MCP server intelligence profile

CyberMCP MCP Server

A Model Context Protocol server designed for testing backend APIs for security vulnerabilities like authentication bypass, injection attacks, and data leakage

Local Onlyricauts
Awaiting current scanSource Git · 34bb11d76ea7ab9d3c4a9a42584ce7129f6e7c7d

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

1Distribution channel
14Independently observed tools
0Linked remote endpoints
AvailableVersion intelligence

Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.

Install and connect

Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.

No verified installation or connection method is available in the retained evidence yet.

Identity

Canonical slugcybermcp-23c3719bDeploymentLocal Only
Canonical package—Repositoryricauts/CyberMCP
First published—Latest release—
Last security verification—Classification confidence90%
PublicationDraftOfficial distributionNot verified

Distributions

ChannelIdentifierCurrent versionVersionsSource
source_gitricauts/cybermcp34bb11d76ea7ab9d3c4a9a42584ce7129f6e7c7d1Repository

Current release

PackageVersionPublished / observedInventorySecurity scan
source_gitricauts/cybermcp34bb11d76ea7ab9d3c4a9a42584ce7129f6e7c7dCurrentAug 25, 202614 toolsSucceeded · 10 resources · 0 promptsEvidence restricted
Enterprise protection

Continuously monitor this MCP for security risk

Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.

  • Independent exact-version security scans
  • Continuous release and vulnerability monitoring
  • Risk-change alerts with capability context
  • Historical evidence and API exports
Custom pricingContact salesTailored to your organization, integrations, data needs, and support requirements.

Current version evidence

No public current-version evidence is available yet.

Current protocol inventory

2025-03-26Negotiated protocol
CyberMCPServer-reported name
2Capability groups
Aug 25, 2026Observed

Tools 14

ToolCategoryAnnotationsRisk
api_login
Input schema
{
  "type": "object",
  "properties": {
    "login_url": {
      "type": "string",
      "format": "uri",
      "description": "API login endpoint URL"
    },
    "credentials": {
      "type": "object",
      "additionalProperties": {
        "type": "string"
      },
      "description": "Login credentials as key-value pairs"
    },
    "method": {
      "type": "string",
      "enum": [
        "post",
        "get"
      ],
      "default": "post",
      "description": "HTTP method to use"
    },
    "token_path": {
      "type": "string",
      "default": "token",
      "description": "Path to token in the response (e.g., 'data.accessToken')"
    },
    "token_prefix": {
      "type": "string",
      "default": "Bearer",
      "description": "Token prefix to use in Authorization header"
    },
    "header_name": {
      "type": "string",
      "default": "Authorization",
      "description": "Header name to use for the token"
    }
  },
  "required": [
    "login_url",
    "credentials"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
auth_bypass_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "auth_header": {
      "type": "string",
      "description": "Authentication header name (if different from standard)"
    },
    "auth_token": {
      "type": "string",
      "description": "Authentication token (if not using the currently authenticated session)"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST",
        "PUT",
        "DELETE",
        "PATCH"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "use_session_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use the current session authentication if available"
    }
  },
  "required": [
    "endpoint"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
auth_status
Input schema
{
  "type": "object",
  "properties": {},
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
basic_auth
Input schema
{
  "type": "object",
  "properties": {
    "username": {
      "type": "string",
      "description": "Username for authentication"
    },
    "password": {
      "type": "string",
      "description": "Password for authentication"
    }
  },
  "required": [
    "username",
    "password"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
clear_auth
Input schema
{
  "type": "object",
  "properties": {},
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
jwt_vulnerability_check
Input schema
{
  "type": "object",
  "properties": {
    "jwt_token": {
      "type": "string",
      "description": "JWT token to analyze for vulnerabilities"
    }
  },
  "required": [
    "jwt_token"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
oauth2_auth
Input schema
{
  "type": "object",
  "properties": {
    "client_id": {
      "type": "string",
      "description": "OAuth2 client ID"
    },
    "client_secret": {
      "type": "string",
      "description": "OAuth2 client secret"
    },
    "token_url": {
      "type": "string",
      "format": "uri",
      "description": "OAuth2 token endpoint URL"
    },
    "authorization_url": {
      "type": "string",
      "format": "uri",
      "description": "OAuth2 authorization endpoint URL (for authorization code flow)"
    },
    "grant_type": {
      "type": "string",
      "enum": [
        "client_credentials",
        "password",
        "authorization_code",
        "refresh_token"
      ],
      "default": "client_credentials",
      "description": "OAuth2 grant type"
    },
    "username": {
      "type": "string",
      "description": "Username (for password grant type)"
    },
    "password": {
      "type": "string",
      "description": "Password (for password grant type)"
    },
    "scope": {
      "type": "string",
      "description": "OAuth2 scope"
    },
    "redirect_uri": {
      "type": "string",
      "description": "Redirect URI (for authorization code flow)"
    }
  },
  "required": [
    "client_id",
    "token_url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
path_traversal_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "parameter_name": {
      "type": "string",
      "description": "Name of the parameter to test for path traversal"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "use_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use current authentication if available"
    }
  },
  "required": [
    "endpoint",
    "parameter_name"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
rate_limit_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST",
        "PUT",
        "DELETE"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "request_count": {
      "type": "number",
      "minimum": 5,
      "maximum": 50,
      "default": 20,
      "description": "Number of requests to send"
    },
    "request_delay_ms": {
      "type": "number",
      "minimum": 0,
      "maximum": 1000,
      "default": 100,
      "description": "Delay between requests in milliseconds"
    },
    "auth_header": {
      "type": "string",
      "description": "Authentication header (if any)"
    },
    "request_body": {
      "type": "string",
      "description": "Request body (for POST/PUT requests)"
    }
  },
  "required": [
    "endpoint"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
security_headers_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "HEAD",
        "OPTIONS"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "use_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use current authentication if available"
    }
  },
  "required": [
    "endpoint"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
sensitive_data_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST",
        "PUT",
        "DELETE"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "request_body": {
      "type": "string",
      "description": "Request body (for POST/PUT requests)"
    },
    "use_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use current authentication if available"
    }
  },
  "required": [
    "endpoint"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
sql_injection_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "parameter_name": {
      "type": "string",
      "description": "Name of the parameter to test for SQL injection"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST",
        "PUT"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "original_value": {
      "type": "string",
      "description": "Original value for the parameter"
    },
    "use_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use current authentication if available"
    }
  },
  "required": [
    "endpoint",
    "parameter_name",
    "original_value"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
token_auth
Input schema
{
  "type": "object",
  "properties": {
    "token": {
      "type": "string",
      "description": "Authentication token"
    },
    "token_type": {
      "type": "string",
      "default": "Bearer",
      "description": "Token type (Bearer, JWT, etc.)"
    },
    "refresh_token": {
      "type": "string",
      "description": "Refresh token (if available)"
    },
    "expires_in": {
      "type": "number",
      "description": "Token expiration time in seconds"
    }
  },
  "required": [
    "token"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
xss_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "parameter_name": {
      "type": "string",
      "description": "Name of the parameter to test for XSS"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST",
        "PUT"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "use_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use current authentication if available"
    }
  },
  "required": [
    "endpoint",
    "parameter_name"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——

Resources 10

  • Auth bypass Testing Guideguides://api-testing/auth-bypass

    Comprehensive guide for testing auth bypass vulnerabilities

  • Authentication Security Checklistcybersecurity://checklists/authentication

    Security checklist for authentication vulnerabilities

  • Data leakage Security Checklistcybersecurity://checklists/data_leakage

    Security checklist for data leakage vulnerabilities

  • General Security Checklistcybersecurity://checklists/general

    Security checklist for general vulnerabilities

  • Injection Security Checklistcybersecurity://checklists/injection

    Security checklist for injection vulnerabilities

  • Jwt testing Testing Guideguides://api-testing/jwt-testing

    Comprehensive guide for testing jwt testing vulnerabilities

  • Rate limiting Security Checklistcybersecurity://checklists/rate_limiting

    Security checklist for rate limiting vulnerabilities

  • Rate limiting Testing Guideguides://api-testing/rate-limiting

    Comprehensive guide for testing rate limiting vulnerabilities

  • Sql injection Testing Guideguides://api-testing/sql-injection

    Comprehensive guide for testing sql injection vulnerabilities

  • Xss Testing Guideguides://api-testing/xss

    Comprehensive guide for testing xss vulnerabilities

Resource templates 2

  • cybersecurity_checklistscybersecurity://checklists/{category}
  • testing_guidesguides://api-testing/{topic}

Prompts 0

  • None observed.

Remote endpoints

EndpointTransportAuthenticationHealthObserved
No verified remote endpoint is linked.

CyberMCP MCP Server questions

How do I install CyberMCP MCP Server?

No verified package installation command is available in the retained catalog evidence.

What tools does CyberMCP MCP Server provide?

CyberMCP MCP Server exposed 14 tools during independent protocol observation, including api_login, auth_bypass_check, auth_status, basic_auth, clear_auth, jwt_vulnerability_check, oauth2_auth, path_traversal_check, and others.

Is CyberMCP MCP Server secure?

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

Explore related MCP server guides

Curated product and capability guides containing this catalog record.

Official vs Community MCP Servers

Let’s talk about MCP security.

Share your details and our security team will contact you.