SERVER

SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP

Rank #161,958

smithery/tofan96you/secforge-mcp

Turn your AI agent into a senior application security engineer: threat-model your product (assets, attackers, surfaces, abuse cases), harden OWASP Top 10 with vulnerable-vs-fixed code pairs (IDOR, injection, SSRF, auth failures) plus AI-codegen warning patterns, lock down secrets and supply chain (OIDC CI, lockfile discipline, leaked-secret emergency runbooks), configure strict nonce-based CSP and security headers with zero-breakage rollouts, and prepare SOC 2 audits, pentests, incident response and bug bounty launches. Free tier: 10 requests/day. Pro $7.99 lifetime or All-Access Suite $14.99 lifetime (Gumroad + Solana USDC). NEW v1.1 - audit_security_headers_live: Scans the REAL security headers of any live URL: CSP, HSTS, X-Frame-Options and more, with prioritized fixes.

Versions unknown

First listed

Oct 9, 2026

Last publish date

—

PURPOSE

What you can do with SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP

SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP is a Model Context Protocol (MCP) server. It ranks #161,958 of 162,202 active servers on MCP Toplist. SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP is listed on Smithery; no version information is available from the registries that list it or from its repository. It was first listed on Oct 9, 2026.

Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. Its registry listings below are the authority on what it does.

CAPABILITIES AND LIMITATIONS

What SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP can and cannot do

Not verifiedMCP Toplist has not catalogued this server's tools or limitations. Check its registry listings below.

REQUIREMENTS

What you need before using SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP

DeclaredRemote authHosted remote, sign-in declared

The hosted endpoint is declared as gated by authentication — connect via its URL and authenticate with the provider (OAuth flow or an API key/header, per its docs).

Declared by Smithery, last synced Oct 28, 2026. Not independently verified by MCP Toplist.

Declared in the registry install config

Hosted endpoint declared as requiring authentication.

INSTALLATION AND FIRST TASK

Connect SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP and confirm it works

Remote · HTTP

claude mcp add --transport http secforge-mcp https://server.smithery.ai/tofan96you/secforge-mcp/mcp

This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

[mcp_servers.secforge-mcp]
url = "https://server.smithery.ai/tofan96you/secforge-mcp/mcp"

Add to ~/.codex/config.toml. This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

https://server.smithery.ai/tofan96you/secforge-mcp/mcp

Settings → Connectors → “Add custom connector”, then paste this URL. This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

{
  "mcpServers": {
    "secforge-mcp": {
      "url": "https://server.smithery.ai/tofan96you/secforge-mcp/mcp"
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

{
  "servers": {
    "secforge-mcp": {
      "type": "http",
      "url": "https://server.smithery.ai/tofan96you/secforge-mcp/mcp"
    }
  }
}

Save as .vscode/mcp.json in your workspace. This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

{
  "mcpServers": {
    "secforge-mcp": {
      "serverUrl": "https://server.smithery.ai/tofan96you/secforge-mcp/mcp"
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json. This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

{
  "mcpServers": {
    "secforge-mcp": {
      "url": "https://server.smithery.ai/tofan96you/secforge-mcp/mcp"
    }
  }
}

This endpoint requires authentication — see the server’s docs for credentials.

First successful task

After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.

MAINTENANCE AND EVIDENCE

What changed, and when this was checked

First listed: Oct 9, 2026
Version history: Unavailable — no registry exposes versions and no release tags were found
Requirements evidence: Declared by Smithery, last synced Oct 28, 2026. Not independently verified by MCP Toplist.
Profile checked: Not yet — purpose, capabilities and requirements above come from registry data only
Ranking data as of: Oct 28, 2026

Registry sightings

Smithery ↗listed since Oct 28, 2026 · still listed

Do you maintain SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP? to correct or enrich this profile.

VERSIONS

Version information unavailable

The registry that lists this server does not expose version metadata, and no release tags were found on the linked repository. MCP Toplist cannot say how, or whether, this server is versioned.

STANDING

#161,958of 162,202 active servers

Ranks ahead of 244 of 162,202 servers on MCP Toplist.

BADGE

Show your rank

Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.

Markdown

[![MCP Toplist](https://mcptoplist.com/badge/smithery%2Ftofan96you%2Fsecforge-mcp.svg)](https://mcptoplist.com/server/smithery%2Ftofan96you%2Fsecforge-mcp)

HTML

<a href="https://mcptoplist.com/server/smithery%2Ftofan96you%2Fsecforge-mcp"><img src="https://mcptoplist.com/badge/smithery%2Ftofan96you%2Fsecforge-mcp.svg" alt="MCP Toplist: #161,958 of 162,202" /></a>

Variants: append ?metric=score or ?metric=stars to the image URL.

FAQ

Frequently asked questions

Is SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP listed on the Official MCP Registry?: SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP is not on the Official MCP Registry. It is listed on Smithery.
How many versions does SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP have?: Version information is unavailable for SecForge - Autonomous Application Security, Threat Modeling, OWASP Hardening, Secrets Management & Incident Response Engine MCP: no registry that lists it exposes version metadata, and no release tags were found on its repository.

Used in projects

Do you run this server?

Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.

EXPLORE

All MCP Servers Best MCP Servers Most Active MCP Servers New MCP Servers Best New MCP Servers