🔐 SecCheck is live — a security playbook library your AI agent can actually read
SecCheck is our second MCP server: a curated library of security and compliance playbooks, available to any MCP-capable AI client over a single hosted endpoint.
Your agent no longer has to improvise a threat model from memory. When a task calls for one — a GDPR data-flow review, an ISO 27001 control mapping, an authenticated web-app pentest — it searches the corpus, loads the playbook, and works from the same material a practitioner would.
What it is
857 curated playbooks across three categories:
| Category | Covers |
|---|---|
| Compliance | GRC and regulatory work — ISO 27001/27017/27018/27701, SOC 2, GDPR, NIS2, DORA, PCI-DSS |
| Defensive | Blue-team, detection engineering, DFIR |
| Offensive | Red-team and penetration testing, for authorised engagements |
The workflow is deliberately two-step: search first, then load. An agent finds the playbooks that match the task, then pulls the full text of the one it needs — rather than dragging an entire corpus into its context and hoping the relevant part survives.
Getting connected
SecCheck is a hosted endpoint at https://mcp.cert-ix.com/seccheck and requires an API key, sent as
a bearer token. Ask your Cert-IX account team for one.
claude mcp add --transport http seccheck https://mcp.cert-ix.com/seccheck \
--header "Authorization: Bearer YOUR_API_KEY"
Claude Desktop, Cursor and VS Code are configured the same way — see the getting started guide.
There is also a local stdio option if you would rather run it beside your agent with no network involved at all.
Where the boundaries are
Playbooks are guidance for authorised security work. The offensive category assumes you have permission to test the target; nothing in the corpus grants it, and no playbook will tell you that you have it.
Your queries are used to search the corpus. They are not training data, and the corpus is served from Cert-IX infrastructure rather than a third-party index — which matters when the question itself reveals something about your estate.