# mcp MCP server Personalised developer security learning pathways from SecDim's challenges and courses. ## Links - Registry page: https://www.getdrio.com/mcp/com-secdim-mcp - Repository: https://github.com/secdim/mcp ## Install - Endpoint: https://mcp.secdim.com/mcp - Auth: Not captured ## Setup notes - Remote endpoint: https://mcp.secdim.com/mcp ## Tools - get_secdim_profile - Fetch a SecDim player's profile: scores, completed challenges, skills, security interests and an experience estimate. Use this tool to understand a player's demonstrated secure coding ability before building a learning pathway. The profile includes actual challenge completion data (by difficulty level) and security topics the player has practised — weight this demonstrated performance over a user's self-reported level when deciding what difficulty and topics to recommend. The 'guidance' field provides a ready-to-use summary of what difficulty and topics to target next, and whether the player is new, intermediate or experienced. Args: secdim_username: The player's SecDim username (e.g. "alice") Returns: Dictionary with scores, challenges_solved breakdown, skills (languages and technologies), completed_challenges list, security_interests, experience_estimate and guidance. If the user doesn't exist or an error occurs, returns an error dict. Endpoint: https://mcp.secdim.com/mcp - search_play_challenges - Return a list of hands-on SecDim Play secure coding challenges (labs) related to a detected or suspected vulnerability. SecDim Play challenges are scored, hands-on labs: find and fix a real vulnerability in running code to earn points and badges. Use this tool to: - Find hands-on SecDim Play labs for specific vulnerabilities like XSS, SQL Injection, etc. - Explore OWASP Top 10 vulnerabilities and related labs - Provide additional resources and guides to help developers improve their secure coding skills For structured tutorial content (text, video, and lab-based courses) on the same vulnerability, use search_learn_courses (SecDim Learn) instead or in addition. Args: search: Search term for the vulnerability (e.g., 'xss', 'sql-injection', 'injection') cwe: Common Weakness Enumeration (CWE) ID to filter by owasp: OWASP category to filter by (e.g., 'a03:2021') technology: Technology or framework to filter by (e.g., 'react', 'django') language: Programming language to filter by (e.g., 'javascript', 'python') difficulty: Difficulty level to filter by (e.g., 'trivial', 'easy', 'medium', 'hard') type: Challenge format to filter by (e.g., 'battle', 'exploitation', 'incident-response') mitre: MITRE ATT&CK ID to filter by (e.g., 'T1102.003') SecDim Play challenges (labs) each simulate a real vulnerability. They are scored according to the following difficulty levels: - Trivial: Easy to find and path vulnerabilities. It can be completed in 5-10 minutes. 1-15 points. - Easy: Known vulnerabilities. It can be completed in 10-30 minutes. 16-35 points. - Medium: Known vulnerabilities but require defence-in-depth patch. It can be completed in 20-30 minutes. 36-70 points. - Hard: Hard to find or patch vulnerabilities. It can be completed in 30-60 minutes. 71-100 points. - Battle: SecDim Flagship attack and defence challenge that require both vulnerability exploitation and mitigation skills. Points are accumulated. Returns: Dictionary containing SecDim Play labs results or error If there are no results, user can perform a manual search on the SecDim Play frontend (SECDIM_PLAY_FRONTEND_BASE_URL) Endpoint: https://mcp.secdim.com/mcp - search - Search for SecDim Play secure coding labs (hands-on, scored challenges). This tool searches across SecDim Play's hands-on secure coding labs based on the search query. The backend API handles parsing of vulnerability names, CWE IDs, and OWASP IDs. Language can be specified using the format "lang:javascript". Args: query: Search query that may include: - Vulnerability names (e.g., "XSS", "SQL injection") - CWE IDs (e.g., "79") - OWASP IDs (e.g., "A03:2021") Examples: - "XSS lang:javascript" - searches for XSS labs in JavaScript - "SQL injection lang:Python" - searches for SQL injection labs in Python - "79" - searches for labs related to CWE-79 Returns: Dictionary with search results containing: - results: List of matching SecDim Play labs with id, title, snippet, and metadata Endpoint: https://mcp.secdim.com/mcp - fetch - Fetch detailed content for a specific SecDim Play lab (hands-on, scored challenge). Args: id: Lab ID in format "lab:slug" (e.g., "lab:xss-dom") Returns: Dictionary containing: - id: The lab ID - title: Lab title - content: Detailed content in markdown format - metadata: Additional lab information Endpoint: https://mcp.secdim.com/mcp - search_learn_courses - Search SecDim Learn courses. SecDim Learn provides tutorial-based courses (mixing video, text and hands-on lab topics) covering secure coding, secure design, vibe coding security, devsecops, and cloud security. Many courses are complementary or prerequisite to hands-on, scored SecDim Play challenges/labs. Use this tool to: - Browse the SecDim Learn course catalogue - Find courses related to a topic, language, or technology (e.g. "OWASP Top 10", "fuzzing", "Python") Args: search: Optional search term to filter courses by title, description, or tags. If omitted, returns the full course catalogue. Returns: Dictionary with a "courses" list. Each course includes its title, description, image, slug, tags, numeric "level" (1=beginner, 2=intermediate, 3=advanced) and a "difficulty" label. Use get_learn_course with a course's slug to view its syllabus of topics. Endpoint: https://mcp.secdim.com/mcp - get_learn_course - Get a SecDim Learn course's details, including its syllabus of topics. Args: course_slug: The course's slug, as returned by search_learn_courses (e.g. "owasp-top-10") Returns: Dictionary with the course's title, description, image, slug, "difficulty" label and a "topics" list. Each topic includes its title, description, category, slug, kind (e.g. text/video/lab), level, subscription tier, duration and completion status. Use get_learn_topic with the course slug and a topic's slug to view its content. Endpoint: https://mcp.secdim.com/mcp - get_learn_topic - Get a SecDim Learn topic's content. Args: course_slug: The course's slug, as returned by search_learn_courses (e.g. "owasp-top-10") topic_slug: The topic's slug, as returned by get_learn_course (e.g. "introduction-secure-coding") Returns: Dictionary with the topic's title, description, category, kind, level, subscription tier, duration, completion status and "file_content" (the topic's content in AsciiDoc format). If the topic requires a SecDim Learn subscription that the current account does not have, an "error" explaining this is returned instead. Endpoint: https://mcp.secdim.com/mcp ## Resources - secdim://filters/cwe - Get a list of CWE categories that are mapped to SecDim Play challenges. This resource provides information about Common Weakness Enumeration (CWE) categories that are associated with SecDim Play challenges. Each category includes its CWE ID, title, URL to the official CWE definition, and a slug. Returns: List of CWE categories with their details MIME type: application/json - secdim://filters/difficulty - Get a list of difficulties of SecDim Play challenges. This resource provides information about the different difficulty levels available for SecDim Play challenges. Each difficulty entry includes its name and slug. Returns: Object containing list of difficulty levels MIME type: application/json - secdim://filters/language - Get a list of programming languages that are mapped to SecDim Play challenges. This resource provides information about the programming languages that are used in SecDim Play challenges. Each language entry includes its name and slug. Returns: Object containing list of programming languages MIME type: application/json - secdim://filters/mitre - Get a list of MITRE categories that are mapped to SecDim Play challenges. This resource provides information about the MITRE ATT&CK categories that are associated with SecDim Play challenges. Each category entry includes its name and slug. Returns: Object containing list of MITRE categories MIME type: application/json - secdim://filters/owasp - Get a list of OWASP categories that are mapped to SecDim Play challenges. This resource provides information about OWASP Top 10 categories that are associated with SecDim Play challenges. Each category includes its OWASP ID, title, URL to the official OWASP definition, and a slug. Returns: List of OWASP categories with their details MIME type: application/json - secdim://filters/severity - Get a list of severities of SecDim Play challenges. This resource provides information about the different severity levels available for SecDim Play challenges. Each severity entry includes its name and slug. Returns: Object containing list of severity levels MIME type: application/json - secdim://filters/technology - Get a list of technologies that are mapped to SecDim Play challenges. This resource provides information about the different technologies and frameworks that are used in SecDim Play challenges. Each technology entry includes its name and slug. Returns: Object containing list of technologies MIME type: application/json - secdim://filters/type - Get a list of formats (types) of SecDim Play challenges. This resource provides information about the different challenge formats available in SecDim, such as attack and defence (battle), capture the flag, secure coding, and others. Each format entry includes its name and slug. Returns: Object containing list of challenge formats MIME type: application/json - secdim://badges - Get the list of SecDim Play milestone badges. Badges are awards a player can earn after fulfilling their prerequisite (e.g. winning a wargame, completing a series of challenges). Each badge includes its title, description, tags, feature image, points, slug, and a list of prerequisite slugs that must be completed first. Returns: List of badges with their details MIME type: application/json - secdim://learn/tags - Get the list of tags used to categorize SecDim Learn courses. Each tag includes its display word, category (e.g. language, technology, type), icon, and slug. Tags can be used to find related courses via search_learn_courses. Returns: List of tags with their details MIME type: application/json ## Prompts Not captured ## Metadata - Owner: com.secdim - Version: 1.0.1 - Runtime: Streamable Http - Transports: HTTP - License: Not captured - Language: Not captured - Stars: Not captured - Updated: Jul 20, 2026 - Source: https://registry.modelcontextprotocol.io