Back to Home
rad-security icon

mcp-server

Verified Safe

by rad-security

Overview

Provides AI-powered security insights and operational capabilities for Kubernetes and cloud environments by exposing Rad Security APIs as Model Context Protocol (MCP) tools.

Installation

Run Command
npx @rad-security/mcp-server

Environment Variables

  • RAD_SECURITY_ACCESS_KEY_ID
  • RAD_SECURITY_SECRET_KEY
  • RAD_SECURITY_ACCOUNT_ID
  • RAD_SECURITY_TENANT_ID
  • RAD_SECURITY_API_URL
  • INCLUDE_TOOLKITS
  • EXCLUDE_TOOLKITS
  • TRANSPORT_TYPE
  • PORT

Security Notes

The server retrieves API credentials from environment variables. It implements multiple transport types (Stdio, SSE, Streamable HTTP). For SSE and Streamable HTTP, the default CORS configuration allows all origins ('*'). While this simplifies local development and IDE integration, it should be carefully reviewed and restricted in production deployments for enhanced security. No obvious hardcoded secrets, 'eval', or malicious patterns were found in the truncated source code. Certain operations (CVEs, misconfiguration policies) are available without authentication, as explicitly stated in the README.

Similar Servers

Stats

Interest Score35
Security Score8
Cost ClassMedium
Avg Tokens750
Stars5
Forks5
Last Update2025-12-04

Tags

MCPSecurityKubernetesCloudAIObservability