NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Security

Cybersec Toolkit

io.github.26zl/cybersec-toolkit ยท v1.4.0

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add cybersec-toolkit -e CYBERSEC_MCP_ALLOW_EXTERNAL=<CYBERSEC_MCP_ALLOW_EXTERNAL> -e CYBERSEC_MCP_ALLOW_SCRIPTS=<CYBERSEC_MCP_ALLOW_SCRIPTS> -- docker run -i --rm ghcr.io/26zl/cybersec-toolkit:1.4.0
claude_desktop_config.json
{
  "mcpServers": {
    "cybersec-toolkit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/26zl/cybersec-toolkit:1.4.0"
      ],
      "env": {
        "CYBERSEC_MCP_ALLOW_EXTERNAL": "<CYBERSEC_MCP_ALLOW_EXTERNAL>",
        "CYBERSEC_MCP_ALLOW_SCRIPTS": "<CYBERSEC_MCP_ALLOW_SCRIPTS>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "cybersec-toolkit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/26zl/cybersec-toolkit:1.4.0"
      ],
      "env": {
        "CYBERSEC_MCP_ALLOW_EXTERNAL": "<CYBERSEC_MCP_ALLOW_EXTERNAL>",
        "CYBERSEC_MCP_ALLOW_SCRIPTS": "<CYBERSEC_MCP_ALLOW_SCRIPTS>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "cybersec-toolkit": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/26zl/cybersec-toolkit:1.4.0"
      ],
      "env": {
        "CYBERSEC_MCP_ALLOW_EXTERNAL": "<CYBERSEC_MCP_ALLOW_EXTERNAL>",
        "CYBERSEC_MCP_ALLOW_SCRIPTS": "<CYBERSEC_MCP_ALLOW_SCRIPTS>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
CYBERSEC_MCP_ALLOW_EXTERNAL
Optional		Set to 1 only for explicitly authorized external scopes.
CYBERSEC_MCP_ALLOW_SCRIPTS
Optional		Set to 1 to enable unsandboxed run_script execution.

Details

Packageghcr.io/26zl/cybersec-toolkit:1.4.0 (OCI, stdio)
First published15 Oct 2026
Last updated15 Oct 2026
Registry nameio.github.26zl/cybersec-toolkit

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.