Secops Soar MCP Server
secops-soar-mcp
PyPI
v0.1.1
Published by google — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 2
high Shell/command execution in server code (secops_soar_mcp/marketplace/vmwarecarbonblackcloud.py)MTC-SRC-002
In the server's implementation (`secops_soar_mcp/marketplace/vmwarecarbonblackcloud.py:648`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: o override.")], include_child_processes: Annotated[bool, Field(default=None, description="If enabled, include IT Tool's
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server secops_soar_mcp/marketplace/vmwarecarbonblackcloud.py
medium Untrusted input can drive an external actionMTC-FLOW-005
Untrusted-input tools ([alien_vault_appliance_fetch_last_pcap_files, atlassian_confluence_server_get_page_by_id, atlassian_confluence_server_get_page_comments, awss3_download_file_from_bucket]) co-exist with external-action tools ([awss3_upload_file_to_bucket]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.
Evidence: untrusted [alien_vault_appliance_fetch_last_pcap_files, atlassian_confluence_server_get_page_by_id, atlassian_confluence_server_get_page_comments, awss3_downloa
Fix: Require confirmation for state-changing/egress actions triggered after processing untrusted content.
Location: flow alien_vault_appliance_fetch_last_pcap_files → awss3_upload_file_to_bucket
Tools 200
Each tool and what it can reach — statically extracted from the published source.
alien_vault_appliance_fetch_last_pcap_filesingests untrusted inputatlassian_confluence_server_get_page_by_idingests untrusted inputatlassian_confluence_server_get_page_commentsingests untrusted inputawss3_download_file_from_bucketingests untrusted inputawss3_upload_file_to_bucketnetwork egressactive_directory_add_user_to_groupno sensitive capabilityactive_directory_change_host_ouno sensitive capabilityactive_directory_change_user_ouno sensitive capabilityactive_directory_disable_accountno sensitive capabilityactive_directory_disable_computerno sensitive capability
Show 190 more tools ↓
active_directory_enable_accountno sensitive capabilityactive_directory_enable_computerno sensitive capabilityactive_directory_enrich_entitiesno sensitive capabilityactive_directory_force_password_updateno sensitive capabilityactive_directory_get_group_membersno sensitive capabilityactive_directory_get_manager_contact_detailsno sensitive capabilityactive_directory_is_user_in_groupno sensitive capabilityactive_directory_list_user_groupsno sensitive capabilityactive_directory_pingno sensitive capabilityactive_directory_release_locked_accountno sensitive capabilityactive_directory_remove_user_from_groupno sensitive capabilityactive_directory_search_active_directoryno sensitive capabilityactive_directory_set_user_passwordno sensitive capabilityactive_directory_update_attributes_of_an_ad_hostno sensitive capabilityactive_directory_update_attributes_of_an_ad_userno sensitive capabilityalexa_get_url_rankno sensitive capabilityalexa_pingno sensitive capabilityalgo_sec_allow_ipno sensitive capabilityalgo_sec_block_ipno sensitive capabilityalgo_sec_list_templatesno sensitive capabilityalgo_sec_pingno sensitive capabilityalgo_sec_wait_for_change_request_status_updateno sensitive capabilityalien_vault_anywhere_get_alarm_detailsno sensitive capabilityalien_vault_anywhere_list_eventsno sensitive capabilityalien_vault_anywhere_pingno sensitive capabilityalien_vault_appliance_enrich_assetsno sensitive capabilityalien_vault_appliance_enrich_vulnerabilitiesno sensitive capabilityalien_vault_appliance_get_pcap_files_for_eventsno sensitive capabilityalien_vault_appliance_get_vulnerability_reportsno sensitive capabilityalien_vault_appliance_pingno sensitive capabilityalien_vault_ti_enriches_entitiesno sensitive capabilityalien_vault_ti_pingno sensitive capabilityamazon_macie_create_custom_data_identifierno sensitive capabilityamazon_macie_delete_custom_data_identifierno sensitive capabilityamazon_macie_disable_macieno sensitive capabilityamazon_macie_enable_macieno sensitive capabilityamazon_macie_get_findingsno sensitive capabilityamazon_macie_list_findingsno sensitive capabilityamazon_macie_pingno sensitive capabilityanomali_get_related_associationsno sensitive capabilityanomali_get_threat_infono sensitive capabilityanomali_pingno sensitive capabilityanomali_staxx_pingno sensitive capabilityanomali_threat_stream_add_tags_to_entitiesno sensitive capabilityanomali_threat_stream_enrich_entitiesno sensitive capabilityanomali_threat_stream_get_related_associationsno sensitive capabilityanomali_threat_stream_get_related_entitiesno sensitive capabilityanomali_threat_stream_pingno sensitive capabilityanomali_threat_stream_remove_tags_from_entitiesno sensitive capabilityanomali_threat_stream_report_as_false_positiveno sensitive capabilityanomali_threat_stream_submit_observablesno sensitive capabilityany_run_analyze_fileno sensitive capabilityany_run_analyze_file_urlno sensitive capabilityany_run_analyze_urlno sensitive capabilityany_run_get_reportno sensitive capabilityany_run_pingno sensitive capabilityany_run_search_report_historyno sensitive capabilityapi_void_get_domain_reputationno sensitive capabilityapi_void_get_ip_reputationno sensitive capabilityapi_void_get_screenshotno sensitive capabilityapi_void_get_url_reputationno sensitive capabilityapi_void_pingno sensitive capabilityapi_void_verify_emailno sensitive capabilityapp_sheet_add_recordno sensitive capabilityapp_sheet_delete_recordno sensitive capabilityapp_sheet_list_tablesno sensitive capabilityapp_sheet_pingno sensitive capabilityapp_sheet_search_recordsno sensitive capabilityapp_sheet_update_recordno sensitive capabilityarc_sight_logger_pingno sensitive capabilityarc_sight_logger_send_queryno sensitive capabilityarcsight_add_entities_to_active_listno sensitive capabilityarcsight_add_entries_to_activelistno sensitive capabilityarcsight_change_case_stageno sensitive capabilityarcsight_get_activelist_entriesno sensitive capabilityarcsight_get_query_resultsno sensitive capabilityarcsight_get_reportno sensitive capabilityarcsight_is_value_in_activelist_columnno sensitive capabilityarcsight_list_resourcesno sensitive capabilityarcsight_pingno sensitive capabilityarcsight_searchno sensitive capabilityarea1_get_recent_indicatorsno sensitive capabilityarea1_pingno sensitive capabilityarea1_search_indicatorno sensitive capabilityarmis_enrich_entitiesno sensitive capabilityarmis_list_alert_connectionsno sensitive capabilityarmis_pingno sensitive capabilityarmis_update_alert_statusno sensitive capabilityatlassian_confluence_server_get_child_pagesno sensitive capabilityatlassian_confluence_server_list_pagesno sensitive capabilityatlassian_confluence_server_pingno sensitive capabilityattivo_enrich_entitiesno sensitive capabilityattivo_list_critical_threat_pathno sensitive capabilityattivo_list_service_threat_pathsno sensitive capabilityattivo_list_vulnerability_hostsno sensitive capabilityattivo_pingno sensitive capabilityattivo_update_eventno sensitive capabilityautomox_enrich_entitiesno sensitive capabilityautomox_execute_device_commandno sensitive capabilityautomox_execute_policyno sensitive capabilityautomox_list_policiesno sensitive capabilityautomox_pingno sensitive capabilityaws_cloud_trail_pingno sensitive capabilityaws_cloud_watch_create_log_groupno sensitive capabilityaws_cloud_watch_create_log_streamno sensitive capabilityaws_cloud_watch_delete_log_groupno sensitive capabilityaws_cloud_watch_delete_log_streamno sensitive capabilityaws_cloud_watch_list_log_groupsno sensitive capabilityaws_cloud_watch_list_log_streamsno sensitive capabilityaws_cloud_watch_pingno sensitive capabilityaws_cloud_watch_remove_retention_policyno sensitive capabilityaws_cloud_watch_search_log_eventsno sensitive capabilityaws_cloud_watch_set_retention_policyno sensitive capabilityaws_guard_duty_archive_findingsno sensitive capabilityaws_guard_duty_create_a_detectorno sensitive capabilityaws_guard_duty_create_a_trusted_ip_listno sensitive capabilityaws_guard_duty_create_sample_findingsno sensitive capabilityaws_guard_duty_create_threat_intelligence_setno sensitive capabilityaws_guard_duty_delete_a_detectorno sensitive capabilityaws_guard_duty_delete_a_trusted_ip_listno sensitive capabilityaws_guard_duty_delete_threat_intelligence_setno sensitive capabilityaws_guard_duty_get_a_trusted_ip_listno sensitive capabilityaws_guard_duty_get_all_trusted_ip_listsno sensitive capabilityaws_guard_duty_get_detector_detailsno sensitive capabilityaws_guard_duty_get_finding_detailsno sensitive capabilityaws_guard_duty_get_threat_intelligence_set_detailsno sensitive capabilityaws_guard_duty_list_detectorsno sensitive capabilityaws_guard_duty_list_findings_for_a_detectorno sensitive capabilityaws_guard_duty_list_threat_intelligence_setsno sensitive capabilityaws_guard_duty_pingno sensitive capabilityaws_guard_duty_unarchive_findingsno sensitive capabilityaws_guard_duty_update_a_detectorno sensitive capabilityaws_guard_duty_update_a_trusted_ip_listno sensitive capabilityaws_guard_duty_update_findings_feedbackno sensitive capabilityaws_guard_duty_update_threat_intelligence_setno sensitive capabilityaws_security_hub_create_insightno sensitive capabilityaws_security_hub_get_insight_detailsno sensitive capabilityaws_security_hub_pingno sensitive capabilityaws_security_hub_update_findingno sensitive capabilityaws_security_hub_update_insightno sensitive capabilityawsec2_authorize_security_group_egressno sensitive capabilityawsec2_authorize_security_group_ingressno sensitive capabilityawsec2_create_tagsno sensitive capabilityawsec2_list_instancesno sensitive capabilityawsec2_list_security_groupsno sensitive capabilityawsec2_pingno sensitive capabilityawsec2_revoke_security_group_egressno sensitive capabilityawsec2_revoke_security_group_ingressno sensitive capabilityawsec2_start_instanceno sensitive capabilityawsec2_stop_instanceno sensitive capabilityawsec2_take_snapshotno sensitive capabilityawsec2_terminate_instanceno sensitive capabilityawsiam_access_analyzer_archive_findingno sensitive capabilityawsiam_access_analyzer_pingno sensitive capabilityawsiam_access_analyzer_scan_resourcesno sensitive capabilityawsiam_add_a_user_to_a_groupno sensitive capabilityawsiam_attach_a_policyno sensitive capabilityawsiam_create_a_groupno sensitive capabilityawsiam_create_a_policyno sensitive capabilityawsiam_create_a_userno sensitive capabilityawsiam_disable_user_accessno sensitive capabilityawsiam_list_groupsno sensitive capabilityawsiam_list_policiesno sensitive capabilityawsiam_list_usersno sensitive capabilityawsiam_pingno sensitive capabilityawsiam_remove_a_user_from_a_groupno sensitive capabilityawss3_get_bucket_policyno sensitive capabilityawss3_list_bucket_objectsno sensitive capabilityawss3_list_bucketsno sensitive capabilityawss3_pingno sensitive capabilityawss3_set_bucket_policyno sensitive capabilityawswaf_add_pattern_to_regex_pattern_setno sensitive capabilityawswaf_create_ip_setno sensitive capabilityawswaf_create_regex_pattern_setno sensitive capabilityawswaf_create_rule_groupno sensitive capabilityawswaf_create_web_aclno sensitive capabilityawswaf_list_ip_setsno sensitive capabilityawswaf_pingno sensitive capabilityawswaf_remove_rule_from_rule_groupno sensitive capabilityawswaf_remove_rule_from_web_aclno sensitive capabilitychange_case_priorityno sensitive capabilityget_case_full_detailsno sensitive capabilityget_entities_by_alert_group_identifiersno sensitive capabilityget_entity_detailsno sensitive capabilitylist_alert_group_identifiers_by_caseno sensitive capabilitylist_alerts_by_caseno sensitive capabilitylist_casesno sensitive capabilitylist_events_by_alertno sensitive capabilitypost_case_commentno sensitive capabilitysearch_entityno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.1.1 latest |
A 93/100 | 2 | 1.9.0 | 2026-07-23 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan secops-soar-mcp --online --registry pypiMore in Developer Tools
Security scan results for the 1stay MCP server.
Security scan results for the Adguard Home MCP server.
Security scan results for the Ado Browser MCP server.
Security scan results for the Adobe Experience Dev MCP server.
Security scan results for the Aemet MCP server.
Security scan results for the Affinity Mcp Bridge MCP server.