Security MCP servers

3,392 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. LO LogCarverGuard io.github.caiderek/logcarverguard

   Guardrail for AI agents on SQL Server: statement blocking, optional read-only mode and an audit log.

   Version check not run yet

   Databases Official MCP Registry · NuGet Local MIT

2. SY SymbioticSec io.github.SymbioticSec/mcp

   Symbiotic CLI MCP Server for security scanning and analysis

   Version check not run yet

   Security Official MCP Registry · npm Local 19 a week ISC

3. @M @trustkit/mcp-guard io.github.trustkithq/trustkit-mcp-guard

   AI execution firewall for MCP-based tools

   Version check not run yet

   Security npm Local APACHE-2.0

4. @Y @aranseshita/yamory-mcp-server io.github.aranseshita/yamory-mcp-server

   MCP server for yamory vulnerability management cloud

   Version check not run yet

   Security npm Local MIT

5. MS mcp-server-semgrep io.github.vetcoders/mcp-server-semgrep

   MCP Server for Semgrep Integration - static code analysis with AI

   Version check not run yet

   Security npm Local 146 a week MIT

6. @P @cybrlab/preclick-mcp-client io.github.cybrlab-ai/preclick-mcp-client

   JavaScript client for the PreClick URL security scanning service. Assess target URLs for potential threats and alignment with the user's browsing intent before navigation.

   Version check not run yet

   Security npm Local APACHE-2.0

7. MC mcptrustchecker io.github.illia-haidar/mcptrustchecker

   Local-first, deterministic security scanner for Model Context Protocol (MCP) servers. Cross-tool toxic-flow analysis, Unicode-smuggling decode, prompt-injection & supply-chain detection, with an audit

   Version check not run yet

   Security npm Local 141 a week MIT

8. EK Ethereum Keystore Encryption io.github.nirholas/keystore-mcp-server

   Encrypt/decrypt Ethereum keystore JSON V3 with scrypt/PBKDF2 for secure cold storage

   Version check not run yet

   Finance and payments Official MCP Registry · PyPI Local MIT

9. @1 @synthread/1password-mcp io.github.cakerepository/1password-mcp-dfg894

   MCP server for 1Password credentials — tools, prompts, and resources for vault and credential management

   Version check not run yet

   Security npm Local APACHE-2.0

10. GU guardmcp io.github.berkantacun/guardmcp

    Security scanner for MCP (Model Context Protocol) servers and configs — tool poisoning, secret leaks, rug-pull detection, excessive permissions, insecure transport.

    Version check not run yet

    Security npm Local 38 a week APACHE-2.0

11. CM cve-mcp io.github.badchars/cve-mcp-x9atxx

    CVE/vulnerability intelligence MCP server — 41 tools, 11 sources: NVD, EPSS, KEV, GHSA, OSV, Shodan, VulnCheck, Vulners, Nuclei, Metasploit, CIRCL, ATT&CK

    Version check not run yet

    Security npm Local 138 a week MIT

12. CF Code Firewall io.github.egoughnour/code-firewall-mcp

    Structural similarity-based code filter. Stops malicious code pattern reaching execution tools.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

13. @M @thrunt/mcp io.github.backbay-labs/thrunt-god

    MCP server for ATT&CK intelligence, detection coverage, knowledge graph, and hunt workflow prompts

    Version check not run yet

    Model and agent tools npm Local MIT

14. @B @kvncrw/bws-mcp-server io.github.kvncrw/bws-mcp-server

    MCP server for Bitwarden Secrets Manager. Wraps the official bws CLI so Claude and other MCP clients can manage infrastructure secrets.

    Version check not run yet

    Security npm Local GPL-3.0-OR-LATER

15. @H @xuxu7777xu/har-mcp io.github.xuxu777xu/har-mcp

    HAR (HTTP Archive) analysis MCP server for reverse engineering HTTP traffic

    Version check not run yet

    Security npm Local MIT

16. II Incode Idv io.github.IncodeTechnologies/incode-idv-mcp

    MCP server for Incode IDV, providing identity verification tools for AI assistants.

    Version check not run yet

    Security Official MCP Registry · npm Local 21 a week MIT

17. S2 SparkForge — 20+ Utility APIs with x402 Micropayments sh.sparkforge/sparkforge

    20+ pay-per-use APIs: image gen, crypto data, email verify, SSL check, web scraping, and more.

    0% up · 30 days

    Web search and scraping Official MCP Registry · npm Remote 4 a week MIT

18. @M @iflow-mcp/cyreslab-ai-urlhaus-mcp-server io.github.iflow-mcp/cyreslab-ai-urlhaus-mcp-server

    MCP server for accessing URLhaus malicious URL database from abuse.ch - provides threat intelligence for cybersecurity research

    Version check not run yet

    Security npm Local MIT

19. CL Clevername io.github.AlexFloyd13/clevername-mcp

    AI agent governance — security scanning, BYOK routing, audit logging, and Council approvals.

    Version check not run yet

    Monitoring and observability Official MCP Registry · npm Local Remote 26 a week

20. SA Synapse Audit io.github.digidenone/synapse-audit

    AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.

    Version check not run yet

    Security Official MCP Registry · npm Local 11 a week MIT

21. @H @tmhs/homelab-mcp io.github.tmhsdigital/home-lab-developer-tools-mcp-server

    MCP server for home lab operations via SSH - 50 tools for system status, Docker Compose management, service health, monitoring, DNS, reverse proxy, networking, backups, disaster recovery, security aud

    Version check not run yet

    DevOps and infrastructure npm Local CC-BY-NC-ND-4.0

22. @M @sirrlock/mcp io.github.sirrlock/mcp

    Sirr MCP server — lets Claude Code read and write ephemeral secrets

    Version check not run yet

    Security npm Local MIT

23. @M @iflow-mcp/lwjjike-jsreverser-strong-mcp io.github.zhizhuodemao/js-reverse-mcp

    MCP server for JavaScript reverse engineering and debugging

    Version check not run yet

    Developer tools npm Local APACHE-2.0

24. YR YTDL RMCP ai.dinglebear/ytdl-rmcp

    Rust MCP server and CLI for yt-dlp search, downloads, metadata, transfers, and Plex playlists.

    Version check not run yet

    Security Official MCP Registry Local

25. MA Marchward ai.marchward/mcp-server

    Runtime authority for AI agents: credential mediation, spend cap, approval gates, audit log.

    Version check not run yet

    Security Official MCP Registry · npm Local

26. SE SecureNow ai.securenow/securenow

    Production security for Node.js apps: investigate live attacks, block IPs, tune detections.

    100% up · 30 days

    Security Official MCP Registry Local Remote

27. SK Skarn com.getskarn/skarn

    Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted

    Version check not run yet

    Security Official MCP Registry Local

28. PD Pyunto Diary com.pyunto/diary

    Read, search and write your encrypted Pyunto diary from Claude. Decrypts only on your own machine.

    Version check not run yet

    Security Official MCP Registry Local

29. S( seekrit (local crypto plane) dev.seekrit/mcp

    Zero-knowledge secrets manager — local crypto-plane MCP server: decrypts and injects secrets.

    Version check not run yet

    Project management Official MCP Registry · npm Local

30. VA Vault io.github.AIWerk/mcp-server-vault

    Bitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets.

    Version check not run yet

    Security Official MCP Registry Local

31. CA Compliance AIops io.github.AIops-tools/compliance-aiops

    Compliance evidence from AIops audit trails: HIPAA/PCI/SOC2/GDPR, OSCAL export, 19 tools.

    Version check not run yet

    Legal and compliance Official MCP Registry Local

32. FA Firewall AIops io.github.AIops-tools/firewall-aiops

    Governed OPNsense + pfSense firewall ops: rules, NAT, VPN, DHCP, RCA. 35 tools.

    Version check not run yet

    Security Official MCP Registry Local

33. WR writ io.github.AvenueDAdmin/writ

    Commit-time policy checks for AI agent writes (ALLOW/DENY/STEP_UP) with a tamper-evident audit log.

    Version check not run yet

    Git and code hosting Official MCP Registry Local

34. AA Agent Audit Logger io.github.CSOAI-ORG/agent-audit-logger-mcp

    Hash-chained HMAC-signed audit log MCP for A2A (agent-to-agent) calls. Every tool-call, agent-ha...

    0% up · 30 days

    Model and agent tools Official MCP Registry · PyPI Local Remote

35. AD Agent Data Residency io.github.CSOAI-ORG/agent-data-residency-mcp

    Agent data residency + GDPR Chapter V transfer-basis runtime guard. Programmatically answer 'whe...

    0% up · 30 days

    Security Official MCP Registry · PyPI Local Remote

36. AP Agent Policy Enforcement io.github.CSOAI-ORG/agent-policy-enforcement-mcp

    Per-agent-pair IAM for A2A. Define policies ('orchestrator may call billing only when amount<100...

    0% up · 30 days

    Model and agent tools Official MCP Registry · PyPI Local Remote

37. AP Agent Prompt Injection Firewall io.github.CSOAI-ORG/agent-prompt-injection-firewall-mcp

    The WAF for agents. Pattern-based + heuristic firewall scans prompts, RAG documents, tool argume...

    0% up · 30 days

    Model and agent tools Official MCP Registry · PyPI Local Remote

38. AA Aml Ai io.github.CSOAI-ORG/aml-ai-mcp

    6AMLD + UK MLR 2017 + FinCEN BSA AML/CFT compliance for AI-enabled transaction monitoring, sanct...

    Version check not run yet

    Security Official MCP Registry · PyPI Local

39. CK Cisa Kev io.github.CSOAI-ORG/cisa-kev-mcp

    CISA Known Exploited Vulnerabilities feed + remediation deadlines for US federal + critical infr...

    Version check not run yet

    Security Official MCP Registry · PyPI Local

40. CA Cybersecurity Ai io.github.CSOAI-ORG/cybersecurity-ai-mcp

    Cybersecurity Ai MCP Server by MEOK AI Labs

    Version check not run yet

    Security Official MCP Registry · PyPI Local

41. GC Gdpr Compliance Ai io.github.CSOAI-ORG/gdpr-compliance-ai-mcp

    Gdpr Compliance Ai MCP Server by MEOK AI Labs

    Version check not run yet

    Security Official MCP Registry · PyPI Local

42. MA Mitre Atlas io.github.CSOAI-ORG/mitre-atlas-mcp

    MITRE ATLAS — Adversarial Threat Landscape for AI Systems. Tactics + techniques for attacking AI...

    Version check not run yet

    Security Official MCP Registry · PyPI Local

43. OA Owasp Agentic io.github.CSOAI-ORG/owasp-agentic-mcp

    Owasp Agentic MCP Server by MEOK AI Labs

    Version check not run yet

    Security Official MCP Registry · PyPI Local

44. SC Sbom Cyclonedx io.github.CSOAI-ORG/sbom-cyclonedx-mcp

    Software Bill of Materials generation + validation in CycloneDX 1.6 and SPDX 2.3 formats. Requir...

    Version check not run yet

    Security Official MCP Registry · PyPI Local

45. SS Security Scanner Ai io.github.CSOAI-ORG/security-scanner-ai-mcp

    Security Scanner Ai MCP Server by MEOK AI Labs

    Version check not run yet

    Security Official MCP Registry · PyPI Local

46. S2 SOC 2 Compliance io.github.CSOAI-ORG/soc2-compliance-ai-mcp

    SOC 2 Type II compliance for trust services criteria (security, availability, processing

    Version check not run yet

    Security Official MCP Registry · PyPI Local

47. FL Flowcheck io.github.CloudCorpRecords/flowcheck

    Least-privilege auditor for GitHub Actions workflows: permissions, triggers, secrets.

    Version check not run yet

    Git and code hosting Official MCP Registry Local

48. TR Tracewatch io.github.CloudCorpRecords/tracewatch

    Observability, tracking, and root-cause for Security Wave scans and findings.

    Version check not run yet

    Monitoring and observability Official MCP Registry Local