Redthread is answering right now. Last checked 7 min ago.
Attack paths, scan findings and shadow AI for AI-native apps and their clouds; vet MCP servers.
Nothing serious here today
Today is the operative word: we check Redthread every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 7 min ago.
claude mcp add redthread --transport http https://app.redthreadsec.com/mcphttps://app.redthreadsec.com/mcp[mcp_servers.redthread]
url = "https://app.redthreadsec.com/mcp"{
"mcpServers": {
"redthread": {
"url": "https://app.redthreadsec.com/mcp"
}
}
}{
"servers": {
"redthread": {
"type": "http",
"url": "https://app.redthreadsec.com/mcp"
}
}
}This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://app.redthreadsec.com/mcp | streamable-http | sign-in | 574 ms | 7 min ago |
Alternatives to Redthread
same job, measured the same wayMCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
Read-only MCP access to The Agent Commons: shared security findings for AI agents and their tools.
MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.
Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.
MCP server for the Dropscan postal mail scanning API: read scanned letters, act on mailings.
Let AI drive Swing and JavaFX apps — see the UI, click, fill forms, read tables. No API needed.
The vetted directory of paid APIs and MCP servers for AI agents.
Scaffold modern npm packages, CLIs, services and apps as a native tool for AI agents.
Redthread — questions
Answers built from our own checks of this server.