Cybersec Toolkit MCP Server

I am a friend of virtue, not of fortune. Gjergj Kastrioti Skanderbeg (1405 1468)

People who need security tools inside Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-08-24 · ★ 43 · #109 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

MIT · Python servers · how we verify → /methodology

01 · Install Cybersec Toolkit

before you install - you'll need

Set CYBERSEC_MCP_ALLOW_EXTERNAL, CYBERSEC_MCP_ALLOW_SCRIPTS before connecting.

Docker

docker run -i --rm ghcr.io/26zl/cybersec-toolkit:1.1.1

Claude Desktop - add to config

{
  "mcpServers": {
    "26zl-cybersec-toolkit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/26zl/cybersec-toolkit:1.1.1"
      ]
    }
  }
}

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem

license MIT - declared in the repository

registry namespace io.github.26zl is GitHub-verified and matches the repo owner

03 · What Cybersec Toolkit can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v1.1.1 · 2026-08-22

Patch release. · Distribution & discoverability · Prebuilt container image on GHCR - no local build needed: docker run --rm ghcr.io/26zl/cybersec-toolkit --profile ctf · MCP registry manifest (server.json) for…

v1.1.0 · 2026-07-30

Highlights · MCP server security hardening · Blocked command-execution options on allowlisted utilities that reached RCE with CYBERSEC_MCP_ALLOW_SCRIPTS=0 (sed e/r/w/s///e, zip --unzip-command/-TT, exiftool -if/-p…

v1.0.0 · 2026-07-19

First stable release. Modular installer for 580+ security tools on Linux and Termux, plus an authorization-gated MCP server and 872 agent skills.

04 · Who maintains Cybersec Toolkit

cybersec-toolkit is maintained by 26zl. It's the only MCP server we track from this author; the repo dates to Feb 2026.

05 · Facts

repository: github.com/26zl/cybersec-toolkit
category: security - ranked #109 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 3 releases in the last 90 days (latest 2026-08-22)
registry: io.github.26zl/cybersec-toolkit (active, first published 2026-08-22)
packages: oci:ghcr.io/26zl/cybersec-toolkit:1.1.1

06 · Cybersec Toolkit FAQ

What is Cybersec Toolkit?

I am a friend of virtue, not of fortune. Gjergj Kastrioti Skanderbeg (1405 1468)

Is Cybersec Toolkit still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 3 releases in the last 90 days. We re-verify nightly.

How do I install Cybersec Toolkit?

Run `docker run -i --rm ghcr.io/26zl/cybersec-toolkit:1.1.1`. The README documents 2 environment variables (CYBERSEC_MCP_ALLOW_EXTERNAL, CYBERSEC_MCP_ALLOW_SCRIPTS) to set first. Set CYBERSEC_MCP_ALLOW_EXTERNAL, CYBERSEC_MCP_ALLOW_SCRIPTS before connecting. You can also paste the ready-made client config above.

07 · Alternatives to Cybersec Toolkit

Alternatives to Cybersec Toolkit

Maintained security servers if Cybersec Toolkit isn't the fit.

Pairs well with

Servers that cover what Cybersec Toolkit doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Change This File · Keyblind · Codemore · Pkgxray · IBKR Portfolio Builder

More Python MCP servers · DaVinci Resolve Lite MCP · Zotero MCP (54yyyu) · ReNoUn - Crypto Regime Classification · Server Kalshi · A202 · see all