Security MCP servers
3,375 servers
Scan code and dependencies, look up vulnerabilities and work with security tools.
plug.directory lists 3,375 servers in Security, top ranked first.
971 servers run remotely with nothing to install, and 2,465 servers run on your machine.
501 servers started in our own check.
Top Security MCP servers
- Overall Safeguard
- Remote, nothing to install AIPayGen Site Intel
- Runs on your machine Safeguard
Works in
- Claude Code 3,240 servers
- Cursor 3,240 servers
- VS Code 3,240 servers
- Devin Desktop 3,240 servers
Questions about Security MCP servers
How many Security MCP servers are there?
3,375 servers are listed today; 15 of them publish their list of tools.
Which Security MCP server ranks first?
Safeguard (com.cognivators/mcp-safeguard) ranks first by our published rank, which weighs downloads, listings, documentation, maintenance and known advisories. No position is paid for.
Are there remote Security MCP servers?
Yes: 971 servers (29%) run remotely, so a client connects by address with nothing to install.
Which Security MCP servers work in Claude Code?
3,240 servers have an install config that works in Claude Code.
Which Security MCP servers work in Cursor?
3,240 servers have an install config that works in Cursor.
Have these servers been checked?
Our own check has run on 949 servers: 501 started, 19 need credentials to verify, 272 ask for a sign-in, 157 did not start.
Do Security MCP servers state a licence?
2,024 of 3,375 servers (60%) state a licence; the rest state none.
All Security MCP servers
- Safeguard
com.cognivators/mcp-safeguardMCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- AIPayGen Site Intel
io.github.Damien829/aipaygenWebsite and company intel for agents: DNS, WHOIS, SSL, tech stack, email security, profiles
100% up · 30 days
Security Official MCP Registry · PyPI Remote MIT
- Rubrik Security Cloud
io.github.rubrikinc/rubrik-mcpConnect AI assistants to the Rubrik Security Cloud GraphQL API to discover, query, and automate.
Version check not run yet
Security Official MCP Registry · GitHub MCP Registry · PyPI Local MIT
- Snyk API & Web MCP Server
io.github.snyk/saw-mcpMCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage
Version check not run yet
Security Official MCP Registry · GitHub MCP Registry · PyPI Local APACHE-2.0
- Observatory
io.github.KryptosAI/mcp-observatoryMCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
Version check not run yet
Developer tools Official MCP Registry · npm Local 432 a week MIT
- Snyk
io.snyk/mcpEasily find and fix security issues in your applications leveraging Snyk platform capabilities.
Version check not run yet
Security Official MCP Registry · GitHub MCP Registry · Go modules Local APACHE-2.0
- WARDEN — MCP Security Firewall
io.github.alexar76/wardenMCP security firewall: stdio wrap proxy or inspection tools; zero runtime dependencies.
Version check not run yet
Security Official MCP Registry · npm Local 314 a week MIT
- IPGeolocation.io MCP Server
io.github.IPGeolocation/ipgeolocation-io-mcpIP geolocation, security, ASN, abuse, time zones, astronomy, and user-agent parsing over stdio.
Version check not run yet
Utilities Official MCP Registry · GitHub MCP Registry · npm Local 253 a week MIT
- mcp-atlassian
io.github.sooperset/mcp-atlassianThe Model Context Protocol (MCP) Atlassian integration is an open-source implementation that bridges Atlassian products (Jira and Confluence) with AI language models following Anthropic's MCP specific
Version check not run yet
Security PyPI · Docker Hub · Docker MCP Catalog Local MIT
- Agent Security Scanner
io.github.sinewaveai/agent-security-scanner-mcpSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
Version check not run yet
Security Official MCP Registry · npm Local 203 a week MIT
- Chron
io.github.SirinivasK/chronTimestamped audit log for every AI conversation — stored locally in SQLite, owned by you.
Version check not run yet
Databases Official MCP Registry · npm Local 160 a week SEE-LICENSE-IN
- CertScore.ai MCP Light
ai.certscore/mcp-lightFree website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
100% up · 30 days
Security Official MCP Registry · GitHub MCP Registry · npm Remote 144 a week PROPRIETARY
- NativeKeel
io.github.AlicanAkyol/nativekeelReact Native and Expo health check: upgrade blockers, store rules, crash risks, security findings
Version check not run yet
Monitoring and observability Official MCP Registry · npm Local 4.3k a week MIT
- Stackhawk
com.stackhawk/stackhawkAn MCP server that provides interaction with StackHawk's security scanning platform.
Version check not run yet
Security Official MCP Registry · GitHub MCP Registry · PyPI Local APACHE-2.0
- CrowdStrike Falcon MCP Server
io.github.CrowdStrike/falcon-mcpConnects AI agents with CrowdStrike Falcon for security analysis and automation.
Version check not run yet
Security Official MCP Registry · GitHub MCP Registry · PyPI Local MIT
- MCPProxy
io.github.smart-mcp-proxy/mcpproxy-goLocal-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings
Not checked yet
Model and agent tools Official MCP Registry · Go modules MIT
- Depwire
io.github.atef-ataya/depwireDependency graph + 24 MCP tools. Impact analysis, simulation, security, agent coordination
Version check not run yet
Developer tools Official MCP Registry · npm Local 249 a week BUSL-1.1
- Nslookup
io.github.venomseven/nslookupDNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks
100% up · 30 days
Security Official MCP Registry · GitHub MCP Registry · npm Local Remote 68 a week APACHE-2.0
- CCS Runtime Evidence
io.github.DSHCorrectover/ccs-mcp-serverAgent tool-call guardrail: fail-closed runtime security verification with Ed25519 evidence receipts.
Version check not run yet
Security Official MCP Registry · npm Local 67 a week ELASTIC-2.0
- hexvero
io.github.maximilianfeix/hexveroElectron release diff for security review: what changed in IPC, contextBridge, windows and hosts.
Version check not run yet
Security Official MCP Registry · npm Local 3.1k a week MIT
- Jshookmcp
io.github.vmoranv/jshookmcpSearch-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
Version check not run yet
Security Official MCP Registry · npm Local 645 a week AGPL-3.0-ONLY
- node9
io.github.node9-ai/node9Access control for AI agents and MCP servers: allow, hold for approval, or block each tool call
Version check not run yet
Security Official MCP Registry · npm Local 2k a week APACHE-2.0
- Zscaler Zero Trust Exchange
io.github.zscaler/zscaler-mcp-serverManage Zscaler Zero Trust Exchange via 400+ tools — ZPA, ZIA, ZDX, ZCC, ZTW, ZMS, EASM, and more.
Version check not run yet
Security Official MCP Registry · GitHub MCP Registry · PyPI Local MIT
- Siteaudit
io.github.vdalhambra/siteaudit-mcpSEO, performance, and security audits for any URL — no API keys required
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- Zn Gate
io.github.usezn/zn-gateThe local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
Version check not run yet
Coding agent tools Official MCP Registry · npm Local 1.7k a week MIT
- Prometiam Company Data
io.github.matiasmaquieira96/risk-mcpKYB API: company registry data from 29 countries, insolvency notices and sanctions screening
Version check not run yet
Security Official MCP Registry · npm Local 1.6k a week MIT
- SatGate – Economic Firewall for AI Agents
io.github.SatGate-io/satgateBudget, payment and audit controls for AI agent API calls and MCP tool calls.
100% up · 30 days
Finance and payments Official MCP Registry · npm Local Remote 31 a week MIT
- MikroMCP
io.github.AliKarami/mikromcpMCP server for MikroTik RouterOS and SwOS: typed tools, dry-run, RBAC, audit logs, and rollback.
Version check not run yet
Monitoring and observability Official MCP Registry · npm Local 408 a week MIT
- Guardvibe
io.github.goklab/guardvibeDeterministic security layer your AI can't be. 618 rules, 39 tools, CLI + doctor + host audit.
Version check not run yet
Security Official MCP Registry · npm Local 1.4k a week APACHE-2.0
- Dechonet
com.dechonet/mcp30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
100% up · 30 days
Security Official MCP Registry · npm Local Remote 1.4k a week MIT
- Sentinel Scan
io.github.Ventrova/sentinel-scan-cliMCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics.
Version check not run yet
Security Official MCP Registry · npm Local 29 a week MIT
- EchelonGraph CVE & Exposure
io.echelongraph/echelongraph-mcpCVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
100% up · 30 days
Security Official MCP Registry · npm Local Remote 1.3k a week MIT
- Holster MCP
com.nautaai/holster-mcpLocal-first secret scanning, rotation, vault, and audit-log tools for AI agents.
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- SyteCheck
com.sytecheck/sytecheck-mcpScan a website for SEO, accessibility, performance and security issues, and read the report.
Version check not run yet
Developer tools Official MCP Registry · npm Local MIT
- Rubric
io.github.0xsims/rubric-mcpAttested evidence tools for AI agents: sanctions screening, agent/wallet records, paid via x402.
Version check not run yet
Security Official MCP Registry · npm Local SEE-LICENSE-IN
- Sn1per MCP Server: pentest, recon and attack surface scanning
io.github.1N3/sn1per-mcpRun scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.
Version check not run yet
Security Official MCP Registry · PyPI Local APACHE-2.0
- DomainKits
io.github.ABTdomain/domainkits-mcpSearch newly registered, expired, aged, active, deleted and for-sale domains, plus WHOIS and DNS.
100% up · 30 days
DevOps and infrastructure Official MCP Registry · npm Local Remote MIT
- Binance Spot (security-first) + crypto analyst
io.github.Alejandrehl/kainext-binance-mcpSecurity-first Binance Spot MCP + honest crypto analyst. 25 tools, 5 prompts, human-gated orders.
Version check not run yet
Finance and payments Official MCP Registry · PyPI Local MIT
- Czech PII Anonymizer & NLP
io.github.Buggy1111/anonymize-mcpAnonymize PII & redact text (GDPR): Czech + 35-lang NER, morphology, translation, spellcheck
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- Aml
io.github.CryptoAPIs-io/mcp-amlMCP server for AML address verification and transaction screening via Crypto APIs
Version check not run yet
Security Official MCP Registry · npm Local MIT
- Deepsleuth
io.github.DeepSleuth/deepsleuthDeterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.
Version check not run yet
Security Official MCP Registry · PyPI Local APACHE-2.0
- EyalSec
io.github.EyalSec/eyalsec-mcpRead your EyalSec security events, machines, runs and rules from an AI assistant.
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- Guard Core
io.github.Guard-Core/guard-core-mcpGuard Core security MCP: SecurityConfig validation, docs search, live threat detection.
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- Greenlake Audit Logs
io.github.HewlettPackard/greenlake-audit-logs-mcpHPE GreenLake audit-logs MCP Server
Version check not run yet
Monitoring and observability Official MCP Registry · PyPI Local APACHE-2.0
- Eurodns
io.github.JigSawFr/eurodns-mcpModel Context Protocol server for the EuroDNS User API — domains, DNS zones, subscriptions and SSL.
Version check not run yet
DevOps and infrastructure Official MCP Registry · npm Local MIT
- Binance (security-first) + crypto analyst
io.github.KumailQazi/krmaazha-binance-mcpSecurity-first Binance MCP. 26 tools, human-confirmed spot trades, offline quant research.
Version check not run yet
Finance and payments Official MCP Registry · PyPI Local MIT
- Umbryn
io.github.Rinava/umbryn-mcpRedacts PII/PHI from text before it reaches an LLM. Fail-closed, self-hosted, no egress.
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- Codesearch
io.github.SK-DEV-AI/codesearchCode, package, docs, paper and vulnerability search. 17 tools, keyless lanes.
Version check not run yet
Security Official MCP Registry · PyPI Local MIT