Security MCP servers

3,524 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

@pulses/os-mock-mcp io.github.rem0nz/ops-pulses-os-mock-ts

Mock MCP server providing POS, Staff, Survey, Access Control, Analytics, Demographics, Notifications, and BMS connectors for Pulses OS

Version check not run yet

Data warehouses and analytics npm Local MIT
botshield-sdk io.github.bot-shield/botshield-sdk-typescript

Official TypeScript SDK for BotShield — privacy-first human verification (passkeys, no PII) and Agents Ask approvals

Version check not run yet

Security npm Local 54 a week MIT
Vaspera Hardening io.github.RCOLKITT/vaspera-hardening

Enterprise certification for codebases with multi-agent security, reliability, and quality audits

Version check not run yet

Developer tools Official MCP Registry Local
@getcordon/core io.github.marras0914/cordon-core

Core proxy engine for Cordon for MCP — the security gateway for MCP tool calls

Version check not run yet

Security npm Local 51 a week MIT
MITRE ATT&CK io.github.luongnv89/mitre-mcp

MCP server exposing the MITRE ATT&CK framework via the official MCP Python SDK.

Version check not run yet

Security Official MCP Registry · PyPI Local MIT
opnsense-mcp-server io.github.vespo92/opnsensemcp-kz9qt2

Model Context Protocol server for OPNSense firewall management with inter-VLAN routing diagnostics, ARP table, DNS filtering and HAProxy support via Claude Desktop

Version check not run yet

DevOps and infrastructure npm Local 89 a week MIT
@hyphen-network/devassets io.github.0xryanlee/devassets

Local-first developer secrets manager — store encrypted env vars, manage API keys across projects, resolve provider identities, and inject secrets into commands. CLI + MCP server. No cloud, no account

Version check not run yet

Security npm Local 49 a week MIT
Web Recon Agent io.github.joepangallo/web-recon-agent

Owned-target web security assessment MCP server for authenticated, high-friction apps.

Version check not run yet

Security Official MCP Registry · npm Local 11 a week
@nobulex/mcp-server io.github.nobulexdev/nobulex-mcp

Nobulex MCP compliance server — covenant rule checking, hash-chained audit logs, and integrity verification for any MCP-compatible agent.

Version check not run yet

Monitoring and observability npm Local MIT
XploitScan io.github.bgage72590/xploitscan-mcp

Security scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.

Version check not run yet

Security Official MCP Registry · npm Local 223 a week MIT
supply-chain-mcp-server io.github.badchars/supply-chain-mcp-server

Software supply chain security MCP server — vulnerability scanning, package analysis, provenance verification, typosquatting detection, dependency intelligence across npm, PyPI, crates.io, Go, and mor

Version check not run yet

Security npm Local 46 a week MIT
MCP Sentinel io.github.oaslananka/sentinel

Zero-trust MCP security proxy with policy enforcement, PII scrubbing, approvals, and audit trails.

Version check not run yet

Security Official MCP Registry Local
crowdcode-mcp io.github.sr33j/crowdcode-mcp

CrowdCode MCP client with local-first PII redaction. Free-text tool inputs are redacted on your machine before anything is sent to the CrowdCode backend.

Version check not run yet

Security npm Local 45 a week MIT
Agent Immune io.github.denial-web/agent-immune

AI agent security: prompt injection detection, semantic memory, output scanning, prompt hardening

Version check not run yet

Security Official MCP Registry Local
Vigil Fraud Alert io.github.dgtalquantumleap-ai/vigil-fraud-alert

Proximity-based card fraud detection with AI risk scoring.

Version check not run yet

Security Official MCP Registry · npm Local 14 a week MIT
@imsanghaar/sang-mcp-tech io.github.imsanghaar/sang-tech

Sang Tech Monitor MCP Server - Technology news, cyber threats, military tech, and innovation tracking

Version check not run yet

Web search and scraping npm Local AGPL-3.0
@lanes-sh/link io.github.lanes-sh/link

A self-hostable MCP gateway for all your connections, memory, tasks, files, and secrets

Version check not run yet

Files and storage npm Local 11 a week APACHE-2.0
argus-warden io.github.alexar76/argus-9e6tvg

WARDEN MCP firewall — blocks poisoned MCP servers before any tool runs. ARGUS-3 agent CLI (argus); wallet and crypto optional.

Version check not run yet

Finance and payments npm Local 11 a week MIT
Haldir io.github.ExposureGuard/haldir

Guardian layer for AI agents: identity, secrets, audit via MCP.

Version check not run yet

Security Official MCP Registry Local
@cloudblast/mcp-server io.github.cloudblast-io/mcp-server

MCP server for CloudBlast API v2 — manage KVM virtual servers, backups, IPs, security groups, and more.

Version check not run yet

Files and storage npm Local MIT
@iflow-mcp/rsdouglas-janee io.github.rsdouglas/janee-5113pj

Secrets management for AI agents via MCP

Version check not run yet

Security npm Local 2 a week MIT
@promptfoo/evil-mcp-server io.github.promptfoo/evil-mcp-server

MCP server that simulates malicious behaviors for security testing

Version check not run yet

Developer tools npm Local 41 a week ISC
mcp-camoufox io.github.robithyusuf/mcp-camoufox

MCP server for stealth browser automation via Camoufox — 133 tools, plus a browserless TLS-impersonating HTTP path

Version check not run yet

Browser automation npm Local 41 a week MIT
osint-mcp-server io.github.badchars/osint-mcp-server

OSINT intelligence MCP server — Shodan, VirusTotal, SecurityTrails, Censys, DNS, WHOIS, crt.sh, Wayback, BGP

Version check not run yet

Security npm Local 120 a week MIT
dns-security-mcp io.github.badchars/dns-security-mcp

DNS security intelligence MCP server — 104 tools for DNSSEC validation, hijacking detection, tunneling analysis, typosquatting, email security, certificate transparency, blocklist checking, infrastruc

Version check not run yet

DevOps and infrastructure npm Local 40 a week MIT
@heysash/lemonsqueezy-mcp io.github.heysash/lemonsqueezy-mcp

A Model Context Protocol (MCP) server for Lemon Squeezy — 44 audited tools over the official SDK, security-first. Works with any Lemon Squeezy account.

Version check not run yet

Security npm Local 39 a week MIT
logscale-mcp-server io.github.bhayanak/logscale-mcp-server

MCP server for querying CrowdStrike LogScale logs

Version check not run yet

Monitoring and observability npm Local 39 a week MIT
mcp-flutter-apk-injector io.github.marwandevspace/mcp-flutter-apk-injector

Enterprise-grade Model Context Protocol (MCP) server for Android APK reverse engineering, Smali refactoring, native JNI tracing, and Flutter runtime injection powered by Hermes+ Agent Engine.

Version check not run yet

Developer tools npm Local 39 a week MIT
@true-and-useful/janee-openclaw io.github.rsdouglas/janee-openclaw-plugin

OpenClaw plugin for Janee secrets management - provides secure API access through MCP

Version check not run yet

Security npm Local 3 a week MIT
bubblemcp-test-kit io.github.bubblemcp/bubblemcp-test-kit

Testing toolkit for Model Context Protocol (MCP) servers and the agents that use them — fluent assertions, regression baselines, agent tool-call trace testing, failure injection, and security scanning

Version check not run yet

Developer tools npm Local 10 a week MIT
phishclean-mcp io.github.chidhu07/phishclean-mcp

MCP server for PhishClean security analysis tools — check URLs, passwords, emails, headers, JWTs, and source code for security issues

Version check not run yet

Developer tools npm Local 10 a week MIT
MCP Server for OSCAL io.github.awslabs/mcp-server-for-oscal

AI agent tools for Open Security Controls Assessment Language (OSCAL)

Version check not run yet

Security Official MCP Registry Local
@surfinguard/mcp-server io.github.yanivsati/surfinguard-platform-mcp-server

Surfinguard MCP server — AI agent security checks via Model Context Protocol

Version check not run yet

Security npm Local MIT
mcp/cylera-mcp-server io.github.cylera/cylera-mcp-server

Brings context about device inventory, threats, risks and utilization powered by the Cylera Partn...

Version check not run yet

Security Docker Hub · Docker MCP Catalog · Docker MCP Registry Local MIT
agent-chaperone io.github.agent-chaperone/agent-chaperone

A calibrated firewall for AI agent tool calls: screens them before they run, and screens tool results before the agent reads them. Covers MCP servers through a proxy and a client's built-in tools thro

Version check not run yet

Security npm Local 37 a week APACHE-2.0
caitlyn io.github.liangzid/caitlyn-caitlyn-agent

CAITLYN Security Guardian Agent — interactive defense agent for LLM agent protection

Version check not run yet

Security npm Local 37 a week MIT
security-mcp io.github.abrahamoo/security-mcp

AI security MCP server and enforcement gate for Claude Code, Cursor, GitHub Copilot, Codex, Replit, and any MCP-compatible editor. Applies OWASP, MITRE ATT&CK, NIST, Zero Trust, PCI DSS, SOC 2, and IS

Version check not run yet

Security npm Local 37 a week MIT
@vigilhq/mcp-server io.github.ymatagne/vigil-mcp-server

Model Context Protocol (MCP) server for Vigil sanctions screening — exposes compliance checks as MCP tools

Version check not run yet

Security npm Local MIT
Cinderfi — Retirement Planning com.cinderfi/retirement-planning

Retirement planning for Canada & US. CPP/OAS, Social Security, RRSP/TFSA, 401k/IRA, Monte Carlo.

0% up · 30 days

Security Official MCP Registry Remote
@mcp-consultant-tools/azure-defender io.github.klemensms/mcp-consultant-tools-azure-defender

MCP server for Microsoft Defender for Cloud - secure score, security assessments, regulatory compliance, and attack paths

Version check not run yet

Legal and compliance npm Local 36 a week MIT
CyberSPF com.cyberspf/mcp

Assess a domain, IP or ASN: mail and DNS security, certificates, routing and a report card.

Version check not run yet

DevOps and infrastructure Official MCP Registry · PyPI Local LICENSEREF-PROPRIETARY
TrustNotch com.trustnotch/trustnotch-mcp

Tamper-evident audit logs for AI agents: submit, fetch, and verify cryptographic proof bundles.

Version check not run yet

Monitoring and observability Official MCP Registry · PyPI Local APACHE-2.0
Guardian io.github.OraclesTech/guardian-mcp

Runtime AI-threat screening for coding agents: analyze, scan tool calls/outputs & docs (paid).

Version check not run yet

Coding agent tools Official MCP Registry · PyPI Local PROPRIETARY
OWASP ZAP MCP Server io.github.pierre3/zap-mcp

MCP server for OWASP ZAP vulnerability scanning with Docker management

Version check not run yet

Security Official MCP Registry Local
@complianceeverywhere/mcp io.github.cruzryan/hackthis-mcp

Compliance Everywhere for Claude Code, Cursor and Codex (beta): SOC 2 evidence collection AND pentest triage, with your own key, on your own machine.

Version check not run yet

Security npm Local 34 a week MIT
@1claw/mcp-vault io.github.1clawai/1claw-mcp-3qe6cx

1claw MCP server, vault only: secrets, versions, rotation, env bundles, vaults, sharing, connected accounts and human approvals. No signing or execute code in the package.

Version check not run yet

Security npm Local 33 a week MIT
x64dbg-mcp io.github.ouonet/x64dbg-mcp

Production-level Model Context Protocol server for x64dbg reverse engineering and debugging

Version check not run yet

Developer tools npm Local 32 a week MIT
Security Orchestra io.github.RobotFleet-HQ/security-orchestra

Multi-agent MCP platform for data centers and critical power.

Version check not run yet

Security Official MCP Registry · npm Local 19 a week MIT