---
bezeichner: "io.github.nh4ttruong/secobserve-mcp"
art: "mcp_server"
slug: "io-github-nh4ttruong-secobserve-mcp"
paketkoordinate: "pypi:secobserve-mcp"
status: "aktiv"
homepage: "https://github.com/nh4ttruong/secobserve-mcp"
erhebungsstand: "2026-10-10T01:17:01.464Z"
namensraum: "io.github.nh4ttruong"
registerseite: "https://tracevero.de/mcp/io-github-nh4ttruong-secobserve-mcp"
abgerufen_am: "2026-10-10"
zugangsdaten_erforderlich: true
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
roh_beschreibung: "MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX."
version: "1.0.0"
roh_umgebungsvariablen: "SECOBSERVE_BASE_URL, SECOBSERVE_API_TOKEN, SECOBSERVE_READ_ONLY, SECOBSERVE_ALLOW_DELETE, SECOBSERVE_BASE_URL, SECOBSERVE_API_TOKEN, SECOBSERVE_READ_ONLY, SECOBSERVE_ALLOW_DELETE"
roh_geheime_pflichtvariablen: "SECOBSERVE_API_TOKEN, SECOBSERVE_API_TOKEN"
roh_transportarten: "stdio, stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/nh4ttruong/secobserve-mcp"
roh_paketquellen: "oci, pypi"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-09-21"
roh_aktualisiert_am: "2026-09-21"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "ghcr.io/nh4ttruong/secobserve-mcp:1.0.0, secobserve-mcp"
roh_paketversionen: "1.0.0"
roh_laufzeithinweise: "docker"
roh_umgebungsformate: ""
roh_umgebungsbeschreibungen: "SECOBSERVE_ALLOW_DELETE=Set to true to enable the delete tool; deletion cascades and is irreversible · SECOBSERVE_API_TOKEN=SecObserve user or product API token · SECOBSERVE_BASE_URL=SecObserve base URL without /api, e.g. https://secobserve.example.com · SECOBSERVE_READ_ONLY=Set to true to refuse every write operation"
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"pypi\",\"identifier\":\"secobserve-mcp\",\"version\":\"1.0.0\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"SECOBSERVE_BASE_URL\",\"description\":\"SecObserve base URL without /api, e.g. https://secobserve.example.com\",\"required\":true,\"secret\":false},{\"name\":\"SECOBSERVE_API_TOKEN\",\"description\":\"SecObserve user or product API token\",\"required\":true,\"secret\":true},{\"name\":\"SECOBSERVE_READ_ONLY\",\"description\":\"Set to true to refuse every write operation\",\"required\":false,\"secret\":false},{\"name\":\"SECOBSERVE_ALLOW_DELETE\",\"description\":\"Set to true to enable the delete tool; deletion cascades and is irreversible\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false},{\"registryType\":\"oci\",\"identifier\":\"ghcr.io/nh4ttruong/secobserve-mcp:1.0.0\",\"runtimeHint\":\"docker\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"SECOBSERVE_BASE_URL\",\"description\":\"SecObserve base URL without /api, e.g. https://secobserve.example.com\",\"required\":true,\"secret\":false},{\"name\":\"SECOBSERVE_API_TOKEN\",\"description\":\"SecObserve user or product API token\",\"required\":true,\"secret\":true},{\"name\":\"SECOBSERVE_READ_ONLY\",\"description\":\"Set to true to refuse every write operation\",\"required\":false,\"secret\":false},{\"name\":\"SECOBSERVE_ALLOW_DELETE\",\"description\":\"Set to true to enable the delete tool; deletion cascades and is irreversible\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":true}],\"remotes\":[]}"
---

# io.github.nh4ttruong/secobserve-mcp

## Gemessene Werte

| Merkmal | Wert | Quelle | Erhoben am | Vertrauensgrad | Rohangabe |
| --- | --- | --- | --- | --- | --- |
| Pflicht-Geheimnisse deklariert | true | MCP-Register | 2026-09-18T01:17:01.510Z | abgeleitet | roh_geheime_pflichtvariablen: SECOBSERVE_API_TOKEN, SECOBSERVE_API_TOKEN; roh_geheime_pflichtkopfzeilen: |
| Ausführungsort | lokal | MCP-Register | 2026-09-18T01:17:01.510Z | abgeleitet | roh_transportarten: stdio, stdio |
| Pfadargument vorhanden | false | MCP-Register | 2026-09-18T01:17:01.510Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository-Adresse geführt | true | MCP-Register | 2026-09-18T01:17:01.510Z | abgeleitet | roh_repository_url: https://github.com/nh4ttruong/secobserve-mcp |
| Beschreibung (Rohangabe) | MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX. | MCP-Register | 2026-09-19T01:17:02.172Z | selbstauskunft |  |
| Deklarierte Version | 1.0.0 | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Umgebungsvariablen (Rohangabe) | SECOBSERVE_BASE_URL, SECOBSERVE_API_TOKEN, SECOBSERVE_READ_ONLY, SECOBSERVE_ALLOW_DELETE, SECOBSERVE_BASE_URL, SECOBSERVE_API_TOKEN, SECOBSERVE_READ_ONLY, SECOBSERVE_ALLOW_DELETE | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Geheime Pflichtvariablen (Rohangabe) | SECOBSERVE_API_TOKEN, SECOBSERVE_API_TOKEN | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Transportarten (Rohangabe) | stdio, stdio | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Pfadargumente (Rohangabe) |  | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Repository (Rohangabe) | https://github.com/nh4ttruong/secobserve-mcp | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Paketquellen (Rohangabe) | oci, pypi | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Geheime Pflichtkopfzeilen (Rohangabe) |  | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Pfad-Umgebungsvariablen (Rohangabe) |  | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Remote-Adressen (Rohangabe) |  | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Remote-Hosts (Rohangabe) |  | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Statusmeldung des Registers (Rohangabe) |  | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Im Register eingetragen am (Rohangabe) | 2026-09-21 | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Im Register geändert am (Rohangabe) | 2026-09-21 | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Schemafassung des Rohsatzes (Rohangabe) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Bereitstellungsform (Rohangabe) | paket | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Repository-Plattform (Rohangabe) | github | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Repository-Unterordner (Rohangabe) |  | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Paketbezeichner (Rohangabe) | ghcr.io/nh4ttruong/secobserve-mcp:1.0.0, secobserve-mcp | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Paketversionen (Rohangabe) | 1.0.0 | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Laufzeithinweise (Rohangabe) | docker | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Formate der Umgebungsvariablen (Rohangabe) |  | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Beschreibungen der Umgebungsvariablen (Rohangabe) | SECOBSERVE_ALLOW_DELETE=Set to true to enable the delete tool; deletion cascades and is irreversible · SECOBSERVE_API_TOKEN=SecObserve user or product API token · SECOBSERVE_BASE_URL=SecObserve base URL without /api, e.g. https://secobserve.example.com · SECOBSERVE_READ_ONLY=Set to true to refuse every write operation | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Symbolformate (Rohangabe) |  | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Verbindungswege (Quellstruktur) | {"packages":[{"registryType":"pypi","identifier":"secobserve-mcp","version":"1.0.0","transport":"stdio","environment":[{"name":"SECOBSERVE_BASE_URL","description":"SecObserve base URL without /api, e.g. https://secobserve.example.com","required":true,"secret":false},{"name":"SECOBSERVE_API_TOKEN","description":"SecObserve user or product API token","required":true,"secret":true},{"name":"SECOBSERVE_READ_ONLY","description":"Set to true to refuse every write operation","required":false,"secret":false},{"name":"SECOBSERVE_ALLOW_DELETE","description":"Set to true to enable the delete tool; deletion cascades and is irreversible","required":false,"secret":false}],"additional_arguments_declared":false},{"registryType":"oci","identifier":"ghcr.io/nh4ttruong/secobserve-mcp:1.0.0","runtimeHint":"docker","transport":"stdio","environment":[{"name":"SECOBSERVE_BASE_URL","description":"SecObserve base URL without /api, e.g. https://secobserve.example.com","required":true,"secret":false},{"name":"SECOBSERVE_API_TOKEN","description":"SecObserve user or product API token","required":true,"secret":true},{"name":"SECOBSERVE_READ_ONLY","description":"Set to true to refuse every write operation","required":false,"secret":false},{"name":"SECOBSERVE_ALLOW_DELETE","description":"Set to true to enable the delete tool; deletion cascades and is irreversible","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |

## Verweise

- Namensraum: [[namensraum/io-github-nh4ttruong|io.github.nh4ttruong]]

---

- Registerseite: <https://tracevero.de/mcp/io-github-nh4ttruong-secobserve-mcp>
- Abgerufen am: 2026-10-10