plug.directory
Add my server

Security MCP servers

3,520 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

  1. Truthound io.github.seadonggyun4/truthound

    Local data quality for CSV/Parquet: nulls, duplicates, profiles, sampled PII; directory consent.

    Version check not run yet

    Files and storage Official MCP Registry Local

  2. Sqlsure io.github.sqlsure/sqlsure

    Semantic SQL inspector: catches double-counting, wrong joins, PII exposure before execution.

    Version check not run yet

    Databases Official MCP Registry Local

  3. Palanit Core io.github.stasxr/palanit-core

    Scan MCP servers and agent tool manifests for poisoning, exfiltration, secrets and supply-chain risk

    Version check not run yet

    Security Official MCP Registry Local

  4. LLMVerify io.github.subodhkc/llmverify

    Local-first MCP server for LLM output verification — risk signals, injection and PII checks.

    Version check not run yet

    Security Official MCP Registry Local

  5. SUNGLASSES io.github.sunglasses-dev/sunglasses

    Input firewall for AI agents: scan text and files before an agent reads them. Local, no network.

    Version check not run yet

    Files and storage Official MCP Registry Local

  6. Taranis AI io.github.taranis-ai/taranis-mcp-server

    Search stories and discover OSINT sources in Taranis AI.

    Version check not run yet

    Security Official MCP Registry · PyPI Local

  7. Every App Is Open Source io.github.thomasisalwayslate/every-app-is-open-source

    Native reverse engineering with Ghidra and evidence on Apple Silicon macOS. Setup required.

    Version check not run yet

    Security Official MCP Registry Local

  8. MCP-Bastion io.github.vaquarkhan/mcp-bastion

    Security middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.

    Version check not run yet

    Security Official MCP Registry · PyPI Local

  9. Vizier Guard io.github.vassiliylakhonin/vizier-guard

    Deterministic authorization and security guard for AI agent actions with signed receipts.

    Version check not run yet

    Security Official MCP Registry Local

  10. Aegis io.github.verrysimatupang99/aegis

    Charter-bound defensive security copilot: secrets, obfuscation, deps, Dockerfile, IaC scans.

    Version check not run yet

    Security Official MCP Registry Local

  11. VMware NSX Security io.github.vmware-skills/vmware-nsx-security

    VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.

    Version check not run yet

    Security Official MCP Registry Local

  12. Code Factory io.github.zrk222/code-factory

    Read-only audit evidence for security, tests, native coverage, runtime failures and repair status.

    Version check not run yet

    Security Official MCP Registry Local

  13. VMware NSX Security io.github.zw008/vmware-nsx-security

    VMware NSX security: DFW policies, security groups, tags, Traceflow, IDPS — 21 MCP tools.

    Version check not run yet

    Security Official MCP Registry Local

  14. AppLedger net.appledger/appledger

    Plain-English security checks for AI-built apps (Trivy + Opengrep), with fix requests for agents

    Version check not run yet

    Security Official MCP Registry Local

  15. Clearfront sh.clearfront/clearfront

    OSINT sweep of a digital footprint: breaches, accounts, data brokers, domains and IPs

    Version check not run yet

    Security Official MCP Registry Local

  16. jsreverser-mcp io.github.noone-hub/jsreverser-mcp

    MCP server for JavaScript reverse engineering and debugging

    Version check not run yet

    Developer tools npm Local APACHE-2.0

  17. vault-ask com.erseni/vault-ask

    Request and send secrets for AI agents, end-to-end encrypted and never shown in the chat.

    Version check not run yet

    Security Official MCP Registry · npm Local AGPL-3.0-OR-LATER

  18. ncrypted io.github.Seidl-Family/ncrypted

    One-time, end-to-end encrypted secrets for agents. 0.005 USDC per secret via x402.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote MIT

  19. Ci Guard io.github.carelessdept/ci-guard-mcp

    Local-first static repository security and configuration drift auditor (CLI, GitHub Action & MCP).

    Version check not run yet

    Git and code hosting Official MCP Registry · npm Local MIT

  20. Vuln Check io.github.ciloops/vuln-check

    Local vulnerability scan on top of grype, with prioritised upgrade actions for agents.

    Version check not run yet

    Security Official MCP Registry · npm · Go modules Local APACHE-2.0

  21. First Epss io.github.cyanheads/first-epss-mcp-server

    Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote APACHE-2.0

  22. Mitre Cwe io.github.cyanheads/mitre-cwe-mcp-server

    Explore MITRE CWE weaknesses, CAPEC attack patterns, mitigations, code examples, and mappings.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote APACHE-2.0

  23. uta-shield io.github.eddyflores100-lang/uta-shield

    Provider-side MCP firewall: identity, threat-intel, barter, rate limits, DLP, audit.

    Version check not run yet

    Security Official MCP Registry · npm Local SEE-LICENSE-IN

  24. MGI-Mind io.github.madgodinc/mgi-mind

    Local memory server for AI agents: hybrid search, a fact graph and a hash-chained audit log.

    Version check not run yet

    Security Official MCP Registry · npm Local APACHE-2.0

  25. Mi Medical Exclusions io.github.pipeworx-io/mi-medical-exclusions

    Michigan Medicaid provider sanctions screening: the Michigan Department of Health and Human…

    100% up · 30 days

    Science and research Official MCP Registry · npm Local Remote MIT

  26. OpenDeviceDB org.opendevicedb/opendevicedb

    Check 21,000+ devices with open firmware or protocols before reverse engineering one.

    Version check not run yet

    Security Official MCP Registry · npm Local AGPL-3.0-OR-LATER

  27. @rad-security/mcp-server io.github.rad-security/mcp-server-qfb4mm

    RAD Security MCP Server for AI-powered security insights

    Version check not run yet

    Security npm Local 94 a week MIT

  28. @zkproofport-ai/mcp io.github.zkproofport/proofport-ai-mcp

    Local MCP server and CLI for ZKProofport Coinbase KYC, country, OIDC and GIWA attestation proofs. Optional EIP-712 action binding for GIWA; x402 USDC payments.

    Version check not run yet

    Finance and payments npm Local 94 a week MIT

  29. Csf io.github.compl-i-agent/csf

    NIST CSF 2.0 - Professional cybersecurity framework with 35 tools and 12 prompts

    Version check not run yet

    Model and agent tools Official MCP Registry · npm Local 18 a week MIT

  30. Vibecheck io.github.VibeCheckAIOfficial/vibecheck-mcp

    AI Code Firewall — MCP Server for hallucination prevention in AI development

    Version check not run yet

    Security Official MCP Registry · npm Local 3 a week MIT

  31. Attestor io.github.bolnet/attestor

    Self-hosted memory for agent teams. Bi-temporal replay, deterministic retrieval, audit log.

    Version check not run yet

    Security Official MCP Registry Local

  32. @valv/mcp-sdk io.github.valv-dev/valv-mcp-sdk

    Library to turn your app's database into an MCP server for coding agents (Claude Code) — adapter-agnostic, row-level security, zero SQL

    Version check not run yet

    Databases npm Local 24 a week MIT

  33. osv-scanner-mcp io.github.tedorigawa001/osv-scanner-mcp

    MCP server that wraps Google's OSV-Scanner to scan Java, JavaScript, Python, Go, Rust, .NET, and PHP dependencies for known vulnerabilities and recommend fixes

    Version check not run yet

    Developer tools npm Local 89 a week APACHE-2.0

  34. Kloakt io.github.KultMember6Banger/kloakt

    Cloaked headless browser for AI agents — stealth TLS, smart extraction, SPA fallback

    Version check not run yet

    Browser automation Official MCP Registry Local

  35. cli-mcp-server io.github.mladensu/cli-mcp-server

    Command line interface for MCP clients with secure execution and customizable security policies

    Version check not run yet

    Security PyPI Local

  36. cisco-ai-mcp-scanner io.github.cisco-ai-defense/mcp-scanner

    A tool to scan MCP servers and tools for security findings

    Version check not run yet

    Security PyPI Local

  37. LeakRank Guard io.github.ProtoTeemo/leakrank-guard

    Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

    Version check not run yet

    Security Official MCP Registry · npm Local 17 a week MIT

  38. @iflow-mcp/cyreslab-circl-cve-search-mcp-server io.github.cyreslab/circl-cve-search-mcp-server

    MCP server for accessing CIRCL CVE SEARCH API - search CVE data, vulnerabilities, and security information

    Version check not run yet

    Security npm Local 436 a week MIT

  39. @kaademos/secure-sdlc io.github.kaademos/secure-sdlc-agents

    Secure SDLC agent team — CLI to scaffold docs, hooks, CI, and MCP-ready security workflows

    Version check not run yet

    Developer tools npm Local 22 a week MIT

  40. @passwd/passwd-mcp io.github.pepuscz/passwd-passwd-mcp

    MCP server for passwd.team password manager

    Version check not run yet

    Security npm Local MIT

  41. FlightQueue com.flightqueue/flightqueue

    Airport security wait times, forecasts, FAA delays, EES border queues and baggage stats.

    100% up · 30 days

    Maps and location Official MCP Registry · GitHub MCP Registry Remote

  42. Sitelemetry com.sitelemetry/sitelemetry

    OAuth website audits: security, SEO, AI visibility, integrations, accessibility and performance.

    100% up · 30 days

    Developer tools Official MCP Registry · GitHub MCP Registry Remote

  43. MCP security checks — WARDEN and HISTOR dev.modelmarket/mcp-security

    Scan MCP tool definitions for poisoning, look up server history, count tool-list tokens. Free.

    100% up · 30 days

    Security Official MCP Registry Remote

  44. HackMyIP — no-key IP intelligence io.github.0xvibly/hackmyip-mcp

    Free no-key IP intelligence: geolocation, VPN detection, DNS, WHOIS, blacklists, breach checks

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  45. SanctionsKit developer MCP io.github.SanctionsKit/sanctionskit

    Sanctions API docs and request validation, with account-linked synthetic sandbox testing.

    100% up · 30 days

    Developer tools Official MCP Registry · GitHub MCP Registry Remote

  46. AegisGate MCP io.github.aegisgatesecurity/aegisgate-mcp

    Secure MCP server framework with 23 security layers and ML threat detection. Zero deps.

    Version check not run yet

    Security Official MCP Registry Remote

  47. BLOCKTRUST TrustScan io.github.brnbtech770/blocktrust-trustscan

    Trust verification for AI agents: identities, domains, phishing, contacts, Trust Circle, Vault.

    100% up · 30 days

    Security Official MCP Registry Remote

  48. rust-panosmcp io.github.mechubsec/rustpanosmcp

    PAN-OS firewall MCP server: scoped, audited, two-person change control. Rust.

    Version check not run yet

    Security Official MCP Registry · GitHub MCP Registry Local