GhidraMCP vs Securitytrails
A side-by-side look at the GhidraMCP and Securitytrails MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
Verdict: choose GhidraMCP for security work over a hosted endpoint; choose Securitytrails for security as a local process. You can also run both side by side in one mcpServers block.
Which MCP server should you choose?
Choose GhidraMCP when
- You need dedicated capabilities in the Security domain.
- You prefer a remote HTTP/SSE transport.
- Its auth model fits you: No auth required.
Choose Securitytrails when
- You need dedicated capabilities in the Security domain.
- You prefer a local stdio subprocess transport.
- You want tools like
securitytrails_domain, securitytrails_subdomains, securitytrails_dns_history.
Feature & specification comparison
Rows where the two servers differ are marked.
| Spec | ||
|---|---|---|
| Category | Security | Security |
| Quality signal | 60/100 · Good | 53/100 · Good |
| Install command | Confirmed | Confirmed |
| Transport | Remote HTTP/SSE | Local subprocess (stdio) |
| Auth | No auth required | Not declared |
| Pricing | Free | Not declared |
| Required env vars | None listed | None listed |
| Verified owner | Community listing | Community listing |
| GitHub stars | 11,497 | 0 |
| Directory activity | 12 views 0 installs 0 upvotes | 0 views 0 installs 0 upvotes |
| Tools | Not listed | 4 |
| Full listing | View GhidraMCP | View Securitytrails |
Tools & capabilities
GhidraMCP tools
No tool names declared yet. Check the project README from the listing page.
Securitytrails tools 4
securitytrails_domainDomain intel (DNS, subdomain count) for <hostname>. Returns current A/MX/NS records, subdomain count, and Alexa rank. Example: securitytrails_domain({ hostname: "github.com", _apiKey: "your-key" })securitytrails_subdomainsEnumerate subdomains of <hostname>. Returns the subdomain labels plus fully-qualified domains. Example: securitytrails_subdomains({ hostname: "github.com", _apiKey: "your-key" })securitytrails_dns_historyHistorical DNS records for <hostname>. Returns past record values with first/last-seen dates for a given record type (a, aaaa, mx, ns, soa, txt). Example: securitytrails_dns_history({ hostname: "github.com", type: "a", _apiKey: "your-key" })securitytrails_whoisWHOIS for <hostname>. Returns registrar, creation/expiration dates, and registration contacts. Example: securitytrails_whois({ hostname: "github.com", _apiKey: "your-key" })
Ready-to-paste client configs
Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
GhidraMCP
{
"mcpServers": {
"lauriewired-ghidramcp": {
"url": "http://127.0.0.1:8081/sse"
}
}
}
Securitytrails
{
"mcpServers": {
"securitytrails": {
"command": "npx",
"args": [
"-y",
"@pipeworx/mcp-securitytrails"
]
}
}
}
Frequently asked questions
GhidraMCP is categorized under Security and uses a remote HTTP/SSE transport. Securitytrails belongs to Security and uses a local stdio subprocess. Pick GhidraMCP for security work and Securitytrails for security.
Copy the mcpServers block from the config section on this page into your client's config (for example claude_desktop_config.json or ~/.cursor/mcp.json), then fully restart the client.
GhidraMCP is listed as free. Auth: no auth required. Securitytrails has no declared pricing — check the project's own site. If a server needs environment variables such as API keys, define them under the env key in your client's MCP config.
Yes. MCP clients support multiple servers: add lauriewired-ghidramcp and securitytrails as separate keys in the same mcpServers object, and your assistant will call tools from either one.
On AllMCPs, GhidraMCP has a quality signal of 60/100 (Good) with 12 views, 0 installs and 11,497 GitHub stars. Securitytrails has 53/100 (Good) with 0 views, 0 installs and 0 GitHub stars.