plug.directory
Add my server

Security MCP servers

3,521 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

  1. rekey io.github.Ezra-Black/rekey

    Rotate API keys across AWS, GitLab, Cloudflare, OpenAI & more. Secrets never reach the model.

    Version check not run yet

    Cloud platforms Official MCP Registry Local

  2. Reverse Engineer io.github.Firzus/reverse-engineer

    Read-only reverse engineering of Electron apps, PE/ELF/Mach-O binaries, Go/Rust, .NET and APKs.

    Version check not run yet

    Security Official MCP Registry Local

  3. obsify io.github.Formative-Sum41/obsify

    Local, privacy-preserving PII toolkit over MCP — shape to the model, substance stays local.

    Version check not run yet

    Security Official MCP Registry Local

  4. Gadriel AI Security Harness io.github.Gadriel-ai/gadriel

    AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.

    Version check not run yet

    Security Official MCP Registry Local

  5. Abnormal MCP Server io.github.GregDog/mcp-server-abnormal

    Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.

    Version check not run yet

    Security Official MCP Registry · Go modules Local

  6. idamesh io.github.JordanRO2/idamesh

    MCP server for IDA Pro: decompiler, disassembler, and analysis tools for MCP clients.

    Version check not run yet

    Security Official MCP Registry Local

  7. EU PII Redaction io.github.JulianJohansen/eu-pii-redact

    Redact EU personal data (names, national IDs, IBANs) in text and files; restore it later.

    Version check not run yet

    Security Official MCP Registry Local

  8. Chain Signer io.github.Kevthetech143/chain-signer

    Security suite for AI agents: flag drains, permit-phishing & risky actions before signing.

    Version check not run yet

    Security Official MCP Registry Local

  9. Yagami AI Context Firewall io.github.MatthewTracy/yagami

    Open-source AI context firewall for governed model, retrieval, memory, and tool access.

    Version check not run yet

    Security Official MCP Registry Remote

  10. Safeinstall io.github.Mickdownunder/safeinstall

    Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks

    Version check not run yet

    Security Official MCP Registry Local

  11. Releaseguard io.github.RudrenduPaul/releaseguard

    Scans datasets/models for PII/secrets, redacts, and packages a public-release bundle via MCP.

    Version check not run yet

    Security Official MCP Registry Local

  12. Truesignal io.github.RudrenduPaul/truesignal

    Wraps the truesignal CLI as a single generic MCP tool for threat/connector status checks.

    Version check not run yet

    Security Official MCP Registry Local

  13. Release Gate io.github.VamsiSudhakaran1/release-gate

    Pre-deploy security auditor for AI agent code — the risks generic SAST misses.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry Local

  14. Scout Security io.github.Varpost/scout

    Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues.

    Version check not run yet

    Security Official MCP Registry Local

  15. x402 Security & Alpha Oracle io.github.ak10082247-max/x402-sniper-bot

    Read-only pre-trade honeypot simulation and DEX alpha oracle for Solana and Base.

    Version check not run yet

    Finance and payments Official MCP Registry Local

  16. lanternkb io.github.ankitb073/lanternkb

    Private, local search over your own files, by meaning and keywords, with secrets redacted.

    Version check not run yet

    Marketing and SEO Official MCP Registry Local

  17. Dvalincode io.github.arthurpanhku/dvalincode

    Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

    Version check not run yet

    Security Official MCP Registry Local

  18. BlackDome Threat Intel io.github.blackdome-ai/blackdome

    Live honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors.

    Version check not run yet

    Security Official MCP Registry Local

  19. DataCharter io.github.datacharter/datacharter

    Local-first, contract-governed data explorer with read-only, PII-masked query tools for AI agents.

    Version check not run yet

    Security Official MCP Registry Local

  20. FlexOrch io.github.dev-flexorch/flexorch-mcp

    Classify documents, extract structured fields, mask PII, export JSONL/RAG datasets for AI agents.

    Version check not run yet

    Science and research Official MCP Registry · PyPI Local

  21. contextweaver io.github.dgenio/contextweaver

    MCP gateway: bounded tool shortlists + artifact-backed result firewall. Deterministic, no model.

    Version check not run yet

    Security Official MCP Registry Local

  22. Brand Monitor io.github.erikirby/brand-monitor

    Monitor domain expiry, SSL certs, and social handle availability across platforms.

    Version check not run yet

    Security Official MCP Registry Local

  23. Domain Intel io.github.erikirby/domain-intel

    Website intelligence for AI agents: tech stack, hosting, security posture, SEO, and DNS.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry Local

  24. Web Network Tools io.github.erikirby/web-network-tools

    DNS lookup, WHOIS, SSL checker, and HTTP status tools. Uses public APIs only, no scraping.

    Version check not run yet

    Security Official MCP Registry Local

  25. HOL Guard io.github.hashgraph-online/hol-guard

    Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.

    Version check not run yet

    Security Official MCP Registry Local

  26. Supply Chain Guard io.github.homeofe/supply-chain-guard

    Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.

    Version check not run yet

    Security Official MCP Registry Local

  27. APSA mobile app security audit io.github.ictechgy/apsa

    Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.

    Version check not run yet

    Security Official MCP Registry Local

  28. VulnFeed io.github.infai-tech/vulnfeed

    Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.

    Version check not run yet

    Developer tools Official MCP Registry Local

  29. Ip2whois io.github.ip2whois/mcp-ip2whois

    WHOIS domain MCP server that query the WHOIS information using IP2WHOIS API.

    Version check not run yet

    Security Official MCP Registry · PyPI Local

  30. Agent Guard io.github.ipezygj/agent-guard

    Safety checks an agent runs before it acts: package malware, destructive command, secret leak.

    Version check not run yet

    Security Official MCP Registry Local

  31. Consent Proof Record Lint io.github.jmshinhwa/consent-proof-record-lint

    Reads the consent record your code stored and names every proof field GDPR Article 7(1) needs and yo

    Version check not run yet

    Developer tools Official MCP Registry Local

  32. Cra 24 72 14 Reporting Lint io.github.jmshinhwa/cra-24-72-14-reporting-lint

    Reads your SECURITY.md against the EU Cyber Resilience Act reporting clock that started on 11 Septem

    Version check not run yet

    Developer tools Official MCP Registry Local

  33. Fedramp Oscal Ssp Lint io.github.jmshinhwa/fedramp-oscal-ssp-lint

    16 checks on a system-security-plan JSON, in your editor, before a validator returns the package

    Version check not run yet

    Developer tools Official MCP Registry Local

  34. Gdpr Privacy Notice Lint io.github.jmshinhwa/gdpr-privacy-notice-lint

    16 rules read your privacy.md the way Articles 13 and 14 read it

    Version check not run yet

    Developer tools Official MCP Registry Local

  35. Hmrc Fraud Prevention Header Lint io.github.jmshinhwa/hmrc-fraud-prevention-header-lint

    Finds the Gov-Client and Gov-Vendor header mistakes HMRC rejects, in your editor, offline, before yo

    Version check not run yet

    Developer tools Official MCP Registry Local

  36. Jest Snapshot Pii Audit io.github.jmshinhwa/jest-snapshot-pii-audit

    15 rules that find the real customer data your .snap files committed

    Version check not run yet

    Developer tools Official MCP Registry Local

  37. Log Pii Telemetry Lint io.github.jmshinhwa/log-pii-telemetry-lint

    22 rules that name the lines where a Node or TypeScript service writes personal data into logs, cras

    Version check not run yet

    Developer tools Official MCP Registry Local

  38. Security Headers Csp Lint io.github.jmshinhwa/security-headers-csp-lint

    Reads security headers and CSP line by line in your config file and names the lines that silently do

    Version check not run yet

    Security Official MCP Registry Local

  39. Security Txt Cra Lint io.github.jmshinhwa/security-txt-cra-lint

    13 rules that decide whether a vulnerability report ever reaches you

    Version check not run yet

    Security Official MCP Registry Local

  40. Tls Cert Lifetime Lint io.github.jmshinhwa/tls-cert-lifetime-lint

    Finds the 12 settings that break when public TLS certificates fall to 100 days on 2027-03-15: openss

    Version check not run yet

    Security Official MCP Registry Local

  41. Pyghidra Lite io.github.johnzfitch/pyghidra-lite

    Token-efficient Ghidra RE: decompile, xrefs, Swift/ObjC, ELF/Mach-O, async analysis

    Version check not run yet

    Security Official MCP Registry Local

  42. Secretcarousel io.github.jyswee/secretcarousel

    Agent-first secrets vault. Store, rotate, and share credentials from chat. 20 tools.

    100% up · 30 days

    Security Official MCP Registry Local Remote

  43. crowbar io.github.kushvinth/crowbar

    Retrieve CVEs and index them inside your codebase. One SQLite+FTS5 index, one CLI, one MCP server.

    Version check not run yet

    Developer tools Official MCP Registry Local

  44. LeanGate io.github.lambdabypi/leangate

    Checks agent-written Python against your repo: duplicate helpers, error handling, security.

    Version check not run yet

    Git and code hosting Official MCP Registry Local

  45. Quill io.github.manumarri-sudo/quill

    Pre-execution gate for AI-agent tool calls. Touch ID approval. Tamper-evident audit log.

    Version check not run yet

    Security Official MCP Registry Local

  46. obsei io.github.obsei/obsei

    Self-hosted customer feedback with PII stripped at ingest: search, stats and themes with citations.

    Version check not run yet

    Security Official MCP Registry Local

  47. SecHelix io.github.omarmohelal/sechelix

    Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.

    Version check not run yet

    Security Official MCP Registry Local

  48. rowstile io.github.rowstile/rowstile

    Check, test, prove and review a rowstile policy: access rules for Postgres row-level security

    Version check not run yet

    Databases Official MCP Registry Local