MCP Server

What this is

MCP(Model Context Protocol) is how an AI assistant calls out to external tools mid-conversation. SecArsenal runs a small, public MCP server so Claude — or any MCP-compatible client — can look up real catalog data (which distro bundles what, what a tool actually does, what platform it targets) instead of relying on training-data guesses. It's read-only: no tool here can add, edit, or delete anything.

Connecting a client

Add this to your MCP client's config (Claude Desktop, Claude Code, or any other client that speaks Streamable HTTP):

{
  "mcpServers": {
    "secarsenal": {
      "url": "https://mcp.secarsenal.org/mcp"
    }
  }
}

Tools exposed

All read-only, no authentication required:

• search_tools — free-text/category/platform search over the tools collection
• get_tool — fetch one tool by slug
• search_os — free-text/category/team search over the OS collection
• get_os — fetch one OS entry by slug
• list_categories — every category currently in use, for both collections

Prefer raw data?

The same underlying data is available as plain JSON at/catalog.json— no MCP client needed, just an HTTP GET.

Limits and source

The endpoint is rate-limited since it's open to the public internet. It's a separate Cloudflare Worker from the main site, polling/catalog.jsonhourly rather than querying on every call. Source, data flow, and deploy process are documented inmcp-server/README.md ↗.