Security MCP servers

3,386 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. SV Secure Vault io.github.mdfifty50-boop/secure-vault

   Encrypted secrets and credential management for agents

   Version check not run yet

   Security Official MCP Registry · npm Local 21 a week MIT

2. PO Polarity io.github.radar989/polarity-mcp

   Real-time threat intelligence lookups and IOC parsing from your self-hosted Polarity instance.

   Version check not run yet

   Security Official MCP Registry · npm Local 17 a week MIT

3. HE HexWitness io.github.siaginw/hexwitness

   Durable, build-scoped reverse-engineering evidence memory and query tools for AI agents.

   Version check not run yet

   Security Official MCP Registry · npm Local 17 a week APACHE-2.0

4. SS Security Scanner io.github.vpatser1/mcp-server-security-scanner

   Scan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs

   Version check not run yet

   Security Official MCP Registry · npm Local 17 a week MIT

5. RO romdevtools io.github.monteslu/romdev-romdevtools

   Tool server giving coding agents full control of homebrew ROM development AND reverse-engineering/romhacking across 18 retro platforms (NES, SNES, GB, Genesis, Atari, C64, PC Engine, MSX, GameTank, sy

   Version check not run yet

   Coding agent tools npm Local 1.7k a week SEE-LICENSE-IN-NOTICE

6. SS ScanLabsAI Security Scanner com.scanlabsai/scanner

   Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

   100% up · 30 days

   Security Official MCP Registry · npm Local Remote 16 a week MIT

7. SK Skillguard io.github.RudrenduPaul/skillguard

   Security scanner for third-party AI agent-skill files (SKILL.md, hooks, scripts) via MCP.

   Version check not run yet

   Files and storage Official MCP Registry · npm Local 16 a week APACHE-2.0

8. HM Hares — MCP security scanner io.github.alialrikabi313/hares

   Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration)

   Version check not run yet

   Security Official MCP Registry · npm Local 16 a week MIT

9. UK Ukhsa io.github.pipeworx-io/ukhsa

   UK Health Security Agency (UKHSA) data dashboard MCP — keyless.

   100% up · 30 days

   Data warehouses and analytics Official MCP Registry · npm Remote 16 a week MIT

10. BO BeVigil OSINT io.github.santhosh-005/bevigil

    Discover mobile app attack surfaces via BeVigil OSINT — hosts, subdomains, URLs, and more.

    Version check not run yet

    Security Official MCP Registry · npm Local 16 a week MIT

11. MO MCP Output Firewall io.github.tangfei7777-cell/mcp-output-firewall

    Three-layer firewall for MCP: content, egress and action policy. Proxy or server.

    Version check not run yet

    Security Official MCP Registry · npm Local 16 a week MIT

12. WA WalletTriage io.github.wallettriage/wallettriage-mcp

    Real-time exploit-exposure risk check for EVM wallets, paid per query via x402 (USDC on Base).

    Version check not run yet

    Finance and payments Official MCP Registry · npm Local 16 a week MIT

13. TU Turbopentest io.github.integsec/turbopentest

    AI-powered penetration testing. Launch scans, review findings, download reports.

    Version check not run yet

    Security Official MCP Registry · npm Local 27 a week MIT

14. DE Demipass com.dustforge/demipass

    Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.

    Version check not run yet

    Git and code hosting Official MCP Registry · npm Local 15 a week MIT

15. CH Checker com.oksigenia/checker-mcp

    Domain security & privacy checker as an MCP server. 17 live checks, 0-100 score, local-first.

    Version check not run yet

    Security Official MCP Registry · npm Local 15 a week GPL-3.0-OR-LATER

16. LB Logicnodes Bridge io.github.cmdenney/logicnodes-mcp-bridge

    Signed PII-Shield: redact PII to an EIP-191 attestation, plus x402 pay-per-call agent tools.

    Version check not run yet

    Security Official MCP Registry · npm Local 15 a week MIT

17. DA Datahogo io.github.datahogo/datahogo

    Scan a project for security issues locally with the open-source Data Hogo engine.

    Version check not run yet

    Security Official MCP Registry · npm Local 15 a week AGPL-3.0-ONLY

18. TS Tubemind Secure io.github.dewtech-technologies/tubemind-secure-mcp

    Secure MCP server for YouTube intelligence — 18 tools, OAuth2, OWASP Top 10 controls.

    Version check not run yet

    Security Official MCP Registry · npm Local 15 a week MIT

19. OD Osf Data Marketplace io.github.onefreeman1337/osf-data-marketplace

    8.1M+ US gov and science data via x402 USDC. 21 tools, $0.001 sample tier, sanctions, SEC, CVEs.

    0% up · 30 days

    Security Official MCP Registry · npm Local Remote 15 a week MIT

20. SA Symfony Agent MCP io.github.shakaran/symfony-agent-mcp

    Read-only Symfony introspection: routes, services, entities, Doctrine, security, Twig and more.

    Version check not run yet

    Security Official MCP Registry · npm Local 15 a week MIT

21. SH Shieldly io.github.shieldly-io/mcp

    AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.

    Version check not run yet

    Security Official MCP Registry · npm Local 15 a week MIT

22. AG Agentguard io.github.MukundaKatta/agentguard

    Network-egress firewall for agent tools: check URLs against a declarative policy.

    Version check not run yet

    Security Official MCP Registry · npm Local 17 a week MIT

23. AS AI Scanner io.github.Aakashbhardwaj27/ai-scanner

    Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.

    Version check not run yet

    Developer tools Official MCP Registry · npm Local 39 a week MIT

24. TR Tripwire io.github.aliboIly/tripwire

    MCP for Roblox Studio and Open Cloud: drive Studio, run headless tests, and review game security.

    Version check not run yet

    Games and game engines Official MCP Registry · npm Local 14 a week MIT

25. DS Dingdawg Shield io.github.dingdawg/dingdawg-shield

    AI security scanning and trust scoring. Stack-specific threat models. Free local scan.

    Version check not run yet

    Security Official MCP Registry · npm Local 14 a week BUSL-1.1

26. LA Lazaretto io.github.jamesdfinance-dev/lazaretto

    Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 14 a week MIT

27. CR Crtsh io.github.pipeworx-io/crtsh

    crt.sh — Certificate Transparency log search

    100% up · 30 days

    Security Official MCP Registry · npm Remote 14 a week MIT

28. MO Mozilla Observatory io.github.pipeworx-io/mozilla-observatory

    MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…

    100% up · 30 days

    Security Official MCP Registry · npm Remote 14 a week MIT

29. OS Osv io.github.pipeworx-io/osv

    OSV.dev (Open Source Vulnerabilities) MCP.

    100% up · 30 days

    Security Official MCP Registry · npm Remote 14 a week MIT

30. TA Tablecloth io.github.yourtablecloth/tablecloth-mcp

    Open Korean e-Gov and finance sites in a clean, disposable Windows Sandbox with security programs.

    Version check not run yet

    Security Official MCP Registry · npm Local 14 a week AGPL-3.0-OR-LATER

31. PR Privacy io.github.thegridwork/privacy

    Audit websites for GDPR, CCPA, and ePrivacy compliance — trackers, consent, and policies.

    Version check not run yet

    Security Official MCP Registry · npm Local 27 a week MIT

32. AG Agentvault io.github.bch1212/agentvault

    Credential vault for AI agents — Fernet-encrypted keys, per-agent budgets, audit logs.

    Version check not run yet

    Monitoring and observability Official MCP Registry · npm Local 13 a week MIT

33. TR Tripwire io.github.bonesdefi/tripwire

    Security gateway for MCP agents: blocks prompt-injection-driven tool calls before they execute.

    Version check not run yet

    Security Official MCP Registry · npm Local 13 a week MIT

34. RT Revnuvo Trust io.github.hardeyhemy/revnuvo-trust-mcp

    Verify companies, domains and counterparties before transacting. Sanctions, UBO, fraud scoring.

    0% up · 30 days

    Security Official MCP Registry · npm Local Remote 13 a week MIT

35. SE Sentrik io.github.maxgerhardson/sentrik

    Governance runtime for AI-generated code. Enforce compliance and security standards.

    Version check not run yet

    Security Official MCP Registry · npm Local 13 a week SEE-LICENSE-IN-LICENSE_PROPRIETARY.TXT

36. VI Virustotal io.github.mrfentmen/virustotal-mcp

    MCP server for VirusTotal: file, URL, domain, IP reports. Free key.

    Version check not run yet

    Security Official MCP Registry · npm Local 13 a week MIT

37. SS Sanctions Screening io.github.pipeworx-io/sanctions-screening

    Sanctions Screening MCP — screen people, companies, vessels, and aircraft

    100% up · 30 days

    Security Official MCP Registry · npm Remote 13 a week MIT

38. PI Pincer io.github.VouchlyAI/pincer

    Secure grip for your agent's secrets - security-hardened MCP gateway with proxy token architecture

    Version check not run yet

    Security Official MCP Registry · npm Local 22 a week APACHE-2.0

39. MC Mcpshield io.github.MCPShield-Dev/mcpshield

    Security scanner for MCP servers - detects tool poisoning and injection

    Version check not run yet

    Security Official MCP Registry · npm Local 20 a week MIT

40. AI Aikido io.github.Bajuzjefe/aikido-mcp

    Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.

    Version check not run yet

    Security Official MCP Registry · npm Local 54 a week MIT

41. TR Trustsource io.github.SurfEther/trustsource

    x402-paid domain verification for AI agents — trustscore, SSL, security headers, robots.

    Version check not run yet

    Security Official MCP Registry · npm Local 12 a week MIT

42. RA RIPE Atlas io.github.jrelph/ripe-atlas

    RIPE Atlas network measurements — ping, traceroute, DNS, TLS, HTTP, NTP, and probes

    Version check not run yet

    Utilities Official MCP Registry · npm Local 12 a week MIT

43. NV Nvd io.github.pipeworx-io/nvd

    NVD MCP — wraps the NIST National Vulnerability Database API.

    100% up · 30 days

    Databases Official MCP Registry · npm Remote 12 a week MIT

44. S1 Sec 13f io.github.pipeworx-io/sec-13f

    SEC 13F — institutional ownership, asked security-first.

    100% up · 30 days

    Security Official MCP Registry · npm Remote 12 a week MIT

45. MS MCP Shield io.github.sophiacave/mcp-shield

    Security scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.

    Version check not run yet

    Security Official MCP Registry · npm Local 12 a week MIT

46. MM MCP Marketplace io.mcp-marketplace/search

    Search and install 4,000+ security-scanned MCP servers from inside any MCP-aware AI client.

    100% up · 30 days

    Security Official MCP Registry · PyPI Remote MIT

47. VA Validoria com.validoria/validoria-mcp

    Continuous website testing by Validoria — monitor security, SEO, performance, and accessibility.

    100% up · 30 days

    Developer tools Official MCP Registry · npm Local Remote 11 a week MIT

48. SC Scanpay io.github.Misterio070/scanpay

    Code security scanner for AI agents. 45+ vulnerability patterns, AST analysis, Solana micropayments.

    Version check not run yet

    Security Official MCP Registry · npm Local 11 a week MIT