Home › Security › cybersec-toolkit

cybersec-toolkit

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

Python Local Linux

★ 60 stars Last pushed 2026-09-23 License: MIT

View repository →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (oci)

docker run -i --rm ghcr.io/26zl/cybersec-toolkit:1.2.1

Or add to your MCP client config:

{
  "mcpServers": {
    "cybersec-toolkit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/26zl/cybersec-toolkit:1.2.1"
      ],
      "env": {
        "CYBERSEC_MCP_ALLOW_EXTERNAL": "<YOUR_VALUE>",
        "CYBERSEC_MCP_ALLOW_SCRIPTS": "<YOUR_VALUE>"
      }
    }
  }
}

CYBERSEC_MCP_ALLOW_EXTERNAL — Set to 1 only for explicitly authorized external scopes.
CYBERSEC_MCP_ALLOW_SCRIPTS — Set to 1 to enable unsandboxed run_script execution.

This server takes extra arguments — see its repository.