SecOps Toolkit

What it does

SecOps Toolkit is a dependency-light MCP server providing essential defensive security utilities. It helps AI assistants analyze logs, threat-intel notes, and network data locally without making outbound network calls.

Tools

• extract_iocs: Pulls IPs, URLs, domains, and hashes from text, handling defanged input.
• defang_ioc/refang_ioc: Safely masks or restores security indicators.
• hash_text: Generates MD5, SHA1, SHA256, or SHA512 hashes.
• password_entropy: Estimates password strength in bits.
• cidr_info/ip_in_cidr: Performs network range calculations and membership checks.
• scan_repo_root: Detects binaries shadowing common commands to prevent agentic execution attacks.
• assess_shell_command: Analyzes shell commands for obfuscation and bypass techniques using POSIX tokenization.

Installation

Add this to your claude_desktop_config.json:

{
  "mcpServers": {
    "secops-toolkit": {
      "command": "uv",
      "args": ["run", "--directory", "/absolute/path/to/secops-toolkit-mcp", "secops-toolkit-mcp"]
    }
  }
}

Supported hosts

• claude