AppSec Toolbox MCP

Passive AppSec scanners as eight parameterless MCP tools; the audited repository is data.

What does this entry provide?

AppSec Toolbox MCP is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 78/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding AppSec Toolbox MCP to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.

Snapshot facts

Source: Official MCP Registry
Quality: 78/100
Install method: oci
Repo: ai-ronin-systems/appsec-toolbox-mcp
Repo updated: Oct 25, 2026

Install command

docker run -i --rm ghcr.io/ai-ronin-systems/appsec-toolbox-mcp:0.3.0

Install method: oci

Review the upstream source before running this command.

GitHub project

Quality

Repo stars

Repo updated

Oct 25, 2026

How is this score calculated?

Weighted across six dimensions, scored 0-100.
Provenance (25): listed in an official or curated registry.
Installability (25): a runnable install command beats a declared transport, which beats a source checkout.
Maintenance (20): recency of the last push; archived entries score zero here.
Adoption (20): repository stars on a log curve.

MCP manifest

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-25T13:57:57.911846Z",
      "publishedAt": "2026-10-25T13:57:57.911846Z",
      "statusChangedAt": "2026-10-25T13:57:57.911846Z"
    }
  },
  "server": {
    "name": "io.github.ai-ronin-systems/appsec-toolbox-mcp",
    "title": "AppSec Toolbox MCP",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.3.0",
    "packages": [
      {
        "transport": {
          "type": "stdio"
        },
        "identifier": "ghcr.io/ai-ronin-systems/appsec-toolbox-mcp:0.3.0",
        "registryType": "oci",
        "runtimeArguments": [
          {
            "name": "--read-only",
            "type": "named",
            "description": "Read-only root filesystem"
          },
          {
            "name": "--cap-drop",
            "type": "named",
            "value": "ALL",
            "description": "Drop all Linux capabilities"
          },
          {
            "name": "--security-opt",
            "type": "named",
            "value": "no-new-privileges:true",
            "description": "No privilege escalation"
          },
          {
            "name": "--tmpfs",
            "type": "named",
            "value": "/tmp:rw,nosuid,nodev,size=3g",
            "description": "Scanner caches; counts toward --memory"
          },
          {
            "name": "--memory",
            "type": "named",
            "value": "6g",
            "description": "Memory cap, including the /tmp tmpfs"
          },
          {
            "name": "--pids-limit",
            "type": "named",
            "value": "512",
            "description": "Process cap"
          },
          {
            "name": "--mount",
            "type": "named",
            "value": "type=bind,src={target_dir},dst=/runner/target,readonly",
            "variables": {
              "target_dir": {
                "format": "filepath",
                "isRequired": true,
                "description": "Absolute host path of the repository to audit"
              }
            },
            "isRequired": true,
            "description": "The repository to audit, mounted read-only"
          },
          {
            "name": "--mount",
            "type": "named",
            "value": "type=bind,src={output_dir},dst=/runner/output",
            "variables": {
              "output_dir": {
                "format": "filepath",
                "isRequired": true,
                "description": "Absolute host path for the evidence; must be writable by the container user"
              }
            },
            "isRequired": true,
            "description": "Where reports, the run manifest, and the audit log are written"
          }
        ],
        "environmentVariables": [
          {
            "name": "APPSEC_LANGS",
            "default": "auto",
            "description": "Language profiles: auto, none, or a list such as python,node"
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/ai-ronin-systems/appsec-toolbox-mcp",
      "source": "github"
    },
    "websiteUrl": "https://github.com/ai-ronin-systems/appsec-toolbox-mcp",
    "description": "Passive AppSec scanners as eight parameterless MCP tools; the audited repository is data."
  }
}

Report an issue with this listing