Advertise
MCP.so
Sign In

Bright Security MCP Server

@NeuraLegion

Repository

Basic information

Category

Developer Tools

Transports

stdio

Author

NeuraLegion

Submitted by

Or Rubin

About Bright Security MCP Server

Bright's MCP repo with relevant docs

Bright Security MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "brightsec.com": {
      "type": "sse",
      "url": "https://app.brightsec.com/mcp",
      "headers": {
        "Authorization": "Api-Key ${input:apiKey}"
      }
    }
  }
}

Bright Security MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list directly from this server's endpoint using the button above.

Overview

What is Bright Security Mcp?

Bright Security Mcp is a remote, cloud-hosted MCP server that brings AI‑powered application security testing into your development workflow. Your AI coding assistant can discover API endpoints, run security scans, and review vulnerabilities — all through natural language conversation. There is nothing to install locally; you simply point your MCP‑compatible client at Bright’s endpoint and authenticate with an API key.

How to use Bright Security Mcp?

  1. Create a dedicated Bright API key (personal, project, or organization‑level).
  2. Configure your MCP client (VS Code, Cursor, Windsurf, Augment Code, or any generic MCP client) to connect to https://app.brightsec.com/mcp using SSE transport with the Authorization: Api-Key YOUR_API_KEY header.
  3. Ask your AI assistant a natural language question such as “Scan https://my-app.example.com for security vulnerabilities” – the assistant will then use the available tools to perform the action.

Key features of Bright Security Mcp

  • Remote, cloud‑hosted MCP server – no local installation required.
  • Discover API endpoints via crawling or OpenAPI/Swagger definitions.
  • Run automated security scans against discovered entrypoints.
  • Manage vulnerabilities with filtering by severity and status.
  • Support for private/local applications via Bright Repeater agents.
  • Configure authentication (OAuth, headers, browser flows) for protected endpoints.

Use cases of Bright Security Mcp

  • Scan a public web application for vulnerabilities directly from your IDE.
  • Discover API endpoints from an OpenAPI specification and then scan them.
  • Scan a local or private application by setting up a repeater tunnel.
  • Check for critical and high‑severity issues in your project.
  • Run authenticated scans on APIs that require Bearer tokens or OAuth.

Frequently asked questions

1

Is Bright Security Mcp installed locally?

No. Bright Security Mcp is a remote, cloud‑hosted MCP server. You only configure your client to connect to `https://app.brightsec.com/mcp` and authenticate with an API key.

2

How do I authenticate my AI assistant with Bright?

You provide an API key in the `Authorization` header when configuring the MCP client. The format is `Api-Key YOUR_API_KEY`. The key can be personal, project, or organization‑level.

3

Can I scan applications that are not publicly accessible?

Yes. Bright uses Repeaters – lightweight agents that route scan traffic from Bright’s cloud through your local network. You create a repeater via the `createRepeater` tool and start it with the Bright CLI.

4

What security tests can be run?

Bright exposes various security tests (e.g., SQL injection, XSS, CSRF). You can list all available tests using the `listTests` tool and choose which to include in a scan.

5

Are there any data residency considerations?

If your organization uses a dedicated Bright cluster, replace `app.brightsec.com` in the server URL with your cluster’s hostname. Otherwise, all data is processed on Bright’s cloud platform.

Comments

More Developer Tools MCP servers

OrangePro

Aamir Siddiqui

OrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.

12

TaskerArmy Agent

TaskerArmy

Ask Claude or ChatGPT what Shopify theme optimization tasks are pending on your store, a remote MCP server for TaskerArmy Agent accounts.

consult

neelsatyavolu

Get a second opinion on your code from every coding agent you have. Claude Code, Codex and Grok review each other's diffs and answer each other's questions, even inside a session that's already running. Uses the CLIs you

Nebelus

Nebelus

Nebelus is an enterprise agentic-AI platform for regulated industries. This MCP server exposes the Nebelus Construction API: ~48 tools that give an MCP client full agent build parity — create/update/probe agents, edit ag

SSH MCP Server

hypnosis

SSH MCP server for AI agents: remote commands, file transfer, log search and server audits through OpenSSH.

1
Advertise