rad-security/mcp-server

RAD Security MCP Server for AI-powered security insights

→ rad-security/mcp-server· npm: @rad-security/mcp-server· listed on npm

Install from

npm npm mcp.so

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: RAD_SECURITY_SECRET_KEY, RAD_SECURITY_SESSION_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configEXCLUDE_TOOLKITS— Comma-separated list of toolkits to exclude (all except these will be enabled)

configINCLUDE_TOOLKITS— Comma-separated list of toolkits to include (only these will be enabled)

configLOG_FORMAT

configLOG_LEVEL

configPORT

configRAD_SECURITY_ACCESS_KEY_ID— "your_access_key"

configRAD_SECURITY_ACCOUNT_ID— "your_account_id"

configRAD_SECURITY_API_URL

🔐 secretRAD_SECURITY_SECRET_KEY— "your_secret_key"

🔐 secretRAD_SECURITY_SESSION_TOKEN

configRAD_SECURITY_TENANT_ID— "your_tenant_id" # Optional: If not provided, will be fetched automatically from the account

configTRANSPORT_TYPE— e =streamable \

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/rad-security-mcp-server-cx2mhq)](https://m8ven.ai/mcp/rad-security-mcp-server-cx2mhq)

commit: 9a10050ef8aa9f34285c7ca602576fe5d2830298

code hash: 4b8065f1eff0e793f326b5dae4e8bba08cc498a76f7fec111cf590d14b7c34b7

verified: 4/18/2026, 4:18:44 PM

view raw JSON →