrumbs

Live threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key.

152 installs/wk local only
F
FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit
by ceadigital

Real-time FIRST.org EPSS 30-day CVE exploit probability scoring and OSV package security audit.

28 tools answering
P
Polarity
by radar989

Real-time threat intelligence lookups and IOC parsing from your self-hosted Polarity instance.

55 installs/wk local only
Eleion Scanner
by hernaninverso

Register/verify your domains, queue security scans, and read findings (CVE, severity).

40 installs/wk local only
EchelonGraph CVE & Exposure
by echelongraph

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

1 345 installs/wk 16 tools answering
Cybershield
by tooloracle

CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.

12 tools answering

Sectora — questions

Answers built from our own checks of this server.

What can Sectora do?
It exposes 14 tools, read directly from the server on our last check. Among them: assess_dependency, assess_tech_risk, get_kev_recent, get_my_posture, get_scan, get_threat_stats and 8 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
What is Sectora mostly used for?
Its tools cluster around scan, lookup and assess. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.
Is Sectora working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 173 ms. The bar chart above shows every period we have measured.
Is Sectora still maintained?
The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.
How do I connect Sectora?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Sectora need an API key?
No. Sectora completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 14 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Sectora?
It answers our handshake in 173 ms on average, which is faster than 80% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.