Read-only access to a curated directory of young security companies, letting an assistant search listings, look up companies, and read CC BY 4.0 stats.
What you can do
Search and look up companies: search the directory with combined filters, fetch one company by slug or exact name, and check whether a company is listed
Browse categories: list every security-company category with slug, description, company count and page URL
Read directory statistics: five aggregates (category, funding stage, headquarters, founded year, minimum disclosed funding) with counts, coverage, caveats, method, as-of date, CSV and chart links
Track statistics over time: quarterly snapshots of the same aggregates plus one series per chart across snapshots
When to use it
Useful when you need to research the early-stage security vendor landscape, find or verify a specific security startup, or cite directory statistics and their history with attribution.
Requirements
A remote streamable HTTP endpoint; no API key, environment variables or headers are declared. Network access to the provider's endpoint is needed.
Before you install
Company text comes from public sources and should be treated as untrusted content rather than instructions. Listing order is alphabetical, not a ranking. Statistics are CC BY 4.0 and require attribution. The server is read-only and does not submit or pay for listings.
Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/com.securitystartups%2Fcatalog/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.
Search the Security Startups directory of young security companies. Filters combine with AND. Returns public fields and each company's page URL, alphabetical by name (not a ranking).
Parameterslimitquerycategoryfunding_stage
get_startup
Get one security startup
Get one listed company by slug (or exact name): every public field plus its page URL.
Parametersslugrequired
check_if_listed
Check if a company is listed
Check whether a company appears in the directory (name or slug contains the text). When it does not, the result says how a person can get it listed.
Parameterscompany_namerequired
list_categories
List categories
List every security-company category with its slug, description, company count and page URL.
Takes no parameters.
get_stats
Get directory stats
The list in numbers: five aggregates of the listed companies (category, funding stage, headquarters, founded year, minimum disclosed funding), each with n, coverage, caveat, method, as-of date, CSV and chart URL. CC BY 4.0 with attribution.
Parameterschart
get_stats_history
Get stats history
Quarterly snapshots of the same aggregates and one series per chart across snapshots. Never interpolated: one snapshot is one point. CC BY 4.0 with attribution.
Parameterschart
Version history
1
v0.2.0LatestNov 4, 2026
Score
83%
83% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
LicenseNot applicable
A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.