Cybersec Toolkit MCP Server

by 26zlio.github.26zl/cybersec-toolkitv1.3.0

Install a large security toolset and discover and run it through an authorization-gated server for CTF, pentesting, bug bounty and DFIR.

69Dockerstdioofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Active3d ago

Install Cybersec Toolkit MCP server

claude mcp add cybersec-toolkit -- docker run -i --rm ghcr.io/26zl/cybersec-toolkit:1.3.0 run --directory mcp_server fastmcp run server.py --transport stdio --no-banner

{
  "mcpServers": {
    "cybersec-toolkit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/26zl/cybersec-toolkit:1.3.0",
        "run",
        "--directory",
        "mcp_server",
        "fastmcp",
        "run",
        "server.py",
        "--transport",
        "stdio",
        "--no-banner"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "cybersec-toolkit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/26zl/cybersec-toolkit:1.3.0",
        "run",
        "--directory",
        "mcp_server",
        "fastmcp",
        "run",
        "server.py",
        "--transport",
        "stdio",
        "--no-banner"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "cybersec-toolkit": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/26zl/cybersec-toolkit:1.3.0",
        "run",
        "--directory",
        "mcp_server",
        "fastmcp",
        "run",
        "server.py",
        "--transport",
        "stdio",
        "--no-banner"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "cybersec-toolkit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/26zl/cybersec-toolkit:1.3.0",
        "run",
        "--directory",
        "mcp_server",
        "fastmcp",
        "run",
        "server.py",
        "--transport",
        "stdio",
        "--no-banner"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Configuration

Variable	Required	Secret	Description
CYBERSEC_MCP_ALLOW_EXTERNAL	—	—	Set to 1 only for explicitly authorized external scopes.
CYBERSEC_MCP_ALLOW_SCRIPTS	—	—	Set to 1 to enable unsandboxed run_script execution.

Freshness

Active — last maintenance signal 3d ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-10-07 · 3d ago · GitHub
Latest release
2026-09-24 · 15d ago · GitHub · v1.3.0
Package published
no data · npm/PyPI
Registry entry updated
2026-09-24 · 15d ago · official registry · v1.3.0

FAQ

›How do I install the Cybersec Toolkit MCP server in Claude Code?

Run: claude mcp add cybersec-toolkit -- docker run -i --rm ghcr.io/26zl/cybersec-toolkit:1.3.0 run --directory mcp_server fastmcp run server.py --transport stdio --no-banner. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Cybersec Toolkit require an API key?

No required environment variables are declared in its published metadata.

›Can I use Cybersec Toolkit as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is Cybersec Toolkit in the official MCP registry?

Yes, as io.github.26zl/cybersec-toolkit.