# SecureNow [Health: Active]

**Category:** 🔒 Security  
**Repository:** https://github.com/securenow-ai/securenow-npm  
**GitHub Stars:** 0  
**npm Downloads (last month):** 1648  
**Views:** 0  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/securenow

## Description
Production security for Node.js apps: investigate live attacks, block IPs, tune detections.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "securenow": {
    "command": "npx",
    "args": ["-y","securenow"],
    "env": {
      "SECURENOW_APPID": "",
      "SECURENOW_INSTANCE": "",
      "SECURENOW_LOGGING_ENABLED": "",
      "SECURENOW_NO_UUID": "",
      "OTEL_LOG_LEVEL": "",
      "SECURENOW_DISABLE_INSTRUMENTATIONS": "",
      "OTEL_EXPORTER_OTLP_HEADERS": "",
      "SECURENOW_CAPTURE_BODY": ""
    }
  }
}
```

**Requires environment variables:** `SECURENOW_APPID`, `SECURENOW_INSTANCE`, `SECURENOW_LOGGING_ENABLED`, `SECURENOW_NO_UUID`, `OTEL_LOG_LEVEL`, `SECURENOW_DISABLE_INSTRUMENTATIONS`, `OTEL_EXPORTER_OTLP_HEADERS`, `SECURENOW_CAPTURE_BODY` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What SecureNow MCP server does

The supplied repository describes SecureNow as an npm package for OpenTelemetry instrumentation, not as an MCP server. It adds tracing to Node.js and Next.js applications and can export that telemetry to SigNoz or another OTLP-compatible backend. Optional logging support captures console output and associates logs with traces.

Supported web frameworks include Next.js, Express.js, Fastify, NestJS, Koa, and Hapi. Automatic instrumentation also covers PostgreSQL, MySQL and MySQL2, MongoDB, Redis, HTTP and HTTPS requests, GraphQL, gRPC, and other libraries supported by OpenTelemetry auto-instrumentation.

The SecureNow MCP server label therefore does not match the repository material. No MCP tools, prompts, resources, transport, or agent-facing API are documented.

## How it works

For Next.js, installing the package can detect the project and create an instrumentation file plus an `.env.local` template. The documented alternative is `npx securenow init`.

For other Node.js applications, the package is loaded with Node’s preload option. Tracing uses `-r securenow/register`. Adding `-r securenow/console-instrumentation` enables automatic collection of console output when logging is enabled.

Telemetry is sent to the configured SecureNow or OTLP collector endpoint. The default endpoint listed in the README is `https://freetrial.securenow.ai:4318`, while a SigNoz or other collector URL can be supplied through configuration.

## Setup and configuration

Install the package with npm, Yarn, or pnpm. Set `SECURENOW_APPID` to identify the application. `SECURENOW_INSTANCE` can point to the collector endpoint; it is optional because the package documents a default endpoint.

`SECURENOW_LOGGING_ENABLED=1` enables automatic log collection. Additional settings control service-name UUID behavior, OpenTelemetry log level, disabled instrumentations, OTLP authentication headers, request-body capture, maximum captured body size, and sensitive fields to redact. Legacy lowercase `securenow` and `securenow_instance` variables remain supported.

## Tools and capabilities

The package provides instrumentation capabilities rather than MCP tools:

- Collects traces from supported Node.js and Next.js applications.
- Sends traces and logs through OpenTelemetry.
- Captures console logging when enabled.
- Correlates logs with traces.
- Supports request-body capture and sensitive-field redaction settings.
- Instruments supported databases, web frameworks, and network protocols.

## Limitations and notes

The repository does not document an MCP implementation or any compatibility with MCP clients. It also does not describe agent operations for investigating attacks, blocking IP addresses, or tuning security detections. Those capabilities should not be inferred from this package’s security-oriented listing category.

_Full upstream README: https://allmcps.com/mcp/securenow/readme_