Bright Security MCP Server

by neuralegion Your server? Claim it

answering

Bright Security is answering right now. Last checked 6 min ago. Last commit 3 Apr 2026.

AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

Uptime history 91 days of history · worst day 98%

91 days agonow

100.0%

Uptime 24h

91 of 91 checks

—

Tools

hidden behind auth

499 ms

Response time

average over 24h

Stars

last commit 3 Apr 2026

What changed 1

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 21 October 2026. No other catalogue keeps this.

21 Oct the owner changed

Nothing serious here today

Today is the operative word: we check Bright Security every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 6 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp --transport sse https://app.brightsec.com/mcp

Settings → Connectors → Add custom connector, then paste this address

https://app.brightsec.com/mcp

~/.codex/config.toml

[mcp_servers.mcp]
url = "https://app.brightsec.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://app.brightsec.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "mcp": {
      "type": "sse",
      "url": "https://app.brightsec.com/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but you need an API key from its owner to call it.

Endpoints

URL	Transport	State	Latency	Checked
https://app.brightsec.com/mcp	sse	needs key	515 ms	6 min ago

Alternatives to Bright Security

same job, measured the same way

Synapse Audit

by digidenone

AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.

53 installs/wk local only

Black Duck Security Scanner

by blackduck

AI-powered security scanning using Black Duck Signal for vulnerability detection.

259 installs/wk local only

middleBrick

by middlebrick

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

36 installs/wk local only

Operant MCP

by operantlabs

Security testing MCP server for penetration testing, forensics, and vulnerability assessment

78 installs/wk local only

Auditon security assessments

by auditon

Read-only access to your Auditon vulnerability scans: findings, endpoints, reports and changes.

answering

MCP Server Security Audit

by joepangallo

Scan websites for security vulnerabilities, headers, TLS, and email security.

38 installs/wk local only

Agent Security Scanner

by mikehzp

Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.

102 installs/wk local only

Bawbel Scanner

by bawbel

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

119 installs/wk local only

Bright Security — questions

Answers built from our own checks of this server.

Why is there no tool list for Bright Security?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is Bright Security working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 499 ms. The bar chart above shows every period we have measured.

How do I connect Bright Security?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own key: it refuses anonymous clients.

Does Bright Security need an API key?

Yes. Every time we knock, Bright Security answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is Bright Security?

It answers our handshake in 499 ms on average, which is faster than 24% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Bright Security open source?

We cannot say either way: 0 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.