Security MCP servers

3,388 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

Bug Bounty Intelligence io.github.holistis/bug-bounty-intelligence-mcp

AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

100% up · 30 days

Security Official MCP Registry · npm Remote 6 a week MIT
@piiiico/agent-audit io.github.piiiico/agent-audit

Security scanner for AI agent tooling — MCP servers, tool definitions, and agentic pipelines

Version check not run yet

DevOps and infrastructure npm Local 14 a week MIT
Caelian io.github.mananmodi-product/caelian

Live competitive intelligence for B2B teams — signals, threat rankings, and revenue-driving actions.

Version check not run yet

Security Official MCP Registry · npm Local 13 a week MIT
Overdrive Intel io.github.Looney-tic/intel-overdrive

AI coding ecosystem intelligence — breaking changes, tools, security alerts from 900+ sources

Version check not run yet

Monitoring and observability Official MCP Registry · npm Local SEE-LICENSE-IN
@remnux/mcp-server io.github.remnux/remnux-mcp-server-850dtf

MCP server for using the REMnux malware analysis toolkit via AI assistants

Version check not run yet

Security npm Local 657 a week GPL-3.0-ONLY
@icoretech/warden-mcp io.github.icoretech/warden-mcp

Vaultwarden/Bitwarden MCP server backed by Bitwarden CLI (bw).

Version check not run yet

Security npm Local 633 a week MIT
Npm Plus io.github.ofershap/npm-plus

npm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.

Version check not run yet

Security Official MCP Registry · npm Local 20 a week MIT
Lockbox io.github.sathergate/lockbox

Encrypted secrets for Next.js. AES-256-GCM with no vault needed.

Version check not run yet

Security Official MCP Registry · npm Local 13 a week MIT
Quantumguard io.github.kota1026/quantumguard-mcp

Post-quantum cryptography security scanner. Detect ECDSA/RSA vulnerabilities, NIST compliance.

Version check not run yet

Security Official MCP Registry · npm Local 13 a week MIT
Contract Scanner io.github.lordbasilaiassistant-sudo/contract-scanner

Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding

Version check not run yet

Security Official MCP Registry · npm Local 10 a week MIT
Keymaster io.github.AInoAKARI/keymaster-mcp

Read-only runtime secret retrieval from HashiCorp Vault via Keymaster for autonomous AI agents.

Version check not run yet

Security Official MCP Registry · npm Local 11 a week MIT
SkillTotal ai.skilltotal/skilltotal

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

Version check not run yet

Security Official MCP Registry Local
Vibescan io.github.Aguantar/vibescan-mcp-server

MCP server for VibeScan — scan projects for leaked secrets and security issues

Version check not run yet

Security Official MCP Registry · PyPI Local MIT
Think net.agentutil/think-mcp

Intent security pre-flight checks for autonomous AI agents.

Version check not run yet

Security Official MCP Registry · npm Local 21 a week MIT
oidc-remote io.github.rafaelgaspar/oidc-remote

MCP stdio and HTTP proxy: OAuth2 client_credentials + K8s SA JWT assertion for Authentik/Envoy gateways — no static mcp.json secrets.

Version check not run yet

DevOps and infrastructure npm Local 533 a week MIT
Djd Agent Score io.github.jacobsd32-cpu/djd-agent-score

Reputation scoring for AI agent wallets on Base. Trust scores, fraud checks, x402.

Version check not run yet

Security Official MCP Registry · npm Local 14 a week MIT
Smartguard io.github.kota1026/smartguard-mcp

SmartGuard MCP Server - AI-powered smart contract security audit tools for Claude Code, Cursor,...

Version check not run yet

Security Official MCP Registry · npm Local 11 a week MIT
HackTricks MCP Server io.github.Xplo8E/hacktricks-mcp-server

Search and query HackTricks pentesting documentation with quick lookup and section extraction

Version check not run yet

Security Official MCP Registry · npm Local 54 a week MIT
saf-mcp-skill io.github.camaleon2016/saf-mcp-skill

Security analysis for MCP servers, tool definitions, and agent architectures against the SAF-MCP (formerly SAFE-MCP) attack technique catalog, with STRIDE, MITRE ATLAS, OWASP LLM Top 10, and NIST AI R

Version check not run yet

Security npm Local 504 a week APACHE-2.0
Agentpay Sentinel io.github.Rumblingb/agentpay-sentinel-mcp

Security guardrails for AI agent payments

Not checked yet

Model and agent tools Official MCP Registry · npm 4 a week MIT
Chainanalyzer io.github.rascal-3/chainanalyzer-mcp

Blockchain AML for AI agents: risk scoring, sanctions, tx & bridge tracing across 12 chains.

Version check not run yet

Security Official MCP Registry · npm Local 28 a week MIT
Silent Brief io.github.warmachine2121/silent-brief-mcp

AI-generated legal and business documents. Pay XMR, no accounts, no KYC.

Version check not run yet

Security Official MCP Registry · npm Local 7 a week MIT
@kernel.chat/kbot io.github.isaacsight/kernel-kbot-dybwts

Open-source terminal AI agent. 100+ specialist skills + audit-grade finance infra via @kernel.chat/kbot-finance. Content-addressed envelopes, hash-chained audit log, jurisdiction-aware regulatory veri

Version check not run yet

Security npm Local 453 a week MIT
@usex/mikrotik-mcp io.github.mikrotik-mcp/mikrotik-mcp

MCP server for MikroTik RouterOS — 780+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.

Version check not run yet

DevOps and infrastructure npm Local 452 a week MIT
@mcpeak/audit io.github.2026-engineering-contest/mcpeak-audit

Pre-use security audit for MCP servers, with optional Docker-sandboxed runs

Version check not run yet

DevOps and infrastructure npm Local 437 a week MIT
SkillsSafe Security Scanner com.skillssafe/scanner

AI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.

0% up · 30 days

Security Official MCP Registry · npm Local Remote 13 a week MIT
benchmark-silent-constraints io.github.pooriaarab/benchmark-silent-constraints

Agent benchmark: meet the goal without breaking silent constraints (protected files, foreign data, external mail, quotas). Deterministic audit-log grading.

Version check not run yet

Files and storage npm Local 425 a week MIT
Ot Security io.github.Ansvar-Systems/ot-security-mcp

OT security standards: IEC 62443, NIST 800-82/53, MITRE ATT&CK for ICS

Version check not run yet

Security Official MCP Registry · npm Local 8 a week APACHE-2.0
Apixies Developer API Suite io.apixies/mcp-server

50 developer utility APIs as tools: SSL, DNS, WHOIS, email checks, HTML to PDF, sitemaps and more.

Version check not run yet

Security Official MCP Registry · npm Local 23 a week MIT
Agent Toolkit io.github.white-hat-lab/agent-toolkit

Pay-per-call developer utilities and npm supply-chain security tools for coding agents, over x402.

Version check not run yet

Security Official MCP Registry · npm Local 39 a week
@agile-graph/engine io.github.miltonadina/agile-graph-engine

An AI agile team for your repository: test-first AI workers in isolated Git worktrees, behind the checks, code review and security scans you approve.

Version check not run yet

Git and code hosting npm Local 398 a week MIT
benchmark-exploit-resistance io.github.pooriaarab/benchmark-exploit-resistance

AI benchmark for whether an agent fixes a bug or reward-hacks the verifier.

Version check not run yet

Security npm Local 393 a week MIT
Redact MCP io.github.r3352/redact-mcp

Auto-detects and obfuscates PII (IPs, emails, API keys, names) so Claude never sees real client data

Version check not run yet

Security Official MCP Registry · npm Local 9 a week MIT
Npm io.github.alisaitteke/npm-mcp

MCP server for npm package management, security analysis, and compatibility checking

Version check not run yet

Developer tools Official MCP Registry · npm Local 25 a week MIT
@chimichurria/audit io.github.chimichurria/audit

Auditoría y corrección de UI/UX multi-dispositivo, seguridad (OWASP, Vercel, Supabase, supply chain) y flujos UX por perfil. CLI + plugin de Claude Code + servidor MCP (Claude, Codex, Cursor y más).

Version check not run yet

Databases npm Local 383 a week MIT
android-decompile-mcp io.github.timecyber/dexandroid-rzmt9f

Android reverse-engineering MCP Server — unpack hardened apps, decompile to smali, analyze APIs (Cursor / Claude / Codex)

Version check not run yet

Security npm Local 381 a week MIT
Onepassword com.pulsemcp/onepassword

MCP server for interacting with 1Password via the CLI to read and manage credentials.

Version check not run yet

Security Official MCP Registry · npm Local 81 a week MIT
Contract Security Scanner io.github.fino-oss/contract-scanner

Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.

Version check not run yet

Security Official MCP Registry · npm Local 10 a week MIT
@ninemind/agentgem io.github.ninemindai/agentgem

A local web UI that introspects your coding-agent config, redacts secrets at capture, and builds a portable, composable Gem.

Version check not run yet

Security npm Local 373 a week MIT
Contract Security Scanner io.github.mastrophot/contract-security-scanner

MCP smart contract scanner with NEAR-focused security context.

Version check not run yet

Security Official MCP Registry · npm Local 9 a week MIT
Orchestraprime io.github.OrchestraPrime/orchestraprime

Regulatory intelligence (FDA, ICH, EMA) and sanctions screening (OFAC, EU, UK) for Claude

Version check not run yet

Security Official MCP Registry · npm Local 18 a week MIT
verdict-l402-mcp io.github.jeannicolasdavid1979/alby-jev-mcp

MCP server that lets an AI agent buy pay-per-call safety checks (prompt injection, hidden text, risky shell commands, MCP vetting, payment fraud...) in sats over L402, with a hard spending cap.

Version check not run yet

Operating system and shell npm Local 331 a week MIT
vulnary-mcp io.github.agam-s/vulnary-mcp

vulnary is a mcp server that searches for cve's and vulnerabilities

Version check not run yet

Security npm Local 299 a week MIT
mcp-custos io.github.an0malous/mcp-custos

MCP server for secure coding and compliance — full MITRE CWE corpus, ISO 27001, NIST 800-53, OWASP ASVS, NIST SSDF, ISO 27017 — with official cross-framework mappings and enforcement hooks

Version check not run yet

Security npm Local 290 a week MIT
gatewall io.github.faisal-fayaz/toolwall

Policy firewall for AI agent tool calls: argument-level gating, replayable policy, and credential brokering for MCP servers and agent hooks

Version check not run yet

Security npm Local 286 a week MIT
@slidingbox/hydrate-dehydrate-mcp io.github.slidingbox/hydrate-dehydrate-mcp

MCP server for Slidingbox: hand a secret from one agent to another as an encrypted, pay-per-read, delivered-once pointer, pre-flight an x402 endpoint before paying it, and check or watch whether a web

Version check not run yet

Web search and scraping Official MCP Registry · npm Local ISC
@7h3/protocol-mcp io.github.icemastert/7h3-protocol-mcp-server

MCP server for @7h3/protocol — install into Claude to generate 7h3 secrets, keypairs, server boilerplate, and framework scaffolds

Version check not run yet

Developer tools npm Local APACHE-2.0
@afriverify/mcp io.github.nons9/afriverify-mcp

AfriVerify MCP server — identity verification tools for AI agents

Version check not run yet

Security npm Local MIT