S

security-mcp

pratham-jain33/security-mcp · v0.1.1 · source fc83637 · Development & Workflow

by pratham-jain33Owner verifiedcaution

Zero-key MCP server: grade any website's security A+ to F, check CVEs against CISA KEV and EPSS, and get MITRE ATT&CK defenses in plain English

InstallSourceFollow0
Trust Score67Security59SurfacesScan pending

Is security-mcp a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • MCP

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

  • Security checks that did not finish: codex-plugin-scanner. See the evidence
  • 3 medium findings from the scan. See the evidence
  • No license declared in the manifest.

What is security-mcp?

security-mcp is a published development & workflow plugin for AI coding agents in the mcp ecosystem, developed by pratham-jain33 and distributed through the HOL AI plugin registry. Zero-key MCP server: grade any website's security A+ to F, check CVEs against CISA KEV and EPSS, and get MITRE ATT&CK defenses in plain English

Canonical slug
pratham-jain33/security-mcp
Version
v0.1.1 · source fc83637 · updated Oct 15, 2026

Trust & Reputation

HOL Trust Score
67

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64pts
Maintenance
55pts
MCP Posture
100pts
Plugin Security
59pts
Provenance
70pts
Publisher Quality
75pts

Registry Snapshot

Project link
security-mcp
Publisher verification
No
Marketplace source
Unknown
Scanner
Broker fallback
Security result
Caution
Digest verified
Yes

Trust & reputation

Trust & Reputation

HOL Trust Score
67

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64pts
Maintenance
55pts
MCP Posture
100pts
Plugin Security
59pts
Provenance
70pts
Publisher Quality
75pts

Provenance

Plugin root
.
Source repo
https://github.com/pratham-jain33/security-mcp
Source commit
fc836372fba1…
Publisher verified
No
Owner verified
@pratham-jain33

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security Posture

See how the Trust Score is computed
Caution
Security result
59
Security score
0
High findings
Provider
registry-broker-fallback
Grade
F · caution
Version
Unknown
cisco-skill-scanner: not_applicable

Findings

mediumpublishabilitypublishability.link.missing.websiteURL

websiteURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.privacyPolicyURL

privacyPolicyURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.termsOfServiceURL

termsOfServiceURL should be present for marketplace readiness.

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

security-mcp — Frequently asked questions

What is security-mcp?
security-mcp is an AI plugin in the HOL registry. Zero-key MCP server: grade any website's security A+ to F, check CVEs against CISA KEV and EPSS, and get MITRE ATT&CK defenses in plain English
How do I install security-mcp?
Install security-mcp in your harness: Source — https://github.com/pratham-jain33/security-mcp/releases. Full step-by-step guidance is on the HOL plugin page.
How do I install security-mcp in Source?
To install security-mcp in Source, start with https://github.com/pratham-jain33/security-mcp/releases. The complete step-by-step install guide for Source is on the HOL plugin page.
Is security-mcp free?
Pricing for security-mcp is published on its HOL plugin page when the maker schedules a launch.
How is the Trust Score for security-mcp computed?
security-mcp has a HOL Trust Score of 67 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/pratham-jain33%2Fsecurity-mcp/trust
Who publishes security-mcp?
security-mcp is published by pratham-jain33 and listed on HOL.
Is security-mcp available now?
security-mcp availability is listed on its HOL plugin page.

Install Guidance

Install in Source

Install from a native release archive or the assessed source revision.

Install guide
  1. 1

    Download the release archive

    Use a published GitHub release archive. The catalog version is the package version at the assessed commit.

    shell
  2. 2

    Follow the publisher install guide

    https://github.com/pratham-jain33/security-mcp/blob/fc836372fba1aa3cef22ea16e1e155bcecc9a3fa/docs/INSTALL.md

Did setup work in Source?

No setup reports for Source yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin Manifest

{
  "name": "security-mcp",
  "version": "0.1.1",
  "description": "Zero-key MCP server: grade any website's security A+ to F, check CVEs against CISA KEV and EPSS, and get MITRE ATT&CK defenses in plain English",
  "repository": "https://github.com/pratham-jain33/security-mcp",
  "homepage": "https://github.com/pratham-jain33/security-mcp",
  "interface": {
    "displayName": "security-mcp",
    "developerName": "pratham-jain33",
    "category": "Development & Workflow"
  },
  "holPackageManager": "python",
  "holManifestOrigin": "synthesized",
  "registryIndexVersion": 5
}

File Inventory

.codex-plugin/plugin.json

plugin-manifest

523 bytes

b1456342364f8a56…

pyproject.toml

file

587 bytes

22e9d9ae1b3d5765…

README.md

file

2,794 bytes

d9e1004830d1bb2d…

README.md

file

2,794 bytes

d9e1004830d1bb2d…

SECURITY.md

file

990 bytes

f533d75e8ebd7a00…

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from security-mcp.

Alternatives in Development & Workflow

See all Development & Workflow plugins

More from pratham-jain33

History, reviews, and alternatives

Launch history

No public launch record yet.

User reviews

—from 0 reviews

The first substantive review can be added on this page.