Bright Security

Connects your AI coding assistant directly to Bright's application security platform to run vulnerability scans without leaving your editor. You get tools to discover API endpoints from URLs or OpenAPI specs, launch security tests for SQL injection, XSS, and other vulnerabilities, then review findings by severity. It handles authentication configs, manages scan history across projects, and supports scanning local apps through repeaters. Runs as a remote SSE server at app.brightsec.com/mcp, so there's nothing to install locally. You just authenticate with a Bright API key and ask your assistant to scan a URL. Good fit if you're already using Bright and want security testing in your AI workflow instead of switching to their web dashboard.