1. Conduid
  2. Developer Tools
  3. Cybermcp
MCP server · Developer Tools

Cybermcp

by · github.com/ricauts/CyberMCP

CyberMCP is a Model Context Protocol (MCP) server designed for testing backend APIs for security vulnerabilities. It provides a set of specialized tools and resources that can be used by LLMs to identify common security issues in APIs.

Unclaimed MIT last commit a year ago devtools
InstallView source
54Fair

Scored 4 months ago · breakdown

About Cybermcp

Cybermcp is an MCP server published by ricauts in the Developer Tools category: cyberMCP is a Model Context Protocol (MCP) server designed for testing backend APIs for security vulnerabilities. It provides a set of specialized tools and resources that can be used by LLMs to identify common security issues in APIs. It has been installed 0 times through Conduid.

The repository has 13 stars and 14 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues (0) before depending on it in production.

Install

Install
npx cybermcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Cybermcp

Powered by Claude · Grounded in docs

I know everything about Cybermcp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

🔒 CyberMCP

AI-powered Cybersecurity API Testing with Model Context Protocol (MCP)

Node.js TypeScript

CyberMCP is a Model Context Protocol (MCP) server that enables AI agents to perform comprehensive security testing on backend APIs. It provides 14 specialized security tools and 10 resources for identifying vulnerabilities like authentication bypass, injection attacks, data leakage, and security misconfigurations.

🚀 Quick Start

# Clone and setup
git clone https://github.com/your-username/CyberMCP.git
cd CyberMCP
npm install
npm run build

# Test the server
npm run test-server

# Start interactive testing
npm run test-interactive

✨ Features

  • 🔐 Authentication Testing - JWT analysis, bypass detection, OAuth2 flows
  • 💉 Injection Testing - SQL injection, XSS vulnerability detection
  • 📊 Data Protection - Sensitive data exposure, path traversal checks
  • ⏱️ Rate Limiting - DoS vulnerability assessment
  • 🛡️ Security Headers - OWASP security header validation
  • 📚 Comprehensive Resources - Security checklists and testing guides

🛠️ Security Tools (14 Total)

Category Tools
Authentication basic_auth, token_auth, oauth2_auth, api_login, auth_status, clear_auth, jwt_vulnerability_check, auth_bypass_check
Injection Testing sql_injection_check, xss_check
Data Protection sensitive_data_check, path_traversal_check
Infrastructure rate_limit_check, security_headers_check

🎯 IDE Integration

CyberMCP works with all major AI-powered IDEs:

  • Claude Desktop - Direct MCP integration
  • Cursor IDE - Built-in MCP support
  • Windsurf (Codeium) - Native MCP protocol
  • VS Code + Cline - Extension-based integration

📖 Complete Setup Guide - Detailed configuration for each IDE

📋 Usage Example

"Use basic_auth with username 'admin' and password 'secret123' 
then use auth_bypass_check on https://api.example.com/users 
to test for authentication bypass vulnerabilities"

The AI agent will:

  1. Configure authentication credentials
  2. Test the protected endpoint for bypass vulnerabilities
  3. Provide detailed security analysis and recommendations

📊 Testing & Validation

# Comprehensive tool testing
npm run test-tools

# Manual interactive testing  
npm run test-interactive

# Quick setup verification
npm run quick-start

# MCP Inspector (GUI)
npm run inspector

📁 Project Structure

CyberMCP/
├── src/                    # TypeScript source code
│   ├── tools/             # 14 security testing tools
│   ├── resources/         # Security checklists & guides
│   └── utils/             # Authentication & utilities
├── docs/                  # Documentation
├── scripts/               # Testing & utility scripts  
├── examples/              # Configuration examples
├── dist/                  # Built JavaScript (generated)
└── README.md              # This file

🔧 Development

# Development mode with hot reload
npm run dev

# Build TypeScript
npm run build

# Start server (stdio mode)
npm start

# Start HTTP server
TRANSPORT=http PORT=3000 npm start

📖 Documentation

🤝 Contributing

  1. Fork the repository
  2. Create a feature branch: git checkout -b feature/new-security-tool
  3. Make your changes and add tests
  4. Submit a pull request

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

🔗 Resources

🔒 Secure your APIs with AI-powered testing!

For support and questions, please create an issue.

README mirrored from the source repository 4 months ago. The original is authoritative.

Questions

About Cybermcp

How do I install Cybermcp?

Run npx cybermcp, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Cybermcp safe to use with an AI agent?

Its trust score is 54 out of 100 (fair). It passes 0 of 1 static security checks; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Cybermcp still maintained?

The last commit was a year ago, with 0 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.