Skip to main content
MCP server CX Codex

mcp · secdim — Claude Code MCP server: SecDim secure coding paths

A remote MCP server from SecDim that picks hands-on labs and courses for secure coding based on your language, framework and skill level.

Install into Claude Code · Platform CLI: remote server All methods and platforms ↓
claude mcp add --transport http mcp https://mcp.secdim.com/mcp
Open on GitHub

What mcp does

The server lives at https://mcp.secdim.com/mcp and connects over HTTP transport. Five tools come with it: search_play_challenges finds practice labs by vulnerability, language or keyword, search_learn_courses returns tutorial courses, get_learn_course and get_learn_topic pull course and topic content, and get_secdim_profile reads challenge history and skill level.

Learning paths build themselves. The assistant checks your profile, skips what you already finished and orders the rest from beginner to advanced, pairing concept courses with labs where you fix the vulnerability. GitHub integration reads your profile for languages and frameworks. Coverage includes OWASP Top 10, XSS and SQL Injection.

No prerequisites and no API key. The catch is that the server is remote, so nothing works without reachable mcp.secdim.com — check network, proxy or VPN when the connection fails. Claude Web requires a Pro, Team or Enterprise plan.

What it helps with

  • find a lab for a specific vulnerability
  • build a study plan around your language and level
  • work through OWASP Top 10 with hands-on exercises
  • sharpen remediation skills on flaws found in your own code
  • decide what to learn next from your challenge history

Example prompts for the agent

  • Build me a secure coding learning path for Python.
  • Find a lab related to SQL Injection.
  • What should I do next based on my SecDim profile?

How to install mcp

Platform CLI: remote server

claude mcp add --transport http mcp https://mcp.secdim.com/mcp

Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more

Questions about mcp

How do I install mcp in Claude Code?

Run claude mcp add --transport http mcp https://mcp.secdim.com/mcp, then confirm with claude mcp list. The server stays registered for future sessions.

What does mcp do?

It gives your assistant access to the SecDim library: lab and course search, topic content and your profile. From that it assembles a personal secure coding path.

Do I need keys or extra packages?

No. The server is remote and speaks HTTP, and it lists no prerequisites — adding the URL to your client config is enough.

Similar MCP servers

All MCP servers for Security →

mcp by other authors comes first.

mcp kubeshark This MCP server gives AI agents access to Kubernetes network traffic. Use it to inspect API calls, investigate incidents, and trace failures across services. CX Codex +1 ★ 12,110repo stars mcp butterbase-ai The Butterbase MCP server gives your agent access to schemas, auth, functions, storage, RAG and deploys. Useful when your backend runs on Butterbase. CX Codex +1 ★ 3,031repo stars mcp medplum Connect an AI agent to healthcare data stored in Medplum and work with those records through MCP. Useful when you want an agent to access FHIR data. CX Codex +1 ★ 2,766repo stars mcp sceneview This MCP server gives an AI assistant access to SceneView API docs and samples, and helps generate and validate code. Use it when building a 3D or AR app with SceneView. CX Codex +1 ★ 1,349repo stars mcp Buoy-gg Lets an AI agent read and control a running React Native or Flutter app through Buoy devtools. Useful when you want requests, caches or state inspected inside the app itself. CX Codex +1 ★ 691repo stars agentforce-test forcedotcom Writes and runs test suites for Agentforce agents: smoke checks, batch runs and adversarial probes. Useful once an agent is built and needs checking before it ships. CX Codex +1 5,700installs ghost-scan-code ghostsecurity Finds security flaws in source code: SQL injection, XSS, SSRF and other OWASP categories. Plans the scans first, then runs them per project. CX Codex +1 5,200installs shannon KeygraphHQ The skill wires up Shannon: it reads your source code, maps attack vectors and runs real exploits to prove a vulnerability exists. CX Codex +1 2,900installs code-review-pro OneWave-AI Reviews files, a module, a diff or a branch and returns severity-ranked findings: vulnerabilities, correctness bugs, performance and maintainability issues, each with evidence and a fix. CX Codex +1 2,600installs owasp-security agamm A skill that reviews code and diffs for vulnerabilities against OWASP Top 10:2025, ASVS 5.0, and the LLM and agentic risk lists. Useful before a release. CX Codex +1 2,400installs security-auditor zhaono1 A skill that hunts vulnerabilities in your code: walks the OWASP Top 10, checks configs, dependencies and leaked secrets. Useful before a release or a review. CX Codex +1 1,000installs

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor