# SecureNow

SecureNow instruments Node.js and Next.js apps with OpenTelemetry, sending traces and logs to SigNoz or another OTLP-compatible collector. Use it to inspect application activity and troubleshoot requests.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: securenow-ai
- License: ISC · policy=link-only · description only; the file stays with the author
- Source: https://github.com/securenow-ai/securenow-npm
- Updated: 2026-04-14
- HTML: https://affpapa.org/en/nevibecode/mcp/securenow

## What it does

SecureNow adds OpenTelemetry instrumentation to Node.js services and Next.js projects. It collects request traces and can forward output from `console.log`, `console.info`, `console.warn`, and `console.error` when logging is enabled. Telemetry can go to SigNoz or any OTLP-compatible backend. Supported integrations include Express.js, Fastify, NestJS, Koa, and Hapi, along with PostgreSQL, MySQL, MongoDB, and Redis.

For Next.js, installing `npm install securenow` starts a setup flow that creates `instrumentation.ts` or `instrumentation.js` and a `.env.local` template. In a regular Node.js service, preload `securenow/register` through `NODE_OPTIONS`; to collect console output as well, load `securenow/console-instrumentation`. Set `SECURENOW_APPID` and `SECURENOW_INSTANCE` to identify the service and configure its collector endpoint. Telemetry delivery depends on having a reachable OTLP-compatible endpoint.

SecureNow can be added to Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, and Gemini CLI as an MCP server. Request-body capture is available through `SECURENOW_CAPTURE_BODY=1`, while `SECURENOW_SENSITIVE_FIELDS` lets you specify additional fields to redact. Review these options before enabling body capture, since request payloads may contain sensitive information that should not appear in traces.

## Requirements
- Needs: Node.js (commands run via npx)
- Remote server: `https://api.securenow.ai/mcp`

## Install

### Claude Code (native platform)

1. **Platform CLI: remote server**
```bash
claude mcp add --transport http securenow https://api.securenow.ai/mcp
```

2. **Platform CLI**
```bash
claude mcp add securenow -- npx -y securenow
```

### Codex

1. **Platform CLI: remote server**
```bash
codex mcp add securenow --url https://api.securenow.ai/mcp
```

2. **Platform CLI**
```bash
codex mcp add securenow -- npx -y securenow
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "securenow": {
            "url": "https://api.securenow.ai/mcp"
        }
    }
}
```
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "securenow": {
            "command": "npx",
            "args": [
                "-y",
                "securenow"
            ]
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "securenow": {
            "type": "http",
            "url": "https://api.securenow.ai/mcp"
        }
    }
}
```
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "securenow": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "securenow"
            ]
        }
    }
}
```

### Gemini CLI

1. **Platform CLI: remote server**
```bash
gemini mcp add -t http securenow https://api.securenow.ai/mcp
```

2. **Platform CLI**
```bash
gemini mcp add securenow npx -y securenow
```

## When to use it
- Collect HTTP request traces from a Node.js service
- Forward console output to SigNoz
- Correlate application logs with request traces
- Monitor database activity involving PostgreSQL or Redis
- Add telemetry instrumentation to a Next.js project

## Example prompts
- Set up SecureNow to collect traces and logs from my Express.js application.
- Configure OpenTelemetry for this Next.js project and send its telemetry to SigNoz.
- Enable log collection and redact sensitive fields with `SECURENOW_SENSITIVE_FIELDS`.

## Similar
- [logging-best-practices](https://affpapa.org/en/nevibecode/skills/secondsky-logging-best-practices.md) — skill · 396 installs
- [observability](https://affpapa.org/en/nevibecode/skills/observability.md) — skill · 7 installs
- [logging](https://affpapa.org/en/nevibecode/skills/logging.md) — skill · 2800 installs
- [otel-instrumentation](https://affpapa.org/en/nevibecode/skills/dash0-otel-instrumentation.md) — skill · 972 installs
- [observability-guidelines](https://affpapa.org/en/nevibecode/skills/observability-guidelines.md) — skill · 773 installs
- [instrument-logs](https://affpapa.org/en/nevibecode/skills/instrument-logs.md) — skill · 454 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md