Security MCP servers

3,386 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

URL Safety Validator MCP io.github.OjasKord/url-safety-validator-mcp

AI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel.

100% up · 30 days

Security Official MCP Registry · npm Local Remote 11 a week MIT
Auditreach io.github.RudrenduPaul/auditreach

BYOK Reddit/YouTube research CLI with a tamper-evident audit log and an MCP server.

Version check not run yet

Security Official MCP Registry · npm Local 11 a week APACHE-2.0
8004swap io.github.Stakemate369/8004swap-mcp

MCP server exposing 8004Swap (no-KYC agent-to-agent RFQ swap) as tools any MCP agent can call.

Version check not run yet

Security Official MCP Registry · npm Local 11 a week MIT
Gsep io.github.gsepcore/gsep-mcp

AI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.

Version check not run yet

Security Official MCP Registry · npm Local 11 a week MIT
chain-insights io.github.chainswarm/chain-insights

AML investigation CLI and MCP proxy for blockchain risk screening and Chain Insights Graph access

Version check not run yet

Security npm Local 1.2k a week MIT
@mcp-shark/mcp-shark io.github.mcp-shark/mcp-shark

Security scanner for AI agent tools. Local static scan of MCP IDE configs (41 rules, toxic flow heuristics, AAuth visibility, auto-fix, tool pinning). Optional proxy + in-browser dashboard: traffic, f

Version check not run yet

Security npm Local 28 a week SEE-LICENSE-IN
AgentShield io.github.atmflow55/agentshield

Smart contract security for AI agents — verify, monitor, freeze, x402 payments

Version check not run yet

Finance and payments Official MCP Registry · npm Local 20 a week MIT
@goplus/agentguard io.github.goplussecurity/agentguard

GoPlus AgentGuard — Security guard for AI agents. Blocks dangerous commands, prevents data leaks, protects secrets. 20 detection rules, runtime action evaluation, trust registry.

Version check not run yet

Security npm Local 1.2k a week MIT
Mcpwatch io.github.lazymac2x/mcpwatch

Audit MCP servers from inside Claude Code. 10 OWASP checks, A-F grade, live leaderboard.

Version check not run yet

Security Official MCP Registry · npm Local 18 a week MIT
GhostFree io.github.shane-js/ghostfree

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

Version check not run yet

Security Official MCP Registry · npm Local 20 a week MIT
Clawvault io.github.andrewszk/clawvault-mcp-server

AI agent payment security - spending limits, whitelists, and human approval.

Version check not run yet

Security Official MCP Registry · npm Local 28 a week MIT
Probeops io.github.kumarprobeops/probeops-mcp-server

Network diagnostics from 6 global regions. SSL, DNS, ping, whois, traceroute, port scan, latency.

Version check not run yet

Security Official MCP Registry · npm Local 52 a week MIT
eslint-plugin-mcp-sdk-security io.github.ofri-peretz/eslint-eslint-plugin-mcp-sdk-security

ESLint plugin for Model Context Protocol (MCP) SDK security — follows tool arguments into shells, file paths, URLs, SQL and eval; catches credential leaks, untrusted text in model-facing descriptions

Version check not run yet

Model and agent tools npm Local 1k a week MIT
@extenshi/mcp io.github.extenshi-io/extenshi-io-extenshi-mcp

Extenshi MCP server — bring the extension catalog (search, security, market research) and pre-publish scanning into your AI tools

Version check not run yet

Security npm Local 1k a week MIT
Injectshield io.github.bch1212/injectshield

Prompt-injection firewall for AI agents — scan untrusted text before LLM calls.

Version check not run yet

Model and agent tools Official MCP Registry · npm Local 9 a week MIT
Hackertarget io.github.mrfentmen/hackertarget-mcp

Query HackerTarget's free recon APIs: DNS lookup, reverse DNS, whois, geoIP, HTTP headers.

Version check not run yet

Utilities Official MCP Registry · npm Local 9 a week MIT
Alienvault Otx io.github.pipeworx-io/alienvault-otx

AlienVault OTX MCP — Open Threat Exchange (free with key)

100% up · 30 days

Security Official MCP Registry · npm Remote 9 a week MIT
Circl Vulnerability Lookup io.github.pipeworx-io/circl-vulnerability-lookup

CIRCL Vulnerability-Lookup — aggregated vulnerability records

100% up · 30 days

Security Official MCP Registry · npm Remote 9 a week MIT
Dilisense io.github.pipeworx-io/dilisense

dilisense MCP — sanctions / PEP / criminal / adverse-media screening (AML/KYC)

100% up · 30 days

Security Official MCP Registry · npm Remote 9 a week MIT
Epss io.github.pipeworx-io/epss

FIRST.org EPSS (Exploit Prediction Scoring System) MCP.

100% up · 30 days

Security Official MCP Registry · npm Remote 9 a week MIT
prooflayer-agent-security io.github.sinewaveai/agent-security-scanner-mcp-bnm3ra

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1700+ vulnerability rules with AST & taint analysis, LLM-powered semantic

Version check not run yet

Security npm Local 207 a week MIT
Shodan io.github.BurtTheCoder/shodan

MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.

Version check not run yet

Security Official MCP Registry Local
Virustotal io.github.BurtTheCoder/virustotal

MCP server for querying VirusTotal API with comprehensive security analysis tools.

Version check not run yet

Security Official MCP Registry Local
js-reverse-mcp io.github.zhizhuodemao/js-reverse-mcp-q9yaew

JS reverse engineering MCP server with agent-first tool design and built-in anti-detection. 为 AI Agent 设计的 JS 逆向 MCP Server，内置反检测。

Version check not run yet

Security npm Local 948 a week APACHE-2.0
CyberLens io.github.shadoprizm/cyberlens-mcp-server

Security scanning for websites, public repositories, and Open CLAW skills.

Version check not run yet

Security Official MCP Registry · npm Local 20 a week MIT
OpenZiti Network Management io.github.openziti/ziti-mcp-server

Manage OpenZiti zero-trust networks — through natural language

Version check not run yet

Security Official MCP Registry · npm · Go modules Local 19 a week APACHE-2.0
FinishKit io.github.FinishKit/mcp

FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality

Version check not run yet

Git and code hosting Official MCP Registry · npm Local 19 a week MIT
Secenv io.github.chirag127/secenv-mcp

Centralized secrets manager MCP server. Generate .env files, rotate keys, sync to GitHub Actions.

Version check not run yet

Git and code hosting Official MCP Registry · npm Local 8 a week MIT
Plesk Lite io.github.mohamedbenhariz/mcp-plesk-lite

MCP server for Plesk: manage domains, DNS, mail, SSL, backups, databases and WordPress via AI.

Version check not run yet

Databases Official MCP Registry · npm Local 8 a week MIT
Sec Nport io.github.pipeworx-io/sec-nport

SEC Form N-PORT — fund and ETF holdings, asked security-first.

100% up · 30 days

Security Official MCP Registry · npm Remote 8 a week MIT
mcp-maigret io.github.w0h1v/mcp-maigret

MCP server that lets AI agents run maigret, an OSINT tool that searches a username across thousands of sites

Version check not run yet

Security npm Local 860 a week MIT
Accelerators io.github.S2TConsulting/accelerators

36 tools for AWS infrastructure, security compliance, AI workflows, and ACI governance.

Version check not run yet

Cloud platforms Official MCP Registry · npm Local 38 a week MIT
Arc Security com.arcself/arc-security

Scan AI agent skills for 25 attack classes + runtime monitoring. 1,316+ findings.

Version check not run yet

Security Official MCP Registry · npm Local 40 a week MIT
agentaudit io.github.agentaudit-dev/agentaudit-cli

Security scanner for AI agent packages — CLI + MCP server

Version check not run yet

Security npm Local 71 a week AGPL-3.0
MiddleBrick io.github.middleBrick/mcp-server

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

Version check not run yet

Security Official MCP Registry · npm Local MIT
Pentagonal io.github.Achilles1089/pentagonal-mcp

AI smart contract forge — 8-agent security audits, generation, and compilation across 8 chains

Version check not run yet

Security Official MCP Registry · npm Local 12 a week MIT
@zeroleaks/shield io.github.zeroleaks/shield

Runtime security for LLM apps and agents: prompt injection detection for user input and tool results, and leak, credential, PII, and exfiltration checks on model output

Version check not run yet

Security npm Local 812 a week MIT
Tn Dmv io.github.pipeworx-io/tn-dmv

Tennessee DMV MCP — Department of Safety and Homeland Security: the 186 driver service

100% up · 30 days

Security Official MCP Registry · npm Remote 7 a week MIT
arko-mcp io.github.arko-devsecai-prod/ark-control-plane-mcp

Arko by DevSecAI: AI security scanning for developers and AI agents.

Version check not run yet

Project management npm Local 795 a week SEE-LICENSE-IN-LICENSE.MD
Opensanctions io.github.scka-de/opensanctions-mcp

Sanctions screening and PEP checks via OpenSanctions API for AI agents

Version check not run yet

Security Official MCP Registry · npm Local 16 a week MIT
mcp-security-scanner io.github.badchars/mcp-security-scanner

MCP security scanner — 55 tools for runtime inspection, static analysis, config audit, dependency analysis. OWASP MCP Top 10 compliance. OAuth, TLS, fuzz testing, prompt injection, tool mutation detec

Version check not run yet

Security npm Local 60 a week MIT
ExposureGuard io.github.ExposureGuard/exposureguard-mcp

Domain security scanning for AI agents. A-F grades, 8 checks, fix snippets.

Version check not run yet

Security Official MCP Registry · PyPI Local MIT
Loaditout io.github.loaditoutadmin/loaditout

Search and install 20,000+ security-graded MCP servers and agent skills.

Version check not run yet

Security Official MCP Registry · npm Local 13 a week MIT
@trex64/c64re io.github.jondalar/c64reverseengineeringmcp

MCP server for C64 reverse engineering — analysis pipeline, disassembly, and semantic classification

Version check not run yet

DevOps and infrastructure npm Local 744 a week GPL-3.0-OR-LATER
MCP Fortress io.github.mcp-fortress/mcp-fortress

Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.

0% up · 30 days

Security Official MCP Registry · npm Remote 32 a week MIT
Dep io.github.rog0x/dep

License check, outdated deps, security for AI agents

Version check not run yet

Security Official MCP Registry · npm Local 18 a week MIT
Apollo Intelligence team.apolloai/intelligence

36 tools: intel feeds, DeFi, crypto, OSINT, NLP, scraping, proxy. x402 micropayments.

Version check not run yet

Web search and scraping Official MCP Registry · npm Local 31 a week MIT
Apollo Proxy io.github.bnmbnmai/apollo-proxy

26 AI tools: DeFi, OSINT, crypto, intel feeds, search, proxy. x402 micropayments.

Version check not run yet

Finance and payments Official MCP Registry Local