0security
0security is an open-source framework for security agents that look for vulnerabilities in code and running targets, try to prove them, propose fixes and keep monitoring.
What it does
0security is an open-source framework for security agents that look for vulnerabilities in code and running targets, try to prove them, propose fixes and keep monitoring. Its command-line tool can start a local MCP server over stdio, so a coding agent such as Claude Code, Codex or Cursor can drive it. In automation mode the server offers tools to list scan templates and workflows, start and follow runs and read their results; in live-target mode it offers tools for HTTP requests, crawling, form submission and recording findings against a target given at launch. The framework calls a language model, so it needs a provider API key or a local OpenAI-compatible model server.
Capabilities
- Start security scans and assessments from scan templates
- List runs and read their results
- Send HTTP requests, crawl and submit forms against a target
- Record and update findings
Install
- Add this to Any client's configuration:
{ "mcpServers": { "0": { "command": "0", "args": ["mcp-server", "--automations", "--workspace", "/absolute/path/to/repo"] } } }
Details
| Fact | Value | Source |
|---|---|---|
| Type | MCP server | |
| Tool | Not stated in its documentation | |
| Publisher | 0sec-labs | source |
| Official status | Not stated in its documentation | |
| Connection | Local (runs on your computer) | source |
| Can change data | Not stated in its documentation | |
| Needs an API key or sign-in | Yes | source |
| Platforms | Not stated in its documentation | |
| AI clients | Not stated in its documentation | |
| Licence | MIT OR Apache-2.0 | source |
| Pricing | Not stated in its documentation | |
| Activity | Last commit Nov 15, 20261,361 GitHub starsDownload data not available (not on npm or PyPI) | source |
| Links | Repository Website |
Sources
- Web pagedocs.0.security · Backs: ConnectionNov 15, 2026
- GitHub repositorygithub.com/0sec-labs/0security · Backs: Licence, Needs an API key or sign-in, Publisher, ActivityNov 15, 2026
- GitHub API recordgithub.com/0sec-labs/0securityNov 15, 2026