Security – MCP servers
246 MCP servers in the category Security. Open-source Model Context Protocol (MCP) servers that let AI assistants and agents use external tools and data. Entries come from the community list awesome-mcp-servers; we have not tested each server, so check the repository before you install one.
123Ergo/unphurl-mcp
URL security signals: redirects, brand impersonation, domain age, SSL validation, parked-domain detection, structural analysis and DNS enrichment.
13bm/GhidraMCP
Ghidra plugin for binary analysis: function inspection, decompilation, memory exploration and import/export analysis.
26zl/cybersec-toolkit
Install a large security toolset and discover and run it through an authorization-gated server for CTF, pentesting, bug bounty and DFIR.
82ch/MCP-Dandan
Real-time security framework for MCP servers that detects and blocks malicious agent behavior by analyzing tool call patterns and intent.
9hannahnine-jpg/arc-gate-mcp
Runtime governance for MCP tool calls that blocks prompt injection and capability abuse before tool results reach the agent.
Acacian/aegis
Policy-based governance for agent tool calls across LangChain, OpenAI, Anthropic and MCP: YAML policies, approval gates, risk assessment and audit…
adeptus-innovatio/solvitor-mcp
Reverse engineering tools from Solvitor: extract IDL files from closed-source Solana smart contracts and decompile them.
aeoess/agent-passport-mcp
Agent identity, scoped delegation and governance: issue passports, verify narrowing-only delegation chains, enforce gateway policy and emit signed…
AgentAvow/AgentAvow
Signed, recomputable safety scores for MCP servers, packages and tools, with offline-verifiable attestations and a GitHub Action to gate CI merges.
AgentValet/AgentValet
Identity and credential broker for MCP servers: issues scoped, short-lived credentials per agent, with audit logging and human approval gates.
agentward-ai/agentward
MCP proxy that enforces least-privilege YAML policies on tool calls, classifies PII/PHI, detects dangerous skill chains and generates compliance…
aggrete/aggrete
Policy proxy that refuses forbidden tool calls, stopping prompt-injection exfiltration and forbidden data combinations across Slack, Drive, GitHub…
agntor/mcp
Agent discovery and certification with a trust and payment rail: identity verification, escrow, settlement and reputation management.
AIM-Intelligence/AIM-Guard-MCP
Security-focused safety guidelines and content analysis for AI agents.
AIops-tools/Compliance-AIops
Turn other AIops tools' audit trails into tamper-evident, hash-chained evidence bundles mapped to HIPAA, PCI-DSS, SOC 2 and GDPR. Offline and…
airblackbox/air-blackbox-mcp
EU AI Act compliance scanner for Python AI agents (LangChain, CrewAI, AutoGen, OpenAI) with prompt injection detection, risk classification and fix…
ajipurn/fida
Local-first MCP gateway for coding agents that redacts detected secrets from file reads and command output before they reach model context.
alberthild/shieldapi-mcp
Security intelligence: HIBP password breach checks, email/domain/IP/URL reputation, prompt injection detection and skill supply chain scanning.
alexar76/aimarket-mcp
SSRF-hardened web gateway with web fetch, web search and Metis verification, sharing an audited security core with Metis and ARGUS.
alexar76/aimarket-oracle-gateway
Verifiable oracle tools via AIMarket Hub: Platon VRF randomness, Chronos VDF computation and verification, and LUMEN reputation scores.
alexar76/argus
Query ARGUS-3 and check its status; WARDEN vets third-party MCP servers with a scored firewall, tool-definition pinning and drift detection.
alexfleetcommander/agent-trust-stack-mcp
Cryptographic provenance, blind reputation scoring and tamper-evident logging for agent interactions, with dispute resolution and trust-based…
AperionAI/shield
Local guardrail proxy for MCP servers: blocks destructive tool calls, pins tool catalogs against rug pulls and scans for tool poisoning and prompt…
arian-gogani/nobulex
Proof-of-behavior enforcement for AI agents: define permit/forbid/require rules, enforce them at runtime and keep hash-chained, tamper-evident audit…
ark-forge/arkforge-mcp
Third-party certifying proxy that signs any HTTP call with an independent Ed25519 signature, RFC 3161 timestamp and Sigstore Rekor anchor.
ARKALDA/hejdar-mcp
Runtime policy enforcement for AI agents: evaluate actions against organization policies before execution, in observe or enforce mode.
arthurpanhku/DocSentinel
Automate cybersecurity assessment of documents, questionnaires and reports to surface risks, compliance gaps and remediations, using a RAG knowledge…
askalf/truecopy
Supply-chain gate for agent skills and MCP servers: detects poisoned tool definitions, pins servers by hash, checks drift in CI and proxies only…
astafford8488/agentaegis-mcp
Scan MCP servers and skills before install, vet endpoints before calling them, and run vulnerability scans, threat intel and compliance checks.
atomicchonk/roadrecon_mcp_server
Analyze ROADrecon gather results from Azure tenant enumeration.
aurelio-nakamura/cmdxray
Offline safety gate for agent shell commands: rates each command as danger, caution or none and explains every flag, pipe, redirect and subshell.
aurumflux20/seal
Exactly-once payments for agents: prevents double settlement across processes and retries, confirms charges with the provider and reconciles…
BeBraveBeKind/mcpskills-server
Scores MCP servers, AI skills and npm packages before install, scanning for prompt injection, credential theft and supply-chain risk, with a…
beeswaxpat/chronoverify-mcp
Verify a photo's capture time and provenance: C2PA Content Credentials validation, EXIF/XMP consistency checks and pixel forensics combined into one…
behrensd/mcp-firewall
Deterministic security proxy for MCP that intercepts tool calls, enforces YAML policies, scans for secret leakage and logs everything.
Bichev/agentradar-mcp
On-chain trust oracle for ERC-8004 and x402 agents: composite trust scoring, a scam wallet database, ERC-8004 identity lookup and EAS attestations…
bluetieroperations-create/blackwall-mcp
Risk gate that agents call before irreversible actions, returning a risk score, reversibility class, red flags and a proceed/confirm/human-required…
boy-offi9-inc/hexforge-gateway
APK reverse engineering workspace that orchestrates jadx, apktool, adb and Frida through a workflow engine, on Termux (Android) or PC.
Buggy1111/anonymize-mcp
Anonymize PII for GDPR in Czech and many other languages using ÚFAL/LINDAT NLP (MasKIT, NameTag), plus morphology, translation and spellcheck.
BurtTheCoder/mcp-dnstwist
Run dnstwist, a DNS fuzzing tool, to detect typosquatting, phishing and corporate espionage.
BurtTheCoder/mcp-maigret
Search usernames across social networks and analyze URLs with maigret, an OSINT tool that collects account information from public sources.
BurtTheCoder/mcp-shodan
Query the Shodan API and Shodan CVEDB: IP lookups, device searches, DNS lookups, vulnerability queries and CPE lookups.
BurtTheCoder/mcp-virustotal
Query the VirusTotal API: scan URLs, analyze file hashes and retrieve IP address reports.
bx33661/Wireshark-MCP
Wireshark packet analysis: capture, protocol statistics, field extraction and security analysis.
calllint/calllint
Offline pre-flight security linter for MCP servers, agent tools and skills that returns SAFE, REVIEW, BLOCK or UNKNOWN verdicts without executing…
chasdaddy/basescope
Read-only safety checks for Base and EVM: honeypot and rug-pull detection, risky approvals, verified source, balances, ENS and Basenames, gas and…
Chimera-Protocol/csl-core
Deterministic AI safety policy engine with Z3 formal verification: write, verify and enforce machine-verifiable constraints for AI agents.
chrbailey/promptspeak-mcp-server
Pre-execution governance for agent tool calls: risk classification, behavioral drift detection, a hold queue for dangerous operations and an audit…
Chronolapse411/sicarius-guard
Solana token safety oracle: byte-level SPL mint analysis, honeypot detection, freeze/mint authority checks, Birdeye market data and composite risk…
co-browser/attestable-mcp-server
Demonstrates remote attestation of an MCP server running in a Gramine TEE via RA-TLS, so clients can verify the server before connecting.
corewebvitals/state-of-cwv-mcp
Core Web Vitals metrics by CMS, CDN and framework, based on Chrome field data and a multi-site crawl.
coreyhines/opnsense-mcp
OPNsense firewall operations via API: query ARP, DHCP, firewall rules, logs, interfaces, system status and packet captures.
creatorrmode-lead/avp-sdk
Trust, W3C DID identity and EigenTrust reputation for AI agents, with attestations, disputes, sybil detection and IPFS audit anchoring.
CTRLRun/ctrlrun
Execution safety for agent actions: a YAML-policy gateway that allows, holds or denies tool calls, plus an approval queue and hash-chained receipts.
Cubiczan/governed-mcp-gateway
HTTP MCP gateway that attaches a principal to tool calls and SSE streams, with allowlists and vault rotation.
Cubiczan/trust-ledger-os
Trust and risk control plane for AI teams, with phases, routes and a package catalog.
cuttalo/depscope
Package intelligence across many ecosystems: health, vulnerabilities (OSV, CISA KEV, EPSS), typosquats, malicious packages, alternatives and…
cyntrisec/cyntrisec-cli
Local-first AWS security analyzer that discovers attack paths and generates remediations using graph theory.
dambuchs/redact-pdf-mcp
Permanently redact PII (names, emails, phone numbers, addresses, IBANs, card numbers) from PDFs, scans and screenshots, with multilingual OCR.
datanexusmcp/mcp-server
Public data lookups: CVE/SBOM security audits, license compliance, patents, federal contracts, NPI providers, nonprofit 990 filings and domain…
Declade/lucairn-sdks
Privacy gateway that sanitizes German and English PII before prompts reach an LLM and issues a signed, timestamped certificate for each call.
dengyier/OpenWorkProof
Verifiable execution protocol for agent tool calls: signed policy decisions, causal evidence chains and offline verification from a SQLite ledger.
dnsdoctor/claude-plugin
Scan and fix a domain's email authentication (SPF, DMARC, DKIM, MX), blacklist status and domain/SSL expiry, with deterministic, validated fix…
doublegate/CyberChef-MCP
GCHQ CyberChef's encryption, encoding, compression and forensics operations, plus analysis tools such as hash identification, cipher solving and RSA…
Drumworks/ssid-mcp
MAC address (OUI) vendor lookup with randomized-address detection, plus router default login IPs and admin credentials cited to manufacturer…
dtkmn/mcp-zap-server
Self-hosted OWASP ZAP integration with guided security scans, findings summaries and report generation.
duriantaco/skylos
Dead code detection, security scanning and code quality analysis for Python, TypeScript and Go, with AI-assisted remediation.
echelongraph/echelongraph-mcp
Keyless, read-only CVE and internet-exposure intelligence: CVE lookup and search, CISA KEV, EPSS history, CWE, vendor advisories (MSRC, Red Hat,…
elang2/mcp-audit-gateway
Transparent MCP proxy that keeps a signed, hash-chained audit trail of agent tool calls, with YAML policy enforcement and OpenTelemetry export.
elberacasa/umbra
Trust scores and guardrails for AI-generated code: static security rules, Docker-verified build/boot checks and receipts that catch agents lying…
eliottreich/taskbounty-check
Local, read-only scanner for GitHub Actions and CI maintenance issues in AI-built apps, with finding explanations and fix plans.
emiliaprotocol/emilia-protocol
Requires a named human's approval before irreversible agent actions such as payments or deploys, then issues an offline-verifiable Ed25519 trust…
epistemedeus/skillguard
Static scanner that checks Claude Code skills, plugins and MCP servers for exfiltration, install hooks and prompt injection before you install them.
Erodenn/fetch-guard
URL fetcher and HTML-to-Markdown converter with layered prompt injection defense: hidden-element sanitization, risk scanning and content boundary…
Farenhytee/database-sentinel
Read-only security audit for Supabase. Four tools surface RLS gaps, permissive policies, exposed functions and grants; an `audit` prompt returns…
felixpg13-glitch/spendshield
Payment guardrails for AI agents: spend caps, budget and approval gates, prompt-injection defense, an encrypted secret vault and an audit trail.
firstorderai/authenticator_mcp
Securely interact with the Authenticator App.
forest6511/secretctl
Secrets manager that injects credentials into commands as environment variables so agents never see plaintext secrets, and sanitizes command output.
forgemeshlabs/x402-notary-mcp
Notarize AI model outputs with signed Ed25519 attestations, SHA-256 content hashes and Merkle anchoring on Base or Solana, paid via x402.
fosdickio/binary_ninja_mcp
Binary Ninja plugin and bridge for automating binary analysis and reverse engineering.
FoundryNet/mint-mcp
MINT Protocol work attestation for agents: cryptographically attest, verify, rate and discover agent work to build portable on-chain reputation.
fr0gger/MCP_Security
Query the ORKL API to fetch threat reports, analyze threat actors and retrieve intelligence sources.
fredyee/hallucc-mcp
Claim-level hallucination detection with sources, agent trajectory verification, risk gating for computer-use actions and prompt-injection defense.
Fronesis-Labs/dcl-webhook
Deterministic audit layer that checks LLM and agent outputs against jailbreak, safety and trading compliance policies and logs verdicts to a hash…
Gaffx/volatility-mcp
Memory forensics with Volatility 3, exposing plugins such as pslist and netscan through REST APIs.
gaoharimran29-glitch/Cybersecurity-MCP-Server
Local security reconnaissance: WHOIS, DNS and subdomain enumeration, Nmap scanning, TLS inspection, tech fingerprinting, CVE and IP reputation…
gautam-u/sieve-mcp
Local macOS scanner for secrets leaked into AI tool chat transcripts, with redacted findings, placeholder-only redaction and Keychain-backed command…
gbrigandi/mcp-server-cortex
Cortex integration for observable analysis and automated security responses.
gbrigandi/mcp-server-thehive
TheHive integration for collaborative security incident response and case management.
gbrigandi/mcp-server-wazuh
Access real-time security alerts and event data from Wazuh SIEM.
gebalamariusz/cloud-audit
AWS security scanner with attack chain detection, breach cost estimation and remediation snippets for CLI and Terraform.
getaegis/aegis
Credential isolation proxy that injects secrets at the network boundary, with domain restrictions, agent authentication and audit logging.
goklab/guardvibe
Security scanner for vibe-coded apps (Next.js, Supabase, Stripe, Prisma and more): taint analysis, auto-fix, SARIF export, pre-commit hook and CVE…
goldmembrane/cleaner-code
Locally scans AI-generated code for invisible Unicode, Trojan Source, homoglyphs, rules file backdoors and typosquatting using static analysis and…
gostanos/smallprint-action
Query the Small Print record: versioned, diffed tool descriptions and schemas of MCP servers, skills and plugins, with graded changes and public…
Gowthaman90/mcp-bastion
Security proxy for MCP servers: tool-definition pinning, tool-poisoning and exfiltration detection, injection blocking, secret redaction and audit…
gridinsoft/mcp-inspector
Domain and URL security analysis with GridinSoft Inspector to verify website and link safety.
GUCCI-atlasv/skillssafe-mcp
Scan SKILL.md files, MCP configs and system prompts for credential theft, prompt injection, zero-width character attacks and ClawHavoc indicators.
HaroldFinchIFT/vuln-nist-mcp-server
Query the NIST National Vulnerability Database (NVD) API.
haruodev/tamperlens-mcp
Document forensics via the Tamperlens API: detect post-creation edits, failed redactions and embedded prompt injection in PDFs, Office files and…