What it does

SecObserve vulnerability and license management: triage observations, manage products and rules, import scan reports and SBOMs, run scans and generate VEX.

Local connectionPricing not confirmedv1.0.0

Connection manifest

Public connection metadata from the source. Follow the provider’s setup guide for authentication, permissions, and required variables.

{
  "name": "io.github.nh4ttruong/secobserve-mcp",
  "version": "1.0.0",
  "repository": {
    "url": "https://github.com/nh4ttruong/secobserve-mcp"
  },
  "remotes": [],
  "packages": [
    {
      "registryType": "pypi",
      "identifier": "secobserve-mcp",
      "version": "1.0.0",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "name": "SECOBSERVE_BASE_URL",
          "isRequired": true
        },
        {
          "name": "SECOBSERVE_API_TOKEN",
          "isRequired": true
        },
        {
          "name": "SECOBSERVE_READ_ONLY",
          "isRequired": false
        },
        {
          "name": "SECOBSERVE_ALLOW_DELETE",
          "isRequired": false
        }
      ]
    },
    {
      "registryType": "oci",
      "identifier": "ghcr.io/nh4ttruong/secobserve-mcp:1.0.0",
      "version": "",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "name": "SECOBSERVE_BASE_URL",
          "isRequired": true
        },
        {
          "name": "SECOBSERVE_API_TOKEN",
          "isRequired": true
        },
        {
          "name": "SECOBSERVE_READ_ONLY",
          "isRequired": false
        },
        {
          "name": "SECOBSERVE_ALLOW_DELETE",
          "isRequired": false
        }
      ]
    }
  ]
}

Metadata reviewed for listing. Server code, permissions, and runtime behavior have not been security-audited. Directory access is free; individual providers may charge.