MCP server for SecObserve: triage vulnerability findings, manage products and rules, import scan reports and SBOMs, generate VEX documents
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add secobserve --env SECOBSERVE_BASE_URL='<SECOBSERVE_BASE_URL>' --env SECOBSERVE_API_TOKEN='<SECOBSERVE_API_TOKEN>' -- uvx secobserve-mcp~/.codex/config.toml
[mcp_servers.secobserve]
command = "uvx"
args = ["secobserve-mcp"]
env = { SECOBSERVE_BASE_URL = "<SECOBSERVE_BASE_URL>", SECOBSERVE_API_TOKEN = "<SECOBSERVE_API_TOKEN>" }
# codex mcp add secobserve --env SECOBSERVE_BASE_URL='<SECOBSERVE_BASE_URL>' --env SECOBSERVE_API_TOKEN='<SECOBSERVE_API_TOKEN>' -- uvx secobserve-mcp~/.cursor/mcp.json
{
"mcpServers": {
"secobserve": {
"command": "uvx",
"args": [
"secobserve-mcp"
],
"env": {
"SECOBSERVE_BASE_URL": "<SECOBSERVE_BASE_URL>",
"SECOBSERVE_API_TOKEN": "<SECOBSERVE_API_TOKEN>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"secobserve": {
"type": "stdio",
"command": "uvx",
"args": [
"secobserve-mcp"
],
"env": {
"SECOBSERVE_BASE_URL": "<SECOBSERVE_BASE_URL>",
"SECOBSERVE_API_TOKEN": "<SECOBSERVE_API_TOKEN>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"secobserve": {
"command": "uvx",
"args": [
"secobserve-mcp"
],
"env": {
"SECOBSERVE_BASE_URL": "<SECOBSERVE_BASE_URL>",
"SECOBSERVE_API_TOKEN": "<SECOBSERVE_API_TOKEN>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"secobserve": {
"command": "uvx",
"args": [
"secobserve-mcp"
],
"env": {
"SECOBSERVE_BASE_URL": "<SECOBSERVE_BASE_URL>",
"SECOBSERVE_API_TOKEN": "<SECOBSERVE_API_TOKEN>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"secobserve": {
"command": "uvx",
"args": [
"secobserve-mcp"
],
"env": {
"SECOBSERVE_BASE_URL": "<SECOBSERVE_BASE_URL>",
"SECOBSERVE_API_TOKEN": "<SECOBSERVE_API_TOKEN>"
}
}
}
}Environment variables
SECOBSERVE_BASE_URLSECOBSERVE_API_TOKEN
Replace the placeholders with your own credentials and keep them out of version control.