Onsecurity MCP Server

🚀 OnSecurity MCP

A Model Context Protocol (MCP) server for the OnSecurity API that enables Claude to query rounds, findings, prerequisites, and notifications.

🚀 Quick Start

This OnSecurity MCP server provides Claude with the ability to access various information through the OnSecurity API.

📦 Installation

Installing via Smithery

To automatically install the server for Claude Desktop via Smithery, use the following command:

npx -y @smithery/cli install @onsecurity/onsecurity-mcp-server --client claude

Manual Installation

First, navigate to the project directory and build the project:

cd onsecurity-mcp-server
npm run build

Then, add the following configuration to your Claude Desktop configuration file (adjust the paths as needed) and choose UAT or Prod:

{
  "mcpServers": {
    "onsec-mcp": {
      "command": "node",
      "args": [
        "/path/to/onsecurity-mcp-server/build/index.js"
      ],
      "env": {
        "ONSECURITY_API_TOKEN": "your_api_token",
        "ONSECURITY_API_BASE": "https://app.onsecurity.io/api/v2"
      }
    }
  }
}

After adding this configuration, restart Claude Desktop, and you'll be able to access the OnSecurity tools through Claude.

💻 Usage Examples

Basic Usage

Once configured, Claude will have access to the following tools:

• get-rounds
• get-findings
• get-blocks
• get-notifications
• get-prerequisites

Example Questions

• Give me a summary of my most recent pentest/scan.
• Show me trends across my pentests as a graph.
• What can I address to make the most impact most quickly on my most recent pentest?
• I would like summaries for different types of stakeholders on the state of our recent pentest engagemenets - eg high level, technical, managerial etc
• Do I need to action anything to prevent test getting held up?
• Are there any new findings?
• What are the top 10 most common findings across pentests and scans.

💡 Usage Tip

It is useful sometimes to configure Claude to "Extended thinking" for some questions.