Verified
Featured Dossier
Official Google
License: Apache-2.0
Last commit:
google/mcp-security
Maintained by Google Cloud Security
- Access mode schema: act
- read+act
- Domain-Wide Delegation schema: no
- no
-
is_agenticstatus - REST-API / Exempt
- APIs covered (4)
- Google SecOps (Chronicle) SecOps SOAR Google Threat Intelligence Security Command Center
Verified access capability from upstream documentation or source.
Per-user OAuth or non-DWD flow.
Evaluated against Google Workspace OAuth client rules.
Security Notes
Workspace alerts reach it only via SecOps ingestion; a remote managed SecOps MCP server also exists. Requires Google SecOps.
Credential Storage Posture
UnverifiedUnverified (unknown in pass)
is_agentic Policy Notes
Read guide
Not a Workspace MCP server; Workspace MCP flag not applicable unless used with Workspace MCP.
Enforcement begins (flag locks ).
Verified
Declared OAuth 2.0 Scopes
Last verified| Declared Scope / Posture | Risk Classification | Auditor Rationale |
|---|---|---|
| Unverified (unknown) | Unverified | OAuth scopes were not explicitly enumerated in upstream documentation during the pass. |
Registry JSON Record
src/data/servers.json {
"name": "google/mcp-security",
"slug": "google-mcp-security",
"url": "https://github.com/google/mcp-security",
"maintainer": "Google Cloud Security",
"type": "official",
"type_detail": "official-open-source",
"apis": [
"Google SecOps (Chronicle)",
"SecOps SOAR",
"Google Threat Intelligence",
"Security Command Center"
],
"scopes": [
"unknown"
],
"dwd": "no",
"dwd_detail": "no",
"access": "act",
"access_detail": "read+act",
"credential_storage": "unknown",
"last_commit": "2026-10-16",
"license": "Apache-2.0",
"is_agentic_notes": "Not a Workspace MCP server; Workspace MCP flag not applicable unless used with Workspace MCP.",
"security_notes": "Workspace alerts reach it only via SecOps ingestion; a remote managed SecOps MCP server also exists. Requires Google SecOps.",
"featured": true,
"github_stars": null,
"verified_on": "2026-10-16"
}