Security Recipes MCP Server

Search CVEs. Remediate vulnerabilities with AI agents. Sourced facts stay sourced, remediation stays bounded, and every plan carries verification, rollback, and stop conditions - the live site's contract, and this repo's. It is available as a remote MCP endpoint.

Teams that work with Security and want a hosted endpoint instead of running a local process. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-09-29 · ★ 2 · #190 OF 216 MAINTAINED SECURITY · VERIFIED 2026-09-30

Apache-2.0 · Python servers · how we verify → /methodology

01 · Install Security Recipes

before you install - you'll need

Set SECURITY_RECIPES_HTTP_PORT before connecting.

Claude Code

claude mcp add stevologic-security-recipes.ai --transport http https://security-recipes.ai/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "stevologic-security-recipes.ai": {
      "url": "https://security-recipes.ai/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://security-recipes.ai/mcp

transport: streamable-http

endpoint alive - responded to MCP initialize · probed 2026-09-30

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as remote - your agent's requests go to security-recipes.ai

endpoint auth accepted our unauthenticated MCP initialize - no credentials needed to connect

license Apache-2.0 - declared in the repository

registry namespace io.github.stevologic is GitHub-verified and matches the repo owner

03 · Who maintains Security Recipes

Security Recipes is maintained by stevologic. It's the only MCP server we track from this author; the repo dates to Apr 2026.

04 · Facts

repository: github.com/stevologic/security-recipes.ai
website: https://security-recipes.ai/
category: security - ranked #190 of 216 actively-maintained security servers as of 2026-09-30.
registry: io.github.stevologic/security-recipes (active, first published 2026-08-26)

05 · Security Recipes FAQ

What is Security Recipes?

Is Security Recipes still maintained?

Yes - as of 2026-09-30, its last commit was 2026-09-29. We re-verify nightly.

How do I install Security Recipes?

Run `claude mcp add stevologic-security-recipes.ai --transport http https://security-recipes.ai/mcp`. The README documents one environment variable (SECURITY_RECIPES_HTTP_PORT) to set first. Set SECURITY_RECIPES_HTTP_PORT before connecting. You can also paste the ready-made client config above.

Does Security Recipes require authentication?

No - the endpoint accepted our unauthenticated MCP initialize when probed on 2026-09-30; you can connect without credentials.

06 · Alternatives to Security Recipes

Alternatives to Security Recipes

Maintained security servers if Security Recipes isn't the fit.

Pairs well with

Servers that cover what Security Recipes doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Strac MCP DLP · AI AppSec · Tenant Isolation · Code Inspectus

More Python MCP servers · Memex (stifler7) · Adam Framework · Infra Node · DB MCP Server · see all