Draugr MCP Server

Describe your app. Draugr figures out the rest. Every application carries problems nobody put there on purpose: a library that turned out to have a hole in it, a password committed by accident, a server setting that leaves a door open. Draugr finds them, works out which ones actually matter for your app, and answers the question you are really asking before a release. is this safe to ship?

People who work with appsec, code scanning and container security and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Go.

VERIFIED ACTIVE

LAST COMMIT 2026-09-30 · ★ 7 · #160 OF 216 MAINTAINED SECURITY · VERIFIED 2026-09-30

Apache-2.0 · Go servers · how we verify → /methodology

01 · Install Draugr

Claude Desktop

Settings → Extensions → Install, then select the https://github.com/draugr-dev/draugr/releases/download/v0.141.0/draugr-0.141.0.mcpb .mcpb bundle

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as Claude Desktop extension (.mcpb bundle)

license Apache-2.0 - declared in the repository

registry vendor namespace dev.draugr - domain-verified with the official MCP registry

03 · What Draugr can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.141.0 · 2026-09-30

Added · A github-issue publisher labels each issue with the highest priority among its findings, such as draugr:priority:P1. The entry's labelBy adds labels for the control, the exposure, the criticality and an…

v0.140.0 · 2026-09-29

Added · A GitHub issue that stays open while the gate fails. The github-issue publisher opens an issue on a failing default-branch run, rewrites it when the findings change, and closes it with a comment when the gate…

v0.139.0 · 2026-09-28

Changed · draugr diff counts every finding in head by band, one strip per state. Accepted and unaccepted findings each get a strip beside new and unchanged, and findings suppressed in both base and head get one labeled…

04 · Who maintains Draugr

Draugr is maintained by draugr-dev. It's the only MCP server we track from this author; the repo dates to Jul 2026.

05 · Facts

repository: github.com/draugr-dev/draugr
website: https://draugr.dev/
category: security - ranked #160 of 216 actively-maintained security servers as of 2026-09-30.
release cadence: 10+ releases in the last 90 days (latest 2026-09-30)
registry: dev.draugr/draugr (active, first published 2026-07-27 · 123 versions)
packages: mcpb:https://github.com/draugr-dev/draugr/releases/download/v0.141.0/draugr-0.141.0.mcpb

06 · Draugr FAQ

What is Draugr?

Is Draugr still maintained?

Yes - as of 2026-09-30, its last commit was 2026-09-30 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

07 · Alternatives to Draugr

Alternatives to Draugr

Maintained security servers if Draugr isn't the fit.

Pairs well with

Servers that cover what Draugr doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · DSers Official MCP Server · ZAP Server · Toolmesh · Reolink MCP · Skill Audit MCP

More Go MCP servers · Office Addin MCP · Pituitary · Yutu · Go Model · see all