Security – MCP servers
246 MCP servers in the category Security. Open-source Model Context Protocol (MCP) servers that let AI assistants and agents use external tools and data. Entries come from the community list awesome-mcp-servers; we have not tested each server, so check the repository before you install one.
hernaninverso/eleion-scanner-mcp
Register and verify domains, queue security scans (headers, TLS, DNS, ports, CVEs and AI-specific checks) and read findings.
hieutran/entraid-mcp-server
Microsoft Entra ID (Azure AD) directory, user, group, device, sign-in and security operations via Microsoft Graph.
honeylabshq/honeylabs-mcp
Honeypot threat intelligence from a sensor network: IP reputation, scanner classification, CVE probing trends and JA4, JA4H and HASSH fingerprints.
I4cTime/quantum_ring
Quantum-inspired keyring for AI coding agents, securing secrets with superposition, entanglement, tunneling and teleportation.
iamredmh/volta-mcp-server
Burn-after-read encrypted Volta Notes for agents: hand off credentials between users and agents without secrets appearing in chat history.
icoretech/warden-mcp
Manage Bitwarden and Vaultwarden vaults via the bw CLI: search, create, edit and organize logins, notes, cards, identities, SSH keys, folders and…
infai-tech/vulnfeed-mcp
Scans dependency lockfiles for vulnerabilities, prioritizes them by EPSS exploit probability and recommends fix versions, with monitoring and…
inkog-io/inkog-mcp
Audits agents and MCP servers for prompt injection, infinite loops, token bombing and missing human oversight, with EU AI Act and OWASP mapping.
intruder-io/intruder-mcp
Access Intruder to identify, understand and fix security vulnerabilities in your infrastructure.
itsalissonsilva/ModelSafetyMCP
Scan ML model artifacts, URLs and directories for unsafe serialization, malicious patterns and risky packaging using ModelScan, PickleScan and…
jaimenbell/rails-mcp
Self-hosted default-deny action registry, append-only spend-intent ledger and human sign-off audit trail for gating irreversible agent actions.
jamesdfinance-dev/lazaretto-mcp
Check lockfiles against malicious-package advisories and scan artifacts for credential theft, exfiltration, obfuscation, prompt injection and…
jamjet-labs/jamjet-policy
MCP interceptor that applies one YAML policy (block, require approval, audit, budget cap) to tool calls, also usable in Claude Code hooks and agent…
Jiangw2718i/frisk
Screen x402 payment counterparties before paying: address sanity, payTo swap, transport safety and spend policy checks with an allow, review or…
Jimil-Joshi/blastradius-mcp
Zero-trust security proxy, pre-execution blast radius simulation, DLP secret redaction, and cryptographic audit logging for MCP.
jimmyracheta/AI-Runtime-Guard
Runtime policy enforcement for AI agents that prevents accidental system damage and unauthorized access, with automatic backups before file writes.
jnMetaCode/shellward
Agent security middleware with layered defenses: prompt injection detection, DLP data flow tracking, command blocking and PII detection.
joergmichno/clawguard-mcp
Security scanner for AI agents that detects prompt injections using regex patterns.
JoeyBrar/agentseal-mcp
Action logs for AI agents: records every action in a SHA-256 hash chain as an audit trail.
jonnybottles/patch-tuesday-mcp
Microsoft Patch Tuesday triage from the MSRC Security Update Guide: monthly rollups, CVE/KB lookups, supersedence chains and EPSS/CISA KEV urgency…
jstibal/openterms-mcp
Ed25519-signed consent receipts and a policy engine for agents: spending caps, action allowlists, escalation thresholds and JWKS-backed provider…
jtang613/GhidrAssistMCP
Native Ghidra integration with GUI configuration, logging and no external dependencies.
juanisidoro/securecode-mcp
Encrypted secrets vault for Claude Code that injects secrets into local files so the AI never sees raw values, with audit logs and per-model access…
jyjune/mcp_vms
Retrieve live and recorded video from a CCTV recording program (VMS) and control it, such as opening live or playback dialogs for specific channels…
kakunin-ai/kakunin-mcp
Agent compliance and identity: verify an agent's X.509 certificate scope, read its behavioral risk score and append to an immutable audit trail.
kastelldev/kastell
Server security auditing and hardening (SSH, firewall, Docker, TLS) with CIS/PCI-DSS/HIPAA mapping, fleet management and forensic evidence collection.
kent-tokyo/shohei
Infrastructure diagnostics: DNS checks, TLS certificate chain inspection, email security, global DNS propagation and DNS latency benchmarking.
Kjopstad-IT/rqwstr
HTTP security testing toolkit (send, intruder, race, chain, out-of-band) with low-level HTTP/1.1 and HTTP/2 control: raw framing and connection…
KOVY/agentforge-trust-mcp
Query AgentForge Trust Scores for MCP servers before connecting, covering security, code health, behavioral audit, community trust and EU compliance.
Kzino/vorim-mcp-server
Agent identity, trust and audit trails: Ed25519 agent registration, permission checks, tamper-evident audit events, trust scores and credential…
LaurieWired/GhidraMCP
Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.
layervai/qurl-mcp
Mint, resolve, audit and rotate expiring, scope-limited access links (qURLs) via the qURL API.
loglux/authmcp-gateway
Auth proxy for MCP servers: OAuth2 with DCR, JWT, RBAC, rate limiting, multi-server aggregation and a monitoring dashboard.
luiacuaniello/perspectivegraph
Attack-path engine for cloud and Kubernetes: list routes from internet exposure to sensitive assets, explain each hop, find choke points and…
M2M-Sentinel/m2m-sentinel-sdk
EVM bytecode capability analysis, EIP-1967 proxy resolution, gas recommendations and preflight safety checks for agents on Base.
mandarelabs/mandare
Accountability for AI agent fleets: verify a signed, hash-chained ledger, check budgets, kill an agent, and issue passports and mandates, all…
mariocandela/beelzebub
Honeypot framework for building decoy MCP tools that an agent would never use in normal work, to detect prompt injection and malicious agent behavior.
MARUCIE/authbox
Zero-knowledge password manager and MCP credential gateway: policy-gated agent access, deterministic passwords, BIP-39 recovery and a hash-chain…
mastyf-ai/mastyf.ai
Runtime security proxy for MCP that blocks prompt injection, SSRF, shell/SQL injection and credential exfiltration, plus trust scores for npm MCP…
maxfain/basedagents
Agent identity registry (reputation, capability search, task marketplace, messaging) plus a local encrypted vault that leases provider keys to agents.
mcp-hangar/mcp-hangar
Self-hosted policy enforcement for MCP server fleets: deterministic admission and egress policies, attributable audit logs and SIEM export.
mcpindex-ai/mcp-server-mcpindex
Find MCP servers by describing a task and get advisory trust screens before connecting, using the mcpindex directory.
meloliva14/verity-mcp
Fail-closed trust gate for agents: fact-checking, prompt-injection detection, content moderation, PII and secret detection, and a pre-action…
mirajmahmudul/agentdevx-sdk
Identity and credential gateway for agents: Ed25519 identity, encrypted credential vault, OPA policies with audit logging, per-agent memory and web…
mobb-dev/mobb-vibe-shield-mcp
Mobb Vibe Shield identifies and remediates vulnerabilities in human and AI-written code.
MoltyCel/moltrust-mcp-server
Trust infrastructure for AI agents: register DIDs, verify identities, query reputation scores, rate agents and manage W3C Verifiable Credentials.
mopanc/depguard
Pre-install npm package checks: static analysis, supply-chain attack detection, vulnerability audits, AI hallucination guard and CycloneDX SBOM…
moxno/privacyscrubber-mcp
Local, zero-trust masking of PII and secrets.
mrexodia/ida-pro-mcp
IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.
mrz1880/mcp-keycloak-admin
Administer Keycloak via its Admin REST API: users, roles, clients, groups, identity providers, federation and events, with a read-only mode.
msaad00/agent-bom
AI supply chain security scanner: discovers MCP clients, scans dependencies for CVEs, maps blast radius to credentials and tools, and generates SBOMs.
muhannad-hash/mcp-shield
Pre-install security scanner for MCP servers: detects backdoors, exfiltration code, obfuscation, dangerous execution, prompt injection and supply…
nagameTW/mcp-server-malcolm
Malcolm threat hunting: search and aggregate network traffic, query Suricata alerts, browse Arkime sessions and resolve NetBox assets. Read-only by…
nh4ttruong/secobserve-mcp
SecObserve vulnerability and license management: triage observations, manage products and rules, import scan reports and SBOMs, run scans and…
nickgeorgeseo/mcp-gatehouse
Permission tiers, approval gates and secret-redacting audit logging enforced inside MCP servers at the tool boundary, with a demo order-desk server.
nickpending/mcp-recon
Conversational recon with httpx and asnmap: domain analysis, security header inspection, certificate analysis and ASN lookups at multiple recon…
node-man/dechonet-mcp
Domain security checks: DNS, DNSSEC, TLS grading, HTTP security headers, SPF, DKIM and DMARC, port scans, ASN, RDAP and WHOIS, plus an overall…
noor202401938-netizen/cyber-chef-mcp
CyberChef MCP server providing 28 core data transformations, ciphers, hashing, JWT decoding, representation-calibrated Shannon entropy, and…
OksigeniaSL/checker-mcp
Local-first domain security and privacy checker: live SPF, DMARC, DKIM, DNSSEC, TLS, CAA and security header checks, scored with remediation advice.
oleg-vdv/kepil
Accountability layer for AI agents: per-version passports, per-job mandates with spending limits, a fail-closed action gate and a hash-chained…
operantlabs/operant-mcp
Security testing tools for penetration testing, network forensics, memory analysis and vulnerability assessment.
OrygnsCode/opa-mcp-server
OPA and Rego policy toolkit wrapping the OPA CLI and Regal: format, lint, evaluate, test and benchmark policies, manage the OPA REST API and explain…
P4ST4S/mcp-audit
Transparent proxy that intercepts, signs, rate-limits, redacts and audits MCP tool calls without modifying client or server.
panther-labs/mcp-panther
Use Panther's SIEM platform in natural language to write detections, query logs and manage alerts.
Pentagonal-ai/pentagonal
Generate, audit, fix and compile smart contracts on Ethereum, Solana, Base and other chains, with adversarial multi-agent pen testing and honeypot…
Perufitlife/web-exposure-mcp
Read-only check of a live URL for publicly exposed secret files: .git, .env, JS source maps, backup/SQL dumps, directory listings and dotfiles.
petrovicistefan/mcp-security-guard
Audit the MCP servers you use against the OWASP MCP Top 10: tool poisoning, rug pulls, shadowing, secrets and supply-chain risk, with runtime…
piiiico/proof-of-commitment
Supply chain risk scoring for npm, PyPI, Cargo and Go packages from behavioral signals: publisher depth, release consistency and maintenance patterns.
ppcvote/misp-mcp-server
Read-only MISP threat intelligence (events, attributes, search, tags, feeds, galaxies) with prompt injection scanning of every response.
privacyfence/privacyfence
Privacy and approval gateway between AI assistants and Gmail, Drive, Slack, Salesforce, Jira and more: human approval for sensitive reads and…
project-feldspar-resources/feldspar-scan
Deterministic security scan of public git repositories: vulnerable dependencies via OSV, hard-coded secrets and risky config lint, as file:line…
pullkitsan/mobsf-mcp-server
Static and dynamic analysis of Android and iOS apps with MobSF.
qianniuspace/mcp-security-audit
Audit npm package dependencies for security vulnerabilities with real-time checks against the npm registry.
qinisolabs/qiniso
Verify IBAN, VAT, VIN, barcodes, national and tax IDs, crypto addresses, phone numbers, dates and holidays against checksums and curated data.
quantakrypto/pqc-tools
Post-quantum readiness: scan code for quantum-vulnerable cryptography (RSA, ECDH, ECDSA, DH), get ML-KEM/ML-DSA/SLH-DSA migration guidance and…
rad-security/mcp-server
Query the RAD Security API for Kubernetes and cloud security findings, reports and runtime data.
radareorg/r2mcp
Disassemble and inspect binaries for reverse engineering with the Radare2 disassembler.
rafapra3008/cervellaswarm
Verify agent communication protocols with session types and Lean 4 proofs to catch deadlocks and role violations; includes a linter, formatter and…
rev2ret/SecureAudit-MCP
Static C/C++ memory-safety scanning and PE/ELF binary protection audits (ASLR, DEP/NX, SafeSEH, PIE), with remediation via secure templates.
roadwy/cve-search_mcp
Query the CVE-Search API: browse vendors and products, get CVEs by ID and list the latest updated CVEs.
rob925/mcp-shield
Static security scanner for MCP servers and agent tools: detects secrets, shell execution, risky tool descriptions, environment access and prompt…
RoscoNL/intodns-mcp-server
DNS and email security scans via IntoDNS.ai: SPF, DKIM, DMARC, DNSSEC, MTA-STS, BIMI, TLS, blacklist and deliverability checks plus security header…
rudimentall1/agentic-wallet-guardian-v3
Self-hosted security layer that evaluates AI agents' proposed blockchain transactions and returns an explainable allow, warn or block decision.
rudraneel93/mcp-guardian
Security and governance proxy for MCP with YAML policies (blocklists, rate limits, token budgets), token cost tracking, health monitoring and RBAC.
Rul1an/assay
Fail-closed policy-as-code proxy for MCP that denies risky tool calls, produces offline-verifiable evidence bundles and enforces egress via eBPF and…
sachio222/54ch10-mcp
JSON risk briefs for wallet addresses, tokens and URLs: scores, flags and sources from phishing, scam and URL-reputation heuristics, including…
safedep/vet
Locally check npm and PyPI packages, such as those suggested by AI coding tools, for vulnerabilities and malicious code.
samvas-codes/dawshund_mcp
Enumerate AWS IAM data, analyze effective permissions and visualize access relationships across users, roles and resources, based on dAWShund.
sanyambassi/ciphertrust-manager-mcp-server
Thales CipherTrust Manager integration for key management, cryptographic operations and compliance monitoring.
sanyambassi/thales-cdsp-cakm-mcp-server
Thales CDSP CAKM integration for key management, cryptographic operations and compliance monitoring for Microsoft SQL Server and Oracle databases.
sanyambassi/thales-cdsp-crdp-mcp-server
Integration with the Thales CipherTrust Manager RESTful Data Protection service.
SaravananJaichandar/etch-mcp
Signed audit chain for AI agent decisions: events are signed, Merkle-chained per project, anchored to public transparency logs and verifiable offline.
scalekit-inc/scalekit-mcp-server
Manage Scalekit organizations, users and SSO.
scamverifyai/scamverify-mcp
Scam and threat checks for phone numbers, URLs, texts, emails, documents and QR codes using FTC/FCC complaints, URLhaus and ThreatFox, with risk…
ScopeBlind/verify-mcp
Offline verification of Ed25519/JCS-signed artifacts such as receipts, manifests and audit bundles.
securityfortech/secops-mcp
Security testing toolbox that combines open source tools behind a single interface for pentesting, bug bounty hunting and threat hunting.
sekera-radim/impri
Self-hostable human-in-the-loop approval inbox: humans approve, reject or edit proposed agent actions via web, mobile, Slack, Discord or Telegram.
semgrep/semgrep
Scan code for security vulnerabilities using Semgrep.
sgateway/s-gw
Local credential gateway for coding agents: agents get handles instead of raw secrets, and one-time approvals inject credentials only into approved…
shieldly-io/mcp
Analyze AWS IAM policies and CloudFormation templates with Shieldly to flag privilege-escalation paths, wildcards and over-permissive access.