Security MCP servers

3,385 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. CO Codeaudit io.github.infoinlet-marketplace/mcp-codeaudit

   Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

   Version check not run yet

   Security Official MCP Registry · npm Local MIT

2. KO KontragentPro io.github.kontragentpro/kontragentpro-mcp

   Russian company data by INN: registry, financials, bankruptcy, inspections, sanctions

   Version check not run yet

   Security Official MCP Registry · PyPI Local MIT

3. VE Veragent io.github.lixiaowww/veragent

   Check the trust/security score of MCP servers, agents, skills & CLIs before you install them.

   Version check not run yet

   Security Official MCP Registry · PyPI Local MIT

4. MP MaskFlow PII proxy io.github.maskflow/mcp

   Mask PII in outbound MCP tool-call arguments, unmask the results. Indian identifiers included.

   Version check not run yet

   Security Official MCP Registry · PyPI Local MIT

5. GD Gdpr Decisions io.github.mister-franklin/gdpr-decisions

   EU GDPR decisions by thedpo.eu — search all EU DPA decisions and recommendations

   Version check not run yet

   Security Official MCP Registry · PyPI Remote MIT

6. WH Whois io.github.mrfentmen/whois-mcp

   RDAP whois records for domains and IPs.

   Version check not run yet

   Security Official MCP Registry · npm Local MIT

7. MA Malcolm io.github.nagameTW/mcp-server-malcolm

   MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch): threat-hunting access for AI agents

   Version check not run yet

   Security Official MCP Registry · PyPI Local MIT

8. RS RelayShield Security Intelligence io.github.nzdsf2-gif/relayshield-mcp

   Breach, SIM swap, infostealer, domain lookalikes, MCP registry risk, prompt-injection detection.

   Version check not run yet

   Model and agent tools Official MCP Registry · PyPI Local MIT

9. GM GLEIF MCP Server io.github.olgasafonova/gleif-mcp-server

   Access the GLEIF LEI database for company verification, KYC, and ownership research.

   Version check not run yet

   Databases Official MCP Registry · Go modules Local MIT

10. GW Guarded WhatsApp io.github.peter-tnc-453/guarded-whatsapp-mcp

    Security gate for agent-driven WhatsApp: allowlist, secret scan, rate limit, audit log.

    Version check not run yet

    Communication and chat Official MCP Registry · PyPI Local MIT

11. SA SanAlert io.github.plrojek/sanalert-mcp

    Unofficial threat level from the air for a place in Poland, worked out on your own computer.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

12. SM Security MCP io.github.pratham-jain33/security-mcp

    Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

13. QU Qualys io.github.rijul170/qualys-mcp

    Full Qualys portal management over MCP: VMDR, PC, WAS, Cloud Agent, Container Security & more

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · PyPI Local MIT

14. OS OSINT io.github.robyroro/osint-mcp

    Domain and website investigations: batch recon, shared infrastructure, CT history and public lookups

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

15. SE Securityscan io.github.securityscan-api/securityscan

    Security for AI agents: MCP audits, secret redaction, skill vetting, network scans, agent checkout.

    Version check not run yet

    Security Official MCP Registry · PyPI Local APACHE-2.0

16. AL Alphakey io.github.seyoung230/alphakey-mcp-server

    AlphaKey IDaaS MCP Server — Manage SSO, MFA, users, apps, and security policies through AI IDE

    Version check not run yet

    Developer tools Official MCP Registry · PyPI Local LICENSEREF-PROPRIETARY

17. SS Secret Scrub io.github.sudo-ai-git/mcp-secret-scrub

    Deterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

18. WR writ io.github.withwrit/writ

    Commit-time policy checks for AI agent writes (ALLOW/DENY/STEP_UP) with a tamper-evident audit log.

    Version check not run yet

    Git and code hosting Official MCP Registry · PyPI Local MIT

19. KD kdbx io.github.yarrasys/kdbx

    Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

    Version check not run yet

    Security Official MCP Registry · Go modules Local MIT

20. VD Vdb kr.ai.vdb/vdb

    Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.

    100% up · 30 days

    Security Official MCP Registry · PyPI Local Remote ELASTIC-2.0

21. FL Flare dev.flarehq/security

    Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys

    Version check not run yet

    Security Official MCP Registry · npm Local 20 a week MIT

22. MC Mcpsentry io.github.Roshan6335/mcpsentry

    Security scanner and runtime proxy for MCP servers.

    Version check not run yet

    Security Official MCP Registry · npm Local 20 a week MIT

23. IN Inspector io.github.gridinsoft/inspector

    Website safety and trust analysis. Verify domain reputation and detect phishing with GridinSoft.

    Version check not run yet

    Security Official MCP Registry · npm Local 20 a week MIT

24. DE Detectzestack io.github.mlugo-apx/detectzestack-mcp

    Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.

    Version check not run yet

    Security Official MCP Registry · npm Local 20 a week MIT

25. MA Mitre Attck io.github.pipeworx-io/mitre-attck

    MITRE ATT&CK MCP — STIX bundles from github.com/mitre/cti.

    100% up · 30 days

    Security Official MCP Registry · npm Remote 20 a week MIT

26. OW Owasp io.github.pipeworx-io/owasp

    OWASP MCP — keyless.

    100% up · 30 days

    Security Official MCP Registry · npm Remote 20 a week MIT

27. SI Sanctions Io io.github.pipeworx-io/sanctions-io

    sanctions.io MCP — wraps the sanctions.io Screening API (api.sanctions.io)

    100% up · 30 days

    Security Official MCP Registry · npm Remote 20 a week MIT

28. SH Shodan io.github.pipeworx-io/shodan

    Shodan MCP — wraps the full Shodan REST API (api.shodan.io)

    100% up · 30 days

    Security Official MCP Registry · npm Remote 20 a week MIT

29. UR Urlhaus io.github.pipeworx-io/urlhaus

    URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)

    100% up · 30 days

    Databases Official MCP Registry · npm Remote 20 a week MIT

30. MI Microquery io.github.microqueryhq/microquery-mcp

    SQL over real-world data — FDA, SEC, blockchain, genomics, CVEs, and more. No config.

    Version check not run yet

    Science and research Official MCP Registry · PyPI Local MIT

31. VE Vet ai.getvet/vet

    Discover and vet MCP servers: search 200K+ AI tools with security verification and schemas.

    Version check not run yet

    Security Official MCP Registry · npm Local 19 a week MIT

32. MA Malwarebazaar io.github.pipeworx-io/malwarebazaar

    MalwareBazaar MCP — abuse.ch malware sample database (free, key required)

    100% up · 30 days

    Databases Official MCP Registry · npm Remote 19 a week MIT

33. AS Agent Security io.github.mdfifty50-boop/agent-security

    Security scanning and threat detection for AI agents

    Version check not run yet

    Security Official MCP Registry · npm Local 23 a week MIT

34. AC aether-code io.github.dannyphantomx64/aether-code

    Uncensored AI coding agent for your terminal — Claude Code alternative with MCP support. Reads code, writes files, runs commands. Drives IDA Pro, Roblox Studio, Wireshark, Blender, and any MCP server.

    Version check not run yet

    Coding agent tools npm Local 2k a week MIT

35. SA SafeWeave dev.safeweave/safeweave

    Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry · npm Local Remote 18 a week MIT

36. DO Domainintel io.github.Bishop81/domainintel-mcp

    Domain intelligence for agents: WHOIS, DNS, SSL/TLS, security headers, reputation, subdomains.

    Version check not run yet

    Security Official MCP Registry · npm Local 18 a week MIT

37. NV Nel Veil io.github.NELPROINC/nel-veil

    Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.

    Version check not run yet

    Security Official MCP Registry · npm Local 18 a week MIT

38. MA Make Audit io.github.arose26/make-audit-mcp

    Audit Make.com blueprints before importing: hardcoded secrets, dangling refs, risky settings.

    Version check not run yet

    Security Official MCP Registry · npm Local 18 a week MIT

39. CY Cybersec io.github.xu-c0/cybersec-mcp

    Cybersecurity MCP server: 323 prompts + 7 workflows for red team, blue team, SOC, cloud, OSINT.

    Version check not run yet

    Security Official MCP Registry · npm Local 18 a week MIT

40. TC TrustAgent — counterparty verification io.trust-agent/trustagent-mcp

    Is this address safe to pay? OFAC sanctions, ERC-8004 reputation, contract analysis.

    Version check not run yet

    Security Official MCP Registry · npm Local 18 a week MIT

41. OP Ocultar Pii io.github.Edu963/ocultar-pii

    Zero-egress PII redaction for Claude. Runs locally — no data leaves your infrastructure.

    Version check not run yet

    Security Official MCP Registry · PyPI Local AGPL-3.0-ONLY

42. DO Dep Oracle io.github.ertugrulakben/dep-oracle

    Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis.

    Version check not run yet

    Developer tools Official MCP Registry · npm Local 58 a week MIT

43. @L @danielsogl/lighthouse-mcp io.github.danielsogl/lighthouse-mcp-server

    A comprehensive Model Context Protocol (MCP) server that provides web performance auditing, accessibility testing, SEO analysis, security assessment, and Core Web Vitals monitoring using Google Lighth

    Version check not run yet

    Developer tools npm Local 1.9k a week MIT

44. SE Securecode io.github.juanisidoro/securecode

    Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.

    Version check not run yet

    Security Official MCP Registry · npm Local 18 a week MIT

45. ND Nordic Data cloud.nordicdata/nordic-data

    Global B2B intelligence for AI agents: 35M+ companies, 1.6M sanctions, KYB pack. 78 tools.

    0% up · 30 days

    Security Official MCP Registry · npm Local Remote 17 a week MIT

46. MC Mcpgrade dev.mcpgrade/mcp

    Security grades (A-F) for MCP servers. Check one before you install or trust it. mcpgrade.dev

    Version check not run yet

    Security Official MCP Registry · npm Local 17 a week MIT

47. AG AuditSocials Glossary io.github.eminegurcu/auditsocials-mcp

    Define & search 212 advertising & platform-policy terms (DSA, GDPR, FTC). CC BY 4.0.

    Version check not run yet

    Security Official MCP Registry · npm Local 17 a week CC-BY-4.0

48. ES Eleion Scanner io.github.hernaninverso/eleion-scanner-mcp

    Register/verify your domains, queue security scans, and read findings (CVE, severity).

    Version check not run yet

    Security Official MCP Registry · npm Local 17 a week MIT