Secobserve MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 176 installs a week from pypi. Last commit 25 Sep 2026.
MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.
Nothing serious here today
Today is the operative word: we check Secobserve MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add secobserve-mcp -e 'SECOBSERVE_BASE_URL=<SECOBSERVE_BASE_URL>' -e 'SECOBSERVE_API_TOKEN=<SECOBSERVE_API_TOKEN>' -- uvx secobserve-mcp{
"mcpServers": {
"secobserve-mcp": {
"command": "uvx",
"args": [
"secobserve-mcp"
],
"env": {
"SECOBSERVE_API_TOKEN": "<SECOBSERVE_API_TOKEN>",
"SECOBSERVE_BASE_URL": "<SECOBSERVE_BASE_URL>"
}
}
}
}[mcp_servers.secobserve-mcp]
command = "uvx"
args = ["secobserve-mcp"]
env = { SECOBSERVE_BASE_URL = "<SECOBSERVE_BASE_URL>", SECOBSERVE_API_TOKEN = "<SECOBSERVE_API_TOKEN>" }{
"mcpServers": {
"secobserve-mcp": {
"command": "uvx",
"args": [
"secobserve-mcp"
],
"env": {
"SECOBSERVE_API_TOKEN": "<SECOBSERVE_API_TOKEN>",
"SECOBSERVE_BASE_URL": "<SECOBSERVE_BASE_URL>"
}
}
}
}{
"servers": {
"secobserve-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"secobserve-mcp"
],
"env": {
"SECOBSERVE_API_TOKEN": "<SECOBSERVE_API_TOKEN>",
"SECOBSERVE_BASE_URL": "<SECOBSERVE_BASE_URL>"
}
}
}
}Put your own values in place of
<SECOBSERVE_BASE_URL> (SecObserve base URL without /api, e.g. https://secobserve.example.com), <SECOBSERVE_API_TOKEN> (SecObserve user or product API token).
The author’s registry entry marks them as required.
Optional settings from the registry entry, left out of the block above:
SECOBSERVE_READ_ONLY (Set to true to refuse every write operation), SECOBSERVE_ALLOW_DELETE (Set to true to enable the delete tool; deletion cascades and is irreversible).
Alternatives to Secobserve MCP
same job, measured the same wayMCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
MCP server for Grok image generation and editing
An MCP server for analyzing startup financial health and generating metrics reports locally.
MCP server proxy for SQLBot Text-to-SQL queries and report generation.
MCP server for OpenAI GPT image generation and editing
MCP server for Google Gemini image generation and editing
Safe, self-hosted ZAP operator for guided AI security scans and reports.
Scan Android and iOS apps for security issues: findings, MASVS mapping and pentest reports.
Secobserve MCP — questions
Answers built from our own checks of this server.