Auth and security - official Red Hat server
MCP server for Red Hat security content
Red Hat-hosted remote MCP server that gives agents CVE details, security advisories and errata, affected products and remediation context for Red Hat products. Red Hat hosts it at https://security-mcp.api.redhat.com/mcp with OAuth auth.
Last verified 7 tools2 sources
Install
Claude Code
About Claude Codeclaude mcp add --transport http rh-security-mcp https://security-mcp.api.redhat.com/mcpCursor
About Cursor{
"mcpServers": {
"rh-security-mcp": {
"url": "https://security-mcp.api.redhat.com/mcp"
}
}
}Tools
get_cve_by_id- Gets a CVE by ID.
get_errata_by_id- Gets an erratum by ID.
list_advisories_by_cve- Lists advisories for a CVE.
list_advisory_packages- Lists packages in an advisory.
list_cve_affected_products- Lists products affected by a CVE.
search_advisories- Searches security advisories.
search_cves- Searches CVEs.
As documented on October 17, 2026. A running server reports its current list through tools/list.
Notes and caveats
- Developer Preview (Red Hat Developer Preview support scope).
- Sign in with a Red Hat login when connecting.
More MCP servers for auth and security
- Red HatStatus: Preview
MCP server for Red Hat Ansible Automation Platform
MCP server that exposes Ansible Automation Platform APIs (controller, gateway, galaxy, EDA) generated from their OpenAPI specs as toolsets for job, inventory, user and platform management, inheriting AAP RBAC.
Transport: Streamable HTTPAuth: API key - Red HatStatus: Preview
MCP server for Red Hat Enterprise Linux
MCP server for Linux system administration, diagnostics and troubleshooting on RHEL systems, covering system information, services, processes, logs, network and storage, locally or over SSH.
Transport: stdio, Streamable HTTPAuth: Other - Red HatStatus: Preview
MCP server for Red Hat OpenShift
Red Hat's build of the Kubernetes MCP server for OpenShift that lets AI IDEs and OpenShift Lightspeed read cluster state and, when enabled, manage workloads, with read-only core and config toolsets by default.
Transport: Streamable HTTPAuth: OAuth - Red HatStatus: Preview
MCP server for Red Hat product information
Red Hat-hosted remote MCP server that delivers official Red Hat product lifecycle, version, operator and support status data to agents and IDE assistants.
Transport: Streamable HTTPAuth: OAuth - Red HatStatus: Preview
Red Hat Lightspeed MCP server
Self-hosted MCP server that connects agents to Red Hat Lightspeed services (advisor, inventory, vulnerability, remediations, planning, hosted image builder) to query RHEL fleet data, CVEs and recommendations.
Transport: stdio, Streamable HTTP, SSEAuth: OAuth or API key - 1Password
1Password Device Trust MCP server
Self-hosted Python MCP server that exposes the 1Password Device Trust (formerly Kolide) API so agents can query devices, people, checks, issues and live query campaigns, with auto-pagination and aggregation helpers. It runs locally over Streamable HTTP or stdio.
Transport: Streamable HTTP, stdioAuth: API key
Related reading
- What's New in Mastra (Late 2026): Harness, AgentController GA, Eval Gates and MCP 2.xMastra in late 2026: goals, schedules, signals, AgentController GA, eval gates and MCP 2.x, with type-checked TypeScript examples and honest tradeoffs.
- MCP vs A2A vs Function Calling: Which Layer Does What in 2026MCP vs A2A vs function calling compared on the 2026-07-28 MCP spec and A2A 1.0: what each protocol does, where they overlap, and how to stack them.
- Pydantic AI V2 in Late 2026: Capabilities, Graphs, Evals and MCPPydantic AI V2 explained through v2.57.0: capabilities, typed output, Conversation storage, caching, graphs, evals, MCP Apps and Logfire, with checked code.
- Reverse Engineer Anything (REA): What the MCP Server Does and Where the Line IsREA (Reverse Engineer Anything) is an MIT-licensed MCP server that lets Claude Code, Codex or Cursor inspect binaries, Electron apps and APKs. How to try it.
- Claude Opus 5.5 Built a Browser 3D World: The Higgsfield MCP WorkflowClaude Opus 5.5 and Higgsfield MCP built an interactive 3D Library of Alexandria in the browser. The verified connector setup and where the workflow holds up.
- Pi 1.0 Release Guide: MCP, Codemode and Pi DurablePi 1.0 adds built-in MCP through Codemode, a fullscreen TUI by default and Pi Durable. What changed, how to install it, and what breaks on upgrade.
FAQ
What does the MCP server for Red Hat security content do?
Red Hat-hosted remote MCP server that gives agents CVE details, security advisories and errata, affected products and remediation context for Red Hat products. The vendor documents 7 tools, including get_cve_by_id, get_errata_by_id, list_advisories_by_cve and list_advisory_packages.
How do I add the MCP server for Red Hat security content to Claude Code?
Run claude mcp add --transport http rh-security-mcp https://security-mcp.api.redhat.com/mcp, copied from Red Hat's docs. This page also has snippets for Cursor.
Does the MCP server for Red Hat security content need authentication?
Yes, OAuth. Transport: Streamable HTTP. Status: Preview, last checked October 17, 2026.
Sources
Last verified against 2 Red Hat pages, then re-checked independently.
- catalog.redhat.comhttps://catalog.redhat.com/en/ai
- catalog.redhat.comhttps://catalog.redhat.com/en/software/container-stacks/detail/6a0488e942b089e6e3b952b0
Newsletter
New MCP servers, the week they ship
One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.