Security & Testing

collectsea.com

An MCP server that searches documented incidents and security advisories, analyzes proposed or existing systems for similar failure patterns, and recommends safeguards.

1 endpoint6 known toolsFirst detected October 18, 2026Last detected October 18, 2026

ENDPOINT 1

https://collectsea.com/mcp

No auth detected

MCP server metadata

Name: collectsea
Version: 2026.10.18-verifiable-safeguards

Capabilities

tools

Server instructions

CollectSEA finds documented real-world software, security and AI-agent failures that resemble a proposed design or existing app. For existing apps, inspect the available repository, summarize observed behavior and call analyze_existing_app with relevant text files. Do not infer deployed permissions or safeguards from missing evidence. Call analyze_design before implementing features that move money, delete or migrate data, change permissions, run generated code, push configuration widely, or let an agent act on untrusted content. Follow the returned safeguards and cite precedents by their CollectSEA URL. Records are source-linked but not all human-reviewed; check the source before relying on a detail.

Known tools 6

analyze_design

Profile a proposed feature, system or AI-agent workflow and return documented incidents from systems that behaved similarly, their failure patterns, and the safeguards to build in.

Inferred read-only

analyze_existing_app

Analyze an existing app using observed behavior, README, architecture notes, configuration or source snippets.

Inferred read-only

search_incidents

Keyword search over documented incidents and security advisories (company, technology, CVE, failure mode).

Inferred read-only

get_incident

Full record for one incident by ID (e.

Inferred read-only

list_failure_patterns

The 14 recurring failure patterns with triggers, warning signs and engineering principles.

Inferred read-only

get_safeguards

Return ready-to-save rules (AGENTS.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.collectsea]
url = "https://collectsea.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "collectsea": {
      "type": "http",
      "url": "https://collectsea.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: collectsea
Remote MCP URL: https://collectsea.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "collectsea": {
      "url": "https://collectsea.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "collectsea": {
      "type": "http",
      "url": "https://collectsea.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "collectsea",
  "transport": "streamable-http",
  "url": "https://collectsea.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.