MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.
Connect Runs on your machine
claude mcp add secobserve-mcp -e SECOBSERVE_BASE_URL=<SECOBSERVE_BASE_URL> -e SECOBSERVE_API_TOKEN=<SECOBSERVE_API_TOKEN> -e SECOBSERVE_READ_ONLY=<SECOBSERVE_READ_ONLY> -e SECOBSERVE_ALLOW_DELETE=<SECOBSERVE_ALLOW_DELETE> -- uvx secobserve-mcp==1.0.0{
"mcpServers": {
"secobserve-mcp": {
"command": "uvx",
"args": [
"secobserve-mcp==1.0.0"
],
"env": {
"SECOBSERVE_BASE_URL": "<SECOBSERVE_BASE_URL>",
"SECOBSERVE_API_TOKEN": "<SECOBSERVE_API_TOKEN>",
"SECOBSERVE_READ_ONLY": "<SECOBSERVE_READ_ONLY>",
"SECOBSERVE_ALLOW_DELETE": "<SECOBSERVE_ALLOW_DELETE>"
}
}
}
}{
"mcpServers": {
"secobserve-mcp": {
"command": "uvx",
"args": [
"secobserve-mcp==1.0.0"
],
"env": {
"SECOBSERVE_BASE_URL": "<SECOBSERVE_BASE_URL>",
"SECOBSERVE_API_TOKEN": "<SECOBSERVE_API_TOKEN>",
"SECOBSERVE_READ_ONLY": "<SECOBSERVE_READ_ONLY>",
"SECOBSERVE_ALLOW_DELETE": "<SECOBSERVE_ALLOW_DELETE>"
}
}
}
}{
"servers": {
"secobserve-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"secobserve-mcp==1.0.0"
],
"env": {
"SECOBSERVE_BASE_URL": "<SECOBSERVE_BASE_URL>",
"SECOBSERVE_API_TOKEN": "<SECOBSERVE_API_TOKEN>",
"SECOBSERVE_READ_ONLY": "<SECOBSERVE_READ_ONLY>",
"SECOBSERVE_ALLOW_DELETE": "<SECOBSERVE_ALLOW_DELETE>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
SECOBSERVE_BASE_URLRequired | SecObserve base URL without /api, e.g. https://secobserve.example.com |
SECOBSERVE_API_TOKENRequired, secret | SecObserve user or product API token |
SECOBSERVE_READ_ONLYOptional | Set to true to refuse every write operation |
SECOBSERVE_ALLOW_DELETEOptional | Set to true to enable the delete tool; deletion cascades and is irreversible |
Details
| Package | [email protected] (PYPI, stdio) |
| Package | ghcr.io/nh4ttruong/secobserve-mcp:1.0.0 (OCI, stdio) |
| First published | 21 Sep 2026 |
| Last updated | 21 Sep 2026 |
| Registry name | io.github.nh4ttruong/secobserve-mcp |
More data and analytics servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.