io.github.xu-c0/cybersec-mcp
cybersec-mcp
Is the io.github.xu-c0/cybersec-mcp MCP server down? No. It answered initialize and tools/list in the probe of 2026-10-27.
Cybersecurity MCP server: 323 prompts + 7 workflows for red team, blue team, SOC, cloud, OSINT.
alive probed 2026-11-15 · unchanged since 2026-10-27
- Run it
- npx -y @xu-c0/cybersec-mcp@0.1.2 (stdio, probed in a container with the network off)
- Host
- npmjs.com
- Reports itself as
- cybersec-mcp 0.1.0
- Capabilities
- tools
- Instructions
- none
- Of a 1M window
- 0.1 % of a 1M context window
- Count
- 1.3k tokens in Claude Opus 5.5, exact, measured 2026-10-27. With the Claude Code prefix mcp__…__ on each tool name: 1.3k. The o200k_base estimate is 711. Counted again when the tool definitions change. Method.
- Repository
- https://github.com/xu-c0/cybersec-mcp
- Registry
- active, updated 2026-05-20 · registry entry
- Changes
- 2 recorded, reachable in 2 of them. A row is added when the result, the tool count or the cost changes.
Most expensive tools
The Claude column scales the o200k estimate of each tool by this server's ratio of exact to estimate, 1.79×.
| Tool | ≈ Claude tokens | o200k estimate | Share of this server |
|---|---|---|---|
| cybersec_get_scenario | 370 | 207 | 29 % |
| cybersec_list_prompts | 361 | 202 | 28 % |
| cybersec_get_prompt | 288 | 161 | 23 % |
| cybersec_list_scenarios | 134 | 75 | 11 % |
| cybersec_list_categories | 118 | 66 | 9 % |
Compare this server with others.
More servers
Other registry entries on npmjs.com, the ones next to this name; all of them.
- FO Semantic MCP io.github.xplusplusai/fo-semantic-mcp · alive
- Perplexity Browser MCP io.github.xs1128/perplexity-browser-mcp · alive
- Playwright E2E MCP io.github.xsignon-secure/E2E · alive
- io.github.xsronhou/scrapio-mcp · alive
- Natal Chart Lab io.github.xucheng2024/natalchartlab · alive
- io.github.xultrax-web/agent-memory-mcp · needs env
- shibbo io.github.xvr2e7/shibbo · alive
- io.github.xxxoooxoxo/wiff · alive
Servers that mention cybersec.
- CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts) com.a2awire/data-cisa-advisory-ics-security-alert · alive
- Cybersecurity News & Breach Alerts — buy per-query in-session (bleepingwatch) com.a2awire/data-cybersecurity-news-breach-alert · alive
- InfoSec Job Board com.infosecjobboard/jobs · alive
- com.returnonsecurity/signal · needs auth
- eu.ansvar/us-law-mcp · paid (402)
- LogSentinel io.github.Evozim/logsentinel · not found
- Arkon Vault io.github.Havix0101/arkon-vault · needs auth
- Cybersecurity Threat Intelligence MCP io.github.FoundryNet/cyber-intel-mcp · timeout
History
We add a row when the result changes. A server with no change keeps its last row.
| Probed | Result | Init | Tools | Claude | o200k |
|---|---|---|---|---|---|
| 2026-10-27 07:00 | alive | 380 ms | 5 | 1.3k | 711 |
| 2026-10-20 06:46 | alive | 464 ms | 5 | 711 |
Badge for the README
The result of the latest probe, the tool count and the token cost. The feed has an entry for every probe that changed them.
A mail when this server changes
Stops answering, comes back, tool set or cost changes. One confirmation mail first, a stop link in every mail.
For the publisher
- The server answers initialize and tools/list. Nothing to fix.