Skip to content
appsgit

MCP Security

MCP Security is an MCP server that adds cloud and DevOps tools to AI assistants such as Claude Desktop, Claude Code and Cursor. This repository contains Model Context Protocol (MCP) servers that enable MCP clients (like Claude Desktop or the cline.bot… It has 531 GitHub stars, is released under the Apache-2.0 license and runs locally with uvx secops_mcp.

github.com/google/mcp-security (opens in a new tab)

View on GitHub (opens in a new tab)

Install MCP Security

Generated from the server's published package. Replace your-value with your own values.

Claude Desktop

claude_desktop_config.json
{
  "mcpServers": {
    "mcp-security": {
      "command": "uvx",
      "args": [
        "secops_mcp"
      ],
      "env": {
        "VT_APIKEY": "your-value"
      }
    }
  }
}

Settings > Developer > Edit Config. macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\. Restart Claude Desktop afterwards.

Claude Code

claude mcp add --env VT_APIKEY=your-value --transport stdio mcp-security -- uvx secops_mcp

Cursor

.cursor/mcp.json
{
  "mcpServers": {
    "mcp-security": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "secops_mcp"
      ],
      "env": {
        "VT_APIKEY": "your-value"
      }
    }
  }
}

Project file; use ~/.cursor/mcp.json to enable it in every project.

VS Code

.vscode/mcp.json
{
  "inputs": [
    {
      "type": "promptString",
      "id": "vt_apikey",
      "description": "VT_APIKEY",
      "password": true
    }
  ],
  "servers": {
    "mcp-security": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "secops_mcp"
      ],
      "env": {
        "VT_APIKEY": "${input:vt_apikey}"
      }
    }
  }
}

Config formats checked against the official docs on Oct 7, 2026: modelcontextprotocol.io (opens in a new tab), code.claude.com (opens in a new tab), cursor.com (opens in a new tab), code.visualstudio.com (opens in a new tab).

Environment variables

Variables the server reads at startup.

NameRequiredDescription
CHRONICLE_PROJECT_IDNoShown in the README's example configuration.
CHRONICLE_CUSTOMER_IDNoShown in the README's example configuration.
CHRONICLE_REGIONNoShown in the README's example configuration.
VT_APIKEYsecretNoShown in the README's example configuration.
SOAR_URLNoShown in the README's example configuration.
SOAR_APP_KEYNoShown in the README's example configuration.

About MCP Security

This repository contains Model Context Protocol (MCP) servers that enable MCP clients (like Claude Desktop or the cline.bot VS Code extension) to access Google's security products and services:

  • agentic-soc
  • ai-agents
  • blueteam
  • chronicle-siem
  • cybersecurity
  • google-cloud
  • google-secops
  • google-threat-intelligence
  • incident-response
  • mcp

Similar MCP servers

More cloud & devops MCP servers

All Cloud & DevOps

FAQ

MCP Security FAQ

Still curious? Email info@appsgit.com.

What is MCP Security?

MCP Security is an MCP server that adds cloud and DevOps tools to AI assistants such as Claude Desktop, Claude Code and Cursor. This repository contains Model Context Protocol (MCP) servers that enable MCP clients (like Claude Desktop or the cline.bot… It has 531 GitHub stars, is released under the Apache-2.0 license and runs locally with uvx secops_mcp. The source code is at github.com/google/mcp-security.

How do I install the MCP Security MCP server?

Add the command uvx secops_mcp to your MCP client: put it in claude_desktop_config.json for Claude Desktop, run claude mcp add for Claude Code, or add it to .cursor/mcp.json (Cursor) or .vscode/mcp.json (VS Code). The snippets on this page are ready to paste.

Is MCP Security free?

The server is open source under the Apache-2.0 license, so running it is free. It needs credentials (VT_APIKEY) for the service it connects to, which may require a paid account.

Is MCP Security actively maintained?

The most recent commit was on Oct 6, 2026. The latest release is secops-v0.7.1, published Aug 27, 2026. appsgit only lists MCP servers with a commit in the last six months and re-checks every server daily.