Skip to content

io.github.megabrainee/sectora

by megabrainee · remote · no sign-in to list tools · v1.1.0 · published by GitHub user megabrainee

Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.

Changes · 3
CompareRegistry entry

14 tools: 3 change things and 11 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http sectora https://mcp.sectora.io/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

14 tools

Changes things 3Claude Code: ask
  • assess_dependencyCheck a single package@version for known vulnerabilities via OSV.dev (npm, PyPI, Go, Maven, NuGet, RubyGems, Packagist, crates.io, etc.).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check a single package@version for known vulnerabilities via OSV.dev (npm, PyPI, Go, Maven, NuGet, RubyGems, Packagist, crates.io, etc.). Returns advisories with CVE IDs, severity, fixed versions, and references. Free tier eligible.
  • assess_tech_riskAssess security risk for a list of technologies.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Assess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.
  • scan_urlKick off a DAST security scan against a public URL the API key owner controls.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Kick off a DAST security scan against a public URL the API key owner controls. Two-step flow: first call returns a preview (target, profile, ETA, quota remaining); confirm by calling again with confirm:true to actually start the scan. Returns scan_id; poll status with get_scan. Domain must be verified in the Sectora account. Daily quota: 25 scans/24h per user, plus the plan's monthly scan limit. Requires an API key with the scans:create scope.
Only reads 11Claude Code: allow
  • get_kev_recentGet recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.No findings

    Why it is in this group

    • The name "get_kev_recent" says "get": a word for reading.
    Description, as the server wrote it
    Get recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.
  • get_my_postureGet Shield WAF posture score and breakdown for a domain registered under this account.No findings

    Why it is in this group

    • The name "get_my_posture" says "get": a word for reading.
    Description, as the server wrote it
    Get Shield WAF posture score and breakdown for a domain registered under this account. Returns 0-100 score, letter grade, per-component breakdown (origin lock, virtual patching, TLS, etc.), and edge_health (whether Shield is actually intercepting traffic). Requires API key.
  • get_scanGet a scan with all its findings (full detail: title, description, evidence, remediation, CVSS).No findings

    Why it is in this group

    • The name "get_scan" says "get": a word for reading.
    Description, as the server wrote it
    Get a scan with all its findings (full detail: title, description, evidence, remediation, CVSS). Requires API key.
  • get_threat_statsGet statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits.No findings

    Why it is in this group

    • The name "get_threat_stats" says "get": a word for reading.
    Description, as the server wrote it
    Get statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.
  • get_weaponization_scoreGet the weaponization score (0-100) for a CVE.No findings

    Why it is in this group

    • The name "get_weaponization_score" says "get": a word for reading.
    Description, as the server wrote it
    Get the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.
  • list_my_findingsList the API key owner's open security findings across all scans.No findings

    Why it is in this group

    • The name "list_my_findings" says "list": a word for reading.
    Description, as the server wrote it
    List the API key owner's open security findings across all scans. Use this to answer "what's my current exposure?" Filter by severity, status, or domain. Returns finding summaries; call get_scan for full detail. Requires API key.
  • list_my_scansList the API key owner's recent scans with summary counts.No findings

    Why it is in this group

    • The name "list_my_scans" says "list": a word for reading.
    Description, as the server wrote it
    List the API key owner's recent scans with summary counts. Requires API key.
  • lookup_cveGet full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors.No findings

    Why it is in this group

    • The name "lookup_cve" says "lookup": a word for reading.
    Description, as the server wrote it
    Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.
  • lookup_ip_reputationLook up community IP reputation from Sectora Shield WAF network.No findings

    Why it is in this group

    • The name "lookup_ip_reputation" says "lookup": a word for reading.
    Description, as the server wrote it
    Look up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Accepts IPv4 or IPv6 (the Shield network sees both).
  • search_cvesSearch for CVEs by keyword, severity, or other filters.No findings

    Why it is in this group

    • The name "search_cves" says "search": a word for reading.
    Description, as the server wrote it
    Search for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http sectora https://mcp.sectora.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__sectora__lookup_cve",
      "mcp__sectora__search_cves",
      "mcp__sectora__get_kev_recent",
      "mcp__sectora__get_trending_cves",
      "mcp__sectora__get_weaponization_score",
      "mcp__sectora__lookup_ip_reputation",
      "mcp__sectora__get_threat_stats",
      "mcp__sectora__list_my_findings",
      "mcp__sectora__list_my_scans",
      "mcp__sectora__get_scan",
      "mcp__sectora__get_my_posture"
    ],
    "ask": [
      "mcp__sectora__assess_tech_risk",
      "mcp__sectora__scan_url",
      "mcp__sectora__assess_dependency"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as sectora. Review it before you use it.