MCP Servers

nh4ttruong/secobserve-mcp

MCP server for SecObserve: triage vulnerability findings, manage products and rules, import scan reports and SBOMs, generate VEX documents

Our verdict

Not reviewed yet

We have not reviewed nh4ttruong/secobserve-mcp yet

No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.

How we review records

From the listing

About nh4ttruong/secobserve-mcp

MCP server for SecObserve that enables triage of vulnerability findings, management of products and rules, import of scan reports and SBOMs, and generation of VEX documents. Written in Python, it exposes these SecObserve operations through the Model Context Protocol for use by MCP-compatible clients.

Best for

Developers building MCP-based tooling that needs to interact with SecObserve for security workflows.

Use cases

Automate vulnerability triage workflows in SecObserve via MCP
Manage products and rules programmatically from an MCP client
Import scan reports and SBOMs, and generate VEX documents

Notes

1 stars on GitHub. Last updated 2026-09-21. Licensed MIT.

Pros

Covers core SecObserve operations in one MCP server
Python-based, easy to extend or integrate
Follows the MCP standard for interoperability

Cons

Low star count suggests limited community adoption
Early-stage project, likely minimal testing or documentation
Requires a running SecObserve instance and MCP client setup

Key facts

What we have checked

Not checked yet. Dated facts such as prices, releases and repository activity appear here once we have confirmed them from a source.

How to use

How to set it up

As the listing publishes it. We have not run this install.

Install

uvx secobserve-mcp --help

Tools exposed

secobserve_list_resources
secobserve_describe_resource
secobserve_call_action
secobserve_assess_observation
secobserve_bulk_assess_observations
secobserve_approve_observation_log
secobserve_product_metrics
secobserve_upload_file
secobserve_api_import
secobserve_trigger_scan
secobserve_run_periodic_task
secobserve_status
secobserve_vex_document
triage-product
daily-changes
weekly-changes
daily-report
weekly-report
monthly-report
SECOBSERVE_BASE_URL

Clients the listing names (not checked here)

Claude Code, VS Code

Install

Add nh4ttruong/secobserve-mcp to your client

Not verified yet

Our lab has not run this server yet. "Config checked" on a client means the recipe matches that client's documented config format; it does not mean we ran it.

Claude Code

Config checked

Run in your terminal (runs on your computer)

claude mcp add --env SECOBSERVE_BASE_URL=YOUR_SECOBSERVE_BASE_URL --env SECOBSERVE_API_TOKEN=YOUR_SECOBSERVE_API_TOKEN --transport stdio nh4ttruong-secobserve-mcp -- uvx secobserve-mcp@1.0.0

Needs SECOBSERVE_BASE_URL and SECOBSERVE_API_TOKEN: replace each YOUR_ value with your own.

Version 1.0.0 · From the Official MCP registry, read 24 Oct 2026 · Format checked against Claude Code's config docs

Claude Desktop

Config checked

Add to claude_desktop_config.json (runs on your computer)

{
  "mcpServers": {
    "nh4ttruong-secobserve-mcp": {
      "command": "uvx",
      "args": [
        "secobserve-mcp@1.0.0"
      ],
      "env": {
        "SECOBSERVE_BASE_URL": "YOUR_SECOBSERVE_BASE_URL",
        "SECOBSERVE_API_TOKEN": "YOUR_SECOBSERVE_API_TOKEN"
      }
    }
  }
}

Needs SECOBSERVE_BASE_URL and SECOBSERVE_API_TOKEN: replace each YOUR_ value with your own.

Version 1.0.0 · From the Official MCP registry, read 24 Oct 2026 · Format checked against Claude Desktop's config docs

Cursor

Config checked

Add to .cursor/mcp.json (runs on your computer)

{
  "mcpServers": {
    "nh4ttruong-secobserve-mcp": {
      "command": "uvx",
      "args": [
        "secobserve-mcp@1.0.0"
      ],
      "env": {
        "SECOBSERVE_BASE_URL": "YOUR_SECOBSERVE_BASE_URL",
        "SECOBSERVE_API_TOKEN": "YOUR_SECOBSERVE_API_TOKEN"
      }
    }
  }
}

Needs SECOBSERVE_BASE_URL and SECOBSERVE_API_TOKEN: replace each YOUR_ value with your own.

Version 1.0.0 · From the Official MCP registry, read 24 Oct 2026 · Format checked against Cursor's config docs

VS Code

Config checked

Add to .vscode/mcp.json (runs on your computer)

{
  "inputs": [
    {
      "type": "promptString",
      "id": "secobserve-base-url",
      "description": "SecObserve base URL without /api, e.g. https://secobserve.example.com",
      "password": true
    },
    {
      "type": "promptString",
      "id": "secobserve-api-token",
      "description": "SecObserve user or product API token",
      "password": true
    }
  ],
  "servers": {
    "nh4ttruong-secobserve-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "secobserve-mcp@1.0.0"
      ],
      "env": {
        "SECOBSERVE_BASE_URL": "${input:secobserve-base-url}",
        "SECOBSERVE_API_TOKEN": "${input:secobserve-api-token}"
      }
    }
  }
}

Needs SECOBSERVE_BASE_URL and SECOBSERVE_API_TOKEN: replace each YOUR_ value with your own.

Version 1.0.0 · From the Official MCP registry, read 24 Oct 2026 · Format checked against VS Code's config docs

Codex

Config checked

Add to ~/.codex/config.toml (runs on your computer)

[mcp_servers.nh4ttruong-secobserve-mcp]
command = "uvx"
args = ["secobserve-mcp@1.0.0"]
env_vars = ["SECOBSERVE_BASE_URL", "SECOBSERVE_API_TOKEN"]

Needs SECOBSERVE_BASE_URL and SECOBSERVE_API_TOKEN: replace each YOUR_ value with your own.

Version 1.0.0 · From the Official MCP registry, read 24 Oct 2026 · Format checked against Codex's config docs

ChatGPT: ChatGPT connects only to remote servers that need no API key.

Recipes come from the server's entry in the official MCP registry. Check the package name before you run it, and keep keys out of shared files.

Works with

What nh4ttruong/secobserve-mcp connects to

5 clients, each with how we know and when we checked.

Works with	Type	How we know	Checked
Claude Code	Client	Install recipe matches the client's documented formatRuns locally, version 1.0.0Config checked	24 Oct 2026Claude Code docs
Claude Desktop	Client	Install recipe matches the client's documented formatRuns locally, version 1.0.0Config checked	24 Oct 2026Claude Desktop docs
Cursor	Client	Install recipe matches the client's documented formatRuns locally, version 1.0.0Config checked	24 Oct 2026Cursor docs
VS Code	Client	Install recipe matches the client's documented formatRuns locally, version 1.0.0Config checked	24 Oct 2026VS Code docs
Codex	Client	Install recipe matches the client's documented formatRuns locally, version 1.0.0Config checked	24 Oct 2026Codex docs

Sources

Where this comes from

No sources recorded yet. Each source we check is listed here with the date we checked it.

A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.

Changelog

What changed

No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.

Pairs with

Other entries in the index that connect to this one. Click through to see the chain.

Pairs with1 entry

MMCPlowCatalogue

semgrep/semgrep

Various

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

← Back to MCP Servers Submit your own entry →