Security Engineer
Overview
Description from the maker (original English)
Fix GuardBee AI Security Engineer findings in your repo with your coding agent, then verify
What you can do with it
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
- Connection: Runs on your computer
- Transport: stdio
- Category: Developer tools
- You need to fill in: GUARDBEE_API_KEY
Install
Pick the AI app you use, then copy the settings.
Passed 2/2 checks · Runs on your computer
First: which AI do you use?
Pick your app and the steps appear below.
Works with Claude, with some setup first
You need a Security Engineer key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time) · Only the Claude desktop app (Windows or Mac), not the web or phone
Install Node.js
One time only; it works for every server that needs Node.js
Sign up and create a Security Engineer key
Open the maker’s site, sign up and create an API key for the next step. It may cost money.
How to get a key is in the maker’s README below
Open the Claude desktop app’s settings file
SettingsDeveloperEdit Config
Paste these settings and save the file
{ "mcpServers": { "security-engineer": { "command": "npx", "args": [ "-y", "@guardbee/mcp-security-engineer" ], "env": { "GUARDBEE_API_KEY": "your-value" } } } }Paste the key only into the app’s field, never into a chat or to anyone
Quit Claude and open it again
Try it
Use Security Engineer and tell me what you can do for me, then show me one thing✓ If Claude says it is using Security Engineer or shows a Security Engineer tool in the answer, you are connected
Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version
ChatGPT cannot connect Security Engineer yet
Security Engineer runs on your computer, but ChatGPT can only connect servers that run on the web
What you can do instead
A · Use an app that can connect Security Engineer
- You need a Security Engineer key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time) · Only the Claude desktop app (Windows or Mac), not the web or phone
- You need a Security Engineer key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)
- You need a Security Engineer key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)
- You need a Security Engineer key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)
B · Others in Developer tools that work with ChatGPT
Picked from the most used in the same category, only ones that connect by address with no key
- Sentry✓ ChatGPT
- Front-End Checklist✓ ChatGPT
- Compiler Explorer✓ ChatGPT
Works with Claude Code, with some setup first
You need a Security Engineer key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)
Install Node.js
One time only; it works for every server that needs Node.js
Sign up and create a Security Engineer key
Open the maker’s site, sign up and create an API key for the next step. It may cost money.
How to get a key is in the maker’s README below
Open Terminal
Mac: press Command+Space and type Terminal · Windows: open PowerShell
Paste this command and press Enter
claude mcp add security-engineer --env GUARDBEE_API_KEY=your-value -- npx -y @guardbee/mcp-security-engineerReplace “your-value” with your key before pressing Enter
Paste the key only into the app’s field, never into a chat or to anyone
Type /mcp in Claude Code
You should see Security Engineer listed as connected
Try it
Use Security Engineer and tell me what you can do for me, then show me one thing✓ If Claude Code says it is using Security Engineer or shows a Security Engineer tool in the answer, you are connected
Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with Cursor, with some setup first
You need a Security Engineer key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)
Install Node.js
One time only; it works for every server that needs Node.js
Sign up and create a Security Engineer key
Open the maker’s site, sign up and create an API key for the next step. It may cost money.
How to get a key is in the maker’s README below
Fill in your key
In the Security Engineer settings, GUARDBEE_API_KEY is empty; add your key and save
Paste the key only into the app’s field, never into a chat or to anyone
Open the AI chat in Cursor in Agent mode
Try it
Use Security Engineer and tell me what you can do for me, then show me one thing✓ If Cursor says it is using Security Engineer or shows a Security Engineer tool in the answer, you are connected
Menu names checked against Cursor’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with VS Code, with some setup first
You need a Security Engineer key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)
Install Node.js
One time only; it works for every server that needs Node.js
Sign up and create a Security Engineer key
Open the maker’s site, sign up and create an API key for the next step. It may cost money.
How to get a key is in the maker’s README below
Fill in your key
In the Security Engineer settings, GUARDBEE_API_KEY is empty; add your key and save
Paste the key only into the app’s field, never into a chat or to anyone
Open the AI chat in VS Code in Agent mode
Try it
Use Security Engineer and tell me what you can do for me, then show me one thing✓ If VS Code says it is using Security Engineer or shows a Security Engineer tool in the answer, you are connected
Menu names checked against VS Code’s help page on Nov 11, 2026 · your screen may differ slightly by app version
For developers: Terminal commands and JSON settings
Installed on your computer
Claude Code
claude mcp add security-engineer --env GUARDBEE_API_KEY=your-value -- npx -y @guardbee/mcp-security-engineerClaude Desktop (claude_desktop_config.json)
{
"mcpServers": {
"security-engineer": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-security-engineer"
],
"env": {
"GUARDBEE_API_KEY": "your-value"
}
}
}
}Cursor (~/.cursor/mcp.json)
{
"mcpServers": {
"security-engineer": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-security-engineer"
],
"env": {
"GUARDBEE_API_KEY": "your-value"
}
}
}
}VS Code (mcp.json)
{
"servers": {
"security-engineer": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-security-engineer"
],
"env": {
"GUARDBEE_API_KEY": "your-value"
}
}
}
}Values you fill in
GUARDBEE_API_KEYsecret required envGuardBee API key with remediations.read and remediations.write scopes
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
At a glance
- GitHub starsi
- 2 (Stars for the whole repo)
This repo holds several MCP listings; its stars count once in rankings - Downloads per weeki
- 604/wk
- Connection
- Runs on your computer
- Transport
- stdio
- Latest versioni
- 0.2.0
- Categoryi
- Developer tools
- Published to registryi
- Nov 10, 2026
- Code last changedi
- Nov 10, 2026
- Maker
- GuardBee
- Packages
npm: @guardbee/mcp-security-engineer- Registry status
- Active
Which apps can use it
Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.
Run on your computer in
ClaudeGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatRaycast
Related guides
What it can do
Runs on your computer; the tool list appears in your AI app after you install it.
Basic checksi
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 11, 2026
- ✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account GuardBee, which owns the repo
- ✓ Pass
Still maintained
Code last changed yesterday
- … Not checked yet
Has a licence
We have not read this repo from GitHub yet
- – Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
- – Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
- … Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints
Discussion
Ask, share a tip or report that it does not work. Sorted by what people marked helpful.
No posts yet. Be the first to ask or share.
Posts here are written by users, not the PopNx team.
User reviews
No reviews yet
Compared with others in Developer toolsi
- More stars than 0% of the other 5760 servers in this category
- Published to the registry more recently than 95% of the other 5760 servers in this category
- Basic checks equal to or better than 100% of the other 5760 servers in this category
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
Common questions
Is Security Engineer safe?
It passed 2 of 2 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
What keys or codes does it need?
You need to fill in: GUARDBEE_API_KEY
Does it run on my computer or in the cloud?
It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).
Is it still maintained?
The GitHub repo last changed yesterday, and the latest version (0.2.0) reached the registry yesterday.
Which apps can use it?
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.
What can I use instead?
In the same category: REA, Netdata, Front-End Checklist
Alternatives
Servers in the same category from other makers, sorted by stars.
Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Netdata
Real-time infrastructure monitoring with metrics, logs, alerts, and ML-based anomaly detection.
Front-End Checklist
Review frontend code and live pages against 386 quality-gated web development rules.
README from the maker
Open the README
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
@guardbee/mcp-security-engineer
🇬🇧 English | 🇹🇷 Türkçe
Fix GuardBee AI Security Engineer findings in your own repository with your coding agent (Claude Code, Cursor, VS Code), then verify the fix on the live site.
GuardBee finds and explains the issue and proposes a fix for your platform. Your coding agent makes the change in your repository, and you approve it. GuardBee never edits your code or servers.
Telemetry is off by default. With
GUARDBEE_TELEMETRY=1it sends the server, tool, success, duration and short parameter values such as a file path; longer strings and fields likecontent,tokenorpasswordare replaced with a placeholder. See@guardbee/mcp-telemetry.
Tools
| Tool | What it does |
|---|---|
list_assessments | Recent AI Security Engineer assessments of your workspace |
get_assessment | Actionable findings, highest priority first, with the platforms each can be fixed on |
detect_stack | Detects Next.js, Express, Nginx, Apache or Cloudflare from your repository's files, and finds config files to diff against |
get_fix | A reviewable fix for a finding. If you pass your Nginx or Apache config, you get an exact diff. |
report_applied | Records that the fix was applied, with the commit SHA or PR URL as a reference |
verify_fix | After you deploy, re-runs the check that reported the finding against the live site |
Setup
- In GuardBee, open Developers → API keys and create a key with the
remediations.readandremediations.writescopes. - Add the server to your agent.
Claude Code
claude mcp add guardbee-security-engineer -e GUARDBEE_API_KEY=gb_... -- npx -y @guardbee/mcp-security-engineer
Cursor / VS Code (mcp.json)
{
"mcpServers": { "guardbee-security-engineer": { "command": "npx", "args": ["-y", "@guardbee/mcp-security-engineer"], "env": { "GUARDBEE_API_KEY": "gb_..." } } } }
Example
"Fix the top GuardBee findings of my latest assessment in this repo."
The agent:
- Calls
list_assessmentsand thenget_assessment. - Calls
detect_stack. For example, it finds Next.js anddeploy/nginx.conf. - Calls
get_fixfor each finding, editsnext.config.jsor the Nginx config, and shows you the diff. - After you approve and commit, calls
report_appliedwith the commit SHA. - After you deploy, calls
verify_fix, and GuardBee confirms the issue is resolved.
Configuration
| Variable | Default |
|---|---|
GUARDBEE_API_KEY | required |
GUARDBEE_BASE_URL | https://app.guardbee.ai |
GUARDBEE_TELEMETRY | off; 1 turns on anonymous usage telemetry |
Security
- The server only reads files inside the project root, and only the config file you name. Paths outside the root are rejected.
- File edits are made by your agent, and you approve them there.
- All actions are recorded in the GuardBee activity log, marked as coming from an MCP client.
License
MIT