Security MCP servers

3,375 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. SM SAST MCP Server io.github.Skyrxin/sast-mcp-server

   11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations

   Version check not run yet

   DevOps and infrastructure Official MCP Registry · PyPI Local MIT

2. UC Universal Connector io.github.TeodorMCP/universal-connector-mcp

   Security-first MCP server that connects any OpenAPI, GraphQL, gRPC or SOAP API to AI agents.

   Version check not run yet

   Developer tools Official MCP Registry · PyPI Local MIT

3. VE Verifa io.github.Verifa-Solutions/verifa

   Identity verification, document checks, sanctions/PEP screening and case review as agent tools.

   100% up · 30 days

   Security Official MCP Registry · npm Local Remote MIT

4. VI VirusTotal io.github.VirusTotal/virustotal-mcp

   Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.

   100% up · 30 days

   Security Official MCP Registry · PyPI Local Remote APACHE-2.0

5. AL Altr io.github.altrsoftware/altr-mcp-server

   MCP server for ALTR data security: databases, tags, policies, classification, access, audits

   Version check not run yet

   Databases Official MCP Registry · PyPI Local GPL-3.0-OR-LATER

6. PF Pfsense io.github.antonio-mello-ai/mcp-pfsense

   Manage pfSense firewalls through AI assistants — rules, DHCP, DNS, and more

   Version check not run yet

   DevOps and infrastructure Official MCP Registry · PyPI Local MIT

7. MS mcp-sanctions io.github.atomno-mcp/mcp-sanctions

   Sanctions/watchlist screening (RF, OFAC, EU, UK, UN) with confidence levels for KYC/AML.

   Version check not run yet

   Security Official MCP Registry · PyPI Local MIT

8. QU Queryshield io.github.bch1212/queryshield

   Secure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log.

   Version check not run yet

   Developer tools Official MCP Registry · PyPI Local MIT

9. FM FAOSTAT MCP io.github.berba-q/faostat-mcp

   FAOSTAT data for 245 countries: crops, trade, food security, and emissions via 23 MCP tools.

   Version check not run yet

   Security Official MCP Registry · PyPI Local MIT

10. VE Veritasgraph io.github.bibinprathap/veritasgraph

    Zero-trust, air-gapped Enterprise GraphRAG MCP server with offline, citation-grounded answers.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

11. MS mcp-server-sigma io.github.christianclaudio/sigma

    MCP server for Sigma Computing. Provision dashboards, build models, and automate cloud analytics.

    Version check not run yet

    Security Official MCP Registry · PyPI Local APACHE-2.0

12. OD OctoWatch DLP io.github.extralabs/octowatch-mcp

    Read-only OctoWatch DLP Cloud MCP: risks, idle time, productivity, monitoring.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

13. MS MCP Safety Warden io.github.gautamvarmadatla/mcpsafetywarden

    MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

    Version check not run yet

    Security Official MCP Registry · PyPI Local APACHE-2.0

14. MC MCPSentinel io.github.gentaArnezzi/mcpsentinel

    Precision-first security scanning for Model Context Protocol servers.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

15. AE Aegis io.github.getaegis/aegis

    Credential isolation for AI agents. Inject secrets at the network boundary.

    Version check not run yet

    Security Official MCP Registry · npm Local APACHE-2.0

16. DE DefectDojo io.github.inspicere/mcp-defectdojo

    MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

17. MI Mikrotik io.github.jeff-nasseri/mikrotik-mcp

    MCP server for MikroTik routers: firewall, NAT, routing, DHCP, DNS, WireGuard and more via SSH.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · PyPI Local MIT

18. ST Stig io.github.jeneric/stig-mcp

    MCP server: MITRE ATT&CK® -> NIST 800-53r5 -> DISA STIG fix/check steps, mitigations and detections

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

19. PT Patch Tuesday io.github.jonnybottles/patch-tuesday

    Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment

    0% up · 30 days

    Security Official MCP Registry · PyPI Local Remote MIT

20. VT Vuln Triage io.github.kimmawla/vuln-triage-mcp

    Tells your AI agent which vulnerabilities to fix first, using OSV.dev, FIRST EPSS, and CISA KEV.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

21. PC PostgreSQL CVE & Release Intelligence io.github.meob/pg-cve-mcp

    PostgreSQL security for AI agents: CVEs, yanked releases, exploits, and upgrade paths

    Version check not run yet

    Security Official MCP Registry · PyPI Local APACHE-2.0

22. VA Vanta io.github.mindstone/mcp-server-vanta

    Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs

    Version check not run yet

    Security Official MCP Registry · npm Local FSL-1.1-MIT

23. RK Recon Kit io.github.nan786521/recon-kit-mcp

    Read-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

24. SE Secobserve io.github.nh4ttruong/secobserve-mcp

    MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

25. PH Presidio Hardened X402 io.github.presidio-v/presidio-hardened-x402-mcp

    Pre-payment safety gate for x402 agents: PII screening, spend policy, replay checks before signing.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

26. SO Sops io.github.privacyplaybook/sops-mcp

    MCP server for creating and managing SOPS-encrypted secrets

    Version check not run yet

    Security Official MCP Registry · PyPI Local APACHE-2.0

27. OT OSINT Toolbox io.github.renkagod/osint-toolbox-mcp

    Run Sherlock, Maigret, Holehe, GHunt, theHarvester, SpiderFoot and more OSINT tools locally

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

28. PC Prompt Compass io.github.rishabhmpc/prompt-compass

    Decision-only prompt routing and firewall checks for local/cloud routing, PII and jailbreak risk.

    100% up · 30 days

    Model and agent tools Official MCP Registry · npm Local Remote SEE-LICENSE-IN-LICENSE.MD

29. OM OSINT MCP io.github.rjn32s/osint-mcp

    26 free OSINT tools as MCP tools for AI agents. Auto-installs everything on first run.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

30. EM entraadm MCP io.github.shigechika/entraadm-mcp

    MCP server for Microsoft Entra ID sign-in and audit-log triage (read-only)

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

31. GW Google Workspace Admin Security-Audit MCP io.github.shigechika/gwsadm-mcp

    MCP server for Google Workspace security auditing — login audit, external sharing, daily brief

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

32. NM netdiag MCP io.github.shigechika/netdiag-mcp

    MCP server wrapping dig, ping, mtr, whois and TLS/HTTP checks for on-demand network diagnostics

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

33. SW SiteVerdict — Website Audit Tools io.github.siteverdict/siteverdict

    Website audits for AI agents: GDPR consent, speed, WCAG, SPF/DMARC and AI-search readiness.

    100% up · 30 days

    Developer tools Official MCP Registry · npm Local Remote MIT

34. RM Reversecore MCP io.github.sjkim1127/reversecore-mcp

    Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

35. SM Strac MCP DLP io.github.strac-io/strac-mcp-dlp

    Detect and redact PII, PHI, PCI and secrets in text and files before an AI agent sees them.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

36. MD MIUI Decrypt MCP io.github.tambovchanin/lsadecrypt-mcp

    Decrypt .lsa/.lsav files from Xiaomi devices. Upload, status, download, pricing.

    100% up · 30 days

    Security Official MCP Registry · npm Remote ISC

37. CR Crowdsentinel io.github.thomasxm/crowdsentinel-mcp-server

    AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics

    Version check not run yet

    Search and retrieval (RAG) Official MCP Registry · PyPI Local GPL-3.0-ONLY

38. TG Tork Governance io.github.torkjacobs/tork-governance

    AI agent governance for MCP: PII detection, policy enforcement, compliance, and kill switch.

    Version check not run yet

    Security Official MCP Registry · npm Local MIT

39. OT Otx io.github.w0h1v/otx

    MCP server for AlienVault OTX threat intelligence: indicators, pulses, search, and users.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

40. MI Mikrotik io.github.wiresage/mikrotik-mcp

    MCP server for MikroTik routers: firewall, NAT, routing, DHCP, DNS, WireGuard and more via SSH.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · PyPI Local MIT

41. NN Nigeria NIGSAC Sanctions MCP by Wycord io.github.wycord/nigeria-nigsac-sanctions

    Screen a name vs Nigeria's NIGSAC sanctions register. Best-effort signal. A Wycord product.

    Version check not run yet

    Security Official MCP Registry · npm Local MIT

42. RE ReClip io.github.yagyaanshK/reclip

    Inspect and download authorized media or precise clips locally with yt-dlp.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

43. JO Jobverify io.github.yessGlory17/jobverify

    Detect fake-recruiter and job-offer scams using free OSINT. No API keys.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

44. FI Firmaradar no.firmaradar/mcp

    Norwegian company intelligence: ownership, roles, financials, risk, KYC/AML/PEP (multi-source)

    100% up · 30 days

    Security Official MCP Registry · PyPI Remote APACHE-2.0

45. 4D 4da io.github.4DA-Systems/4da-mcp-server

    Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.

    Version check not run yet

    Security Official MCP Registry · npm Local 1.2k a week APACHE-2.0

46. KE keyshroud io.github.dinhkarate/keyshroud

    Agent-safe secrets from self-hosted Vaultwarden/Bitwarden: injected into commands, masked in output

    Version check not run yet

    Security Official MCP Registry · npm Local 1k a week MIT

47. LO Lokal io.github.lokal-id/lokal

    Indonesia-ready agents: NIK, phone, Rupiah, regions, postal codes, holidays, and PII masking.

    Version check not run yet

    Utilities Official MCP Registry · npm Local 876 a week MIT

48. BA Bastion io.github.Gowthaman90/mcp-bastion

    Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.

    Version check not run yet

    Security Official MCP Registry · npm Local 239 a week APACHE-2.0