Niro MCP Server
Niro works like an autonomous, two-person team living in your repo - two roles with one goal: real security bugs, found and closed with proof.
People who need security tools inside Claude, Cursor, VS Code, or another MCP client. The project is written in Shell.
VERIFIED ACTIVE
LAST COMMIT 2026-08-19 · ★ 4 · #149 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25
NOASSERTION · Shell · how we verify → /methodology
01 · Install Niro
Claude Desktop
Settings → Extensions → Install, then select the https://github.com/apxlabs-ai/niro/releases/download/v0.1.61/niro.mcpb .mcpb bundle02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as Claude Desktop extension (.mcpb bundle)
license no standard license detected - usage rights unclear; check the repo before commercial use
registry namespace io.github.apxlabs-ai is GitHub-verified and matches the repo owner
03 · What Niro can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v0.1.80 · 2026-08-18
Niro v0.1.80 · Summary · Third-party component testing now prioritizes live exploitation of applicable security advisories. · Changes · Pentests analyze third-party components at scale, validate applicable advisories…
v0.1.79 · 2026-08-18
Niro v0.1.79 · Summary · Third-party component coverage now includes offline dependency advisory scanning. · Changes · Pentests inventory runtime dependencies and use a bundled vulnerability database to identify…
v0.1.78 · 2026-08-17
Niro v0.1.78 · Summary · General pentests now include focused third-party component coverage. · Changes · A dedicated Scout identifies exposed frameworks and dependencies, researches current advisories, and proposes…
04 · Who maintains Niro
Niro is maintained by apxlabs-ai. It's the only MCP server we track from this author; the repo dates to May 2026.
05 · Facts
- repository
- github.com/apxlabs-ai/niro
- website
- https://apxlabs.ai/niro
- category
- security - ranked #149 of 182 actively-maintained security servers as of 2026-08-25.
- release cadence
- 10+ releases in the last 90 days (latest 2026-08-18)
- registry
- io.github.apxlabs-ai/niro (active, first published 2026-06-18 · 6 versions)
- packages
- mcpb:https://github.com/apxlabs-ai/niro/releases/download/v0.1.61/niro.mcpb
06 · Niro FAQ
What is Niro?
Niro works like an autonomous, two-person team living in your repo - two roles with one goal: real security bugs, found and closed with proof.
Is Niro still maintained?
Yes - as of 2026-08-25, its last commit was 2026-08-19 and it shipped 10+ releases in the last 90 days. We re-verify nightly.
07 · Alternatives to Niro
Alternatives to Niro
Maintained security servers if Niro isn't the fit.
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,102 · 2026-08-24
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 632 · 2026-08-24
- Decionis MCP Server Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks. ★ 533 · 2026-08-24
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 470 · 2026-08-25
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 409 · 2026-08-23
- Bradesco MCP server for Bradesco - Pix, Cobrança (boleto), Arrecadação, Extrato (OAuth2 + mTLS) ★ 269 · 2026-08-12
Pairs well with
Servers that cover what Niro doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Auth0 MCP Server · Server for OSCAL · A X · Aikido MCP · Bawbel Scanner