Log inSubmit server
MCP Server logo

MCP Server

by rad-security

Queries RAD Security for Kubernetes, container, vulnerability, runtime, finding, audit, and workflow data over MCP.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install MCP Server

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "rad-security-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@rad-security/mcp-server"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Install not yet sandbox-tested— the server itself is confirmed live (we called its tools/list endpoint). The stdio install command is a separate, ongoing check.

Overview

The rad-security/mcp-server MCP server connects AI clients to the RAD Security API for Kubernetes and cloud security data. It uses a hosted Streamable HTTP endpoint and bearer authentication, exposing tools for containers, clusters, images, vulnerabilities, runtime behavior, findings, audit logs, inbox items, and workflows. Read operations support filtering and detail lookups, while selected tools can update findings, manage CVE dispositions, classify inbox items, or create and run automations. Reach for it when an agent needs account-scoped RAD Security inventory, investigation data, or workflow automation.

Use cases

  • Investigate container runtime behavior and process trees
  • Review Kubernetes findings and audit activity
  • Prioritize vulnerable images and inspect their SBOMs
  • Triage inbox items and update finding dispositions
  • Run or create RAD Security workflow automations

Key features

  • Kubernetes cluster, resource, and container inventory
  • Image vulnerability and SBOM inspection
  • Runtime process trees, baselines, and analysis
  • Security findings, inbox, and pod shell audit tools
  • CVE disposition and finding-status updates
  • Workflow listing, execution, creation, and updates

Tools54

What MCP Server lets your agent do. Expand a tool for its parameters.

Verified live~9.1k tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

17/18 checks healthy over the last 79d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 7d ago via OSV.dev · @rad-security/mcp-server (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars6Stargazers on the source repository.
npm downloads822Package downloads in the last 30 days.
Last commit2d agoMost recent push to the default branch.
Tools exposed54Callable tools this server registers over MCP.
Directory activity3 viewsConfig copies, upvotes, and views on AllMCPs.

How MCP Server works

What rad-security/mcp-server MCP server does

The rad-security/mcp-server MCP server exposes RAD Security account data and actions to MCP-compatible AI clients. Its tools cover Kubernetes clusters and resources, secured containers, container images, vulnerabilities, SBOMs, runtime process data, security findings, inbox items, pod shell access, and workflow automations.

Inventory tools list clusters, containers, images, and Kubernetes resources, with filters available for several resource types. Investigation tools retrieve container and cluster details, image vulnerabilities, SBOMs, process trees, runtime baselines, LLM analysis of container processes, audit records, findings, and inbox item details.

The server also includes controlled write operations. An agent can change a finding status, mark an inbox item as a false positive, ignore or restore a CVE disposition, run a workflow, or create and update custom Windmill workflows from YAML. Ignoring a CVE is intended for false positives, accepted risks, or won't-fix decisions; remediated CVEs are expected to disappear after a later scan instead.

How it works

The hosted service is available at https://api.rad.security/mcp/ over Streamable HTTP. The trailing slash is required. Each request is authenticated against the RAD Security API with an Authorization bearer value containing an access key ID, secret key, and account ID.

By default, a connection receives every enabled toolkit. Request headers can reduce the exposed surface: X-Rad-Toolkits selects toolkits, X-Rad-Exclude-Toolkits removes selected toolkits, and X-Rad-Readonly: true limits the connection to read-only tools. This allows a client configuration to separate investigation access from mutation and automation access.

Setup and configuration

The rad-security/mcp-server MCP server can be added as a remote HTTP MCP connection in supported clients. The documented configurations cover Claude Code, OpenAI Codex CLI, Cursor, VS Code with GitHub Copilot, Gemini CLI, Cline, Windsurf, Claude.ai, and Claude Desktop. Field names differ by client, but the endpoint and bearer credential remain the same.

Create a RAD Security API access key in the RAD Security console and provide it as Bearer <access_key_id>:<secret_key>:<account_id>. Codex can alternatively read the combined credential from an environment variable named RAD_MCP_TOKEN. The endpoint can also be tested with MCP Inspector or a JSON-RPC curl request using Streamable HTTP headers.

Tools and capabilities

Available tool groups support:

  • Listing and inspecting clusters, containers, images, and Kubernetes resources.
  • Finding image vulnerabilities, top vulnerable images, SBOM data, and CVE dispositions.
  • Reviewing process trees, runtime baselines, and container process analysis.
  • Searching security findings, inbox items, and Kubernetes audit records for pod shell activity.
  • Listing workflows, schedules, and runs; inspecting workflow definitions and runs; and running, creating, or updating workflows.

Limitations and notes

All tools require authentication and a RAD Security account. The server operates against the account represented by the supplied credential. Write-capable tools can change security finding status, CVE reporting dispositions, inbox classification, or workflow configuration, so a read-only header is appropriate for agents that should only investigate.

Custom workflow definitions must be supplied as YAML text rather than a file path. The definition is validated before deployment; a failed validation does not deploy the workflow. Updates are limited to automations created through the custom-workflow creation tool. The hosted endpoint exposes the full toolkit by default, so explicit scoping is needed when an agent should see fewer tools.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about MCP Server

rad-security/mcp-server is an MCP server that connects AI clients to the RAD Security API for Kubernetes and cloud security data. Its main tools list and inspect clusters, containers, images, vulnerabilities, SBOMs, runtime data, findings, inbox items, audit logs, and workflow automations, with selected tools supporting updates and execution.

Use the hosted endpoint rather than installing or hosting the server: configure your MCP client with https://api.rad.security/mcp/ over Streamable HTTP and an Authorization bearer credential. The README provides client-specific settings for Claude Code, Codex, Cursor, VS Code, Gemini CLI, Cline, and Windsurf.

Authenticate with an Authorization header containing Bearer <access_key_id>:<secret_key>:<account_id>. Create the access key in the RAD Security console and include the account ID. The documentation also describes a short-lived session-token form, but recommends an access key for long-lived connections.

Yes, rad-security/mcp-server works with Cursor through a remote HTTP MCP entry in .cursor/mcp.json. Set type to http, use https://api.rad.security/mcp/ with its trailing slash, and provide the RAD Security bearer credential in the headers object.

Add X-Rad-Toolkits, X-Rad-Exclude-Toolkits, or X-Rad-Readonly headers to the connection. X-Rad-Toolkits selects named groups, X-Rad-Exclude-Toolkits removes groups, and X-Rad-Readonly hides write tools. The restriction is enforced for both tool discovery and calls.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewMCP Server AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/rad-security-mcp-server?style=directory)](https://allmcps.com/mcp/rad-security-mcp-server)
HTML Embed
<a href="https://allmcps.com/mcp/rad-security-mcp-server"><img src="https://allmcps.com/api/badge/rad-security-mcp-server?style=directory" alt="MCP Server on AllMCPs" /></a>