cybersec toolkit for VS Code

io.github.26zl/cybersec-toolkit

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

client:VS Code transport:stdio runtime:oci

Install cybersec toolkit in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "cybersec-mcp-allow-external",
      "description": "CYBERSEC_MCP_ALLOW_EXTERNAL",
      "password": true
    },
    {
      "type": "promptString",
      "id": "cybersec-mcp-allow-scripts",
      "description": "CYBERSEC_MCP_ALLOW_SCRIPTS",
      "password": true
    }
  ],
  "servers": {
    "cybersec-toolkit": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/26zl/cybersec-toolkit:1.3.0"
      ],
      "env": {
        "CYBERSEC_MCP_ALLOW_EXTERNAL": "${input:cybersec-mcp-allow-external}",
        "CYBERSEC_MCP_ALLOW_SCRIPTS": "${input:cybersec-mcp-allow-scripts}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

cybersec toolkit in other clients

cybersec toolkit MCP server