Sectora
Wire Claude Code or Cursor to Sectora so agents can pull CVE/EPSS/KEV intel, package vuln lookups, DAST context, and your Shield posture alongside existing scan findings.
Overview
Sectora is a MCP server for the Ship phase that exposes threat intelligence and your scan findings and Shield posture to agents via CVE, EPSS, KEV, package vuln lookup, and DAST context.
What is this MCP server?
- Remote streamable-http MCP at mcp.sectora.io (server version 1.1.0)
- CVE, EPSS, and CISA KEV lookups plus package vulnerability search
- Correlates threat intel with your scans, findings, and Shield posture
- DAST-oriented context for agent-driven security reviews
- GitHub: BraineeTech/sectora
- MCP server schema version 1.1.0
- Remote endpoint: https://mcp.sectora.io/mcp
- Capabilities called out: CVE, EPSS, KEV, package vuln lookup, DAST
What problem does it solve?
Agents guess at severity and miss how a CVE ties to your actual scan results and production Shield state.
Who is it for?
Indie builders with Sectora or compatible scanning who want MCP-native vuln lookup during code review and release checks.
Skip if: Teams without a threat/posture data source who only need generic OWASP checklists in a skill file.
What do I get? / Deliverables
Your agent answers vulnerability questions with intel plus your recorded findings so you can triage and harden faster.
- Agent-grounded CVE/EPSS/KEV and package vuln answers
- Context that references your findings and Shield posture
- Faster security triage prompts during ship and operate
Recommended MCP Servers
Journey fit
How it compares
Hosted security intel MCP, not a local static security skill or generic web browser automation server.
Common Questions / FAQ
Who is Sectora for?
Solo and small-team builders using Claude Code, Cursor, or similar agents who already lean on Sectora-style scans and want CVE/KEV/EPSS lookup in the loop.
When should I use Sectora?
During ship security review, dependency upgrades, or operate monitoring when you need package vuln context aligned with your findings and Shield posture.
How do I add Sectora to my agent?
Register the remote MCP URL https://mcp.sectora.io/mcp (streamable-http) in your client’s MCP config per sectora.io/mcp and authenticate if your tenant requires it.