Security MCP servers

3,525 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

argus-3 io.github.alexar76/argus

ARGUS-3 — MCP security firewall (WARDEN) + frugal personal AI agent. Wallet and on-chain economy optional; crypto OFF by default.

Version check not run yet

Finance and payments npm Local 8 a week MIT
Operant io.github.operantlabs/operant-mcp

Security testing MCP server for penetration testing, forensics, and vulnerability assessment

Version check not run yet

Security Official MCP Registry · npm Local 14 a week MIT
@1claw/mcp-guard io.github.1clawai/1claw-mcp-2nf36t

1claw MCP server, guard only: inspect_content scores text for prompt injection, command injection, encoded payloads, PII and leaked secrets. No account, no credentials, no vault client in the package.

Version check not run yet

Security npm Local 31 a week MIT
vidence-recon-mcp io.github.nkldjdev/vidence-recon-mcp

A safe, batteries-included Model Context Protocol (MCP) server that exposes common security-testing tools and OWASP-aligned playbooks to AI clients — for AUTHORIZED testing only.

Version check not run yet

Security npm Local 31 a week MIT
@iflow-mcp/benahammond-code-auditor-mcp io.github.benahammond/code-auditor-mcp-3xw6qv

Multi-language code quality auditor with MCP server - Analyze TypeScript, JavaScript, and Go code for SOLID principles, DRY violations, security patterns, and more

Version check not run yet

Developer tools npm Local MIT
Spotdb ai.aliengiraffe/spotdb

Ephemeral data sandbox for AI workflows with guardrails and security

Version check not run yet

Security Official MCP Registry · Go modules Local MIT
@ekiaer/lighthouse-mcp-server io.github.ekiaer/codebear-lighthouse-mcp

Lighthouse MCP server — 33 tools for database inspection, security, and performance auditing

Version check not run yet

Databases npm Local MIT
@ekiaer/sentinel-mcp-server io.github.ekiaer/codebear-sentinel-mcp

Sentinel MCP server — 36 tools for code quality, convention enforcement, and security scanning

Version check not run yet

Developer tools npm Local MIT
@eliware/mcp-server io.github.eliware/mcp-server

Pure-ESM Node.js MCP server with automatic tool discovery, Streamable HTTP and stdio transports, TLS, Zod schemas, injectable context, bearer authentication, and generic OAuth2 support.

Version check not run yet

Security npm Local 30 a week MIT
mcp-security-lab io.github.warlyjr-cloud/mcp-security-lab

MCP Security Lab — MCP Verifier: evidence-first, deterministic security checks for local and remote Model Context Protocol servers, with optional Claude-powered remediation.

Version check not run yet

Security npm Local 30 a week APACHE-2.0
sandbox-seed io.github.pranavnagrecha/sandbox-seed

Salesforce sandbox seeding CLI + MCP server: SOQL-scoped org-to-org copy with dependency-graph walking, cross-org FK remapping, deterministic PII masking, and a hard AI-never-sees-your-data boundary.

Version check not run yet

Developer tools npm Local 30 a week APACHE-2.0
@aiclude/security-scanner-mcp io.github.aiclude/asvs-0fyw7z

AIclude Security Vulnerability Scanner - MCP Server for scanning MCP servers and Skills for security vulnerabilities

Version check not run yet

Security npm Local MIT
@elliotllliu/agent-shield io.github.elliotllliu/agent-shield

Multi-engine AI agent security scanner — one scan, four engines, one report

Version check not run yet

Security npm Local 24 a week MIT
UniFi Network MCP io.github.sirkirby/unifi-network-mcp

Manage UniFi Network devices, clients, firewall, VLANs, VPNs, and more via MCP.

Version check not run yet

Security Official MCP Registry · PyPI Local
aether-mcp io.github.dannyphantomx64/aether-mcp

Uncensored AI tools (chat, image, RE/malware analysis, JS deobfuscation, multi-step research) for Claude Desktop, Cursor, Cline, Zed, and any MCP client.

Version check not run yet

Security npm Local 29 a week MIT
safe-omada-mcp io.github.gaspareduard/omada-mcp-mc8j7c

Security-focused Model Context Protocol server for TP-Link Omada Open API workflows

Version check not run yet

Security npm Local 29 a week MIT
mcp-armor io.studiomeyer/armor

Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.

Version check not run yet

Security Official MCP Registry · crates.io Local
wcli0 io.github.s2005/wcli0

Enhanced MCP server for Windows CLI interactions with advanced configuration and security features

Version check not run yet

Security npm Local 27 a week MIT
@iflow-mcp/sinewaveai-agent-security-scanner-mcp io.github.sinewaveai/agent-security-scanner-mcp-vas2r5

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix. For Claude

Version check not run yet

Security npm Local 6 a week MIT
awslabs.iam-mcp-server io.github.awslabs/mcp-changelog.md-krer8f

An AWS Labs Model Context Protocol (MCP) server for managing AWS IAM resources including users, roles, policies, and permissions

Version check not run yet

Security PyPI Local APACHE-2.0
awslabs.security-agent-mcp-server io.github.awslabs/mcp-changelog.md-1304ke

An AWS Labs Model Context Protocol (MCP) server for AWS Security Agent — automated security scanning, penetration testing, and remediation

Version check not run yet

Security PyPI Local APACHE-2.0
mcp-security-audit io.github.luciferforge/mcp-security-audit

MCP Security Auditor — scan any MCP server for injection patterns, risky tools, and misconfigurations

Version check not run yet

Security PyPI Local MIT
@verifik/mcp io.github.open-verifik/verifik-mcp

Use Verifik identity verification, document checks, and background-screening APIs from Cursor, Claude Desktop, or any MCP client — across Latin America and worldwide.

Version check not run yet

Security npm Local 26 a week MIT
blastradius-mcp io.github.jimil-joshi/blastradius-mcp

Zero-trust security proxy for MCP: pre-execution blast radius simulation, DLP redaction, step-up approval tokens, and a hash-chained audit ledger.

Version check not run yet

Security npm Local 26 a week APACHE-2.0
maltego-mcp io.github.lidless-labs/maltego-mcp

MCP server for authoring Maltego graph files and running primitive OSINT lookups.

Version check not run yet

Files and storage npm Local 26 a week MIT
WhoisJSON io.github.Whoisjson/mcp-server

WHOIS, DNS, SSL, and domain availability lookups for AI assistants

Version check not run yet

Security Official MCP Registry · npm Local 9 a week MIT
@ahmedshaikh/http-client-mcp io.github.razistuff/http-client-mcp

Structured HTTP requests as an MCP server — auth (via env, not pasted secrets), retries, timeouts, query params, and parsed JSON responses, so agents stop doing fragile curl gymnastics.

Version check not run yet

Security npm Local 25 a week MIT
@carapace/mcp-server io.github.fredericlambrechts/carapace-mcp-server

MCP server exposing Carapace security scanning tools to AI agents

Version check not run yet

Security npm Local MIT
SpineFrame io.github.Ratnaditya-J/spineframe

Governance runtime for AI agents with signed provenance, compliance audits, and OSINT.

Version check not run yet

Security Official MCP Registry Local
bug-bounties-mcp io.github.lissy93/bug-bounties

MCP server for the bug-bounties database (search programs, look up security contacts).

Version check not run yet

Databases npm Local 24 a week MIT
neuron-inspector io.github.conquext/neuron-inspector

181 tools for AI agents. Turn Chrome into an MCP server — inspect DOM, automate clicks, audit security, mock APIs, extract data, download videos, schedule agents, monitor pages, self-improving recipes

Version check not run yet

Browser automation npm Local 24 a week MIT
Prism Scanner io.github.aidongise-cell/prism-scanner

Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.

Version check not run yet

Security Official MCP Registry Local
@vibeleading/mcp-privacy-shield io.github.vibeleading/mcp-privacy-shield

MCP server implementing the Vibe Leading Privacy Shield: PII sanitization, tiered sovereignty classification, and compliance scoring.

Version check not run yet

Security npm Local 23 a week MIT
mcp-dm8-server io.github.mzaxd/dm8-mcp

MCP server for DM8 database operations with enhanced security. Provides read-only database access via Model Context Protocol.

Version check not run yet

Databases npm Local 23 a week ISC
Domain Check io.github.saidutt46/domain-check

Fast domain availability checker with RDAP/WHOIS — batch checks, TLD presets, and name generation.

Version check not run yet

Security Official MCP Registry · crates.io Local
@andesyte-oss/cli io.github.andesyte-oss/andesyte-cli-cli

Andesyte local security CLI and MCP server: check code and dependencies without uploading source.

Version check not run yet

Developer tools npm Local 498 a week MIT
@sandprivacy/sandgate io.github.sandprivacy/sandgate

The human gateway for AI agents — approvals, 2FA codes and email verification, self-hosted. Your agent asks; you decide; secrets never touch the LLM.

Version check not run yet

Security npm Local 22 a week AGPL-3.0-ONLY
netvein-mcp io.github.dongp06/netvein

Local-first Chrome CDP reverse engineering & wire-level traffic MCP server, for Claude Code, Cursor, Codex, OpenCode, Gemini, AntiGravity, and Hermes Agent — zero DOM bloat, stealth bot bypass, 100% l

Version check not run yet

Browser automation npm Local 22 a week MIT
@compr/opscontext-mcp io.github.fastprod/opscontext-mcp

OpsContext for AI Agents — read-only fleet visibility (PM2/nginx/Docker/git/cron) + tamper-evident audit log + policy-as-code hooks. The ops + compliance layer Claude Code can't grow natively.

Version check not run yet

DevOps and infrastructure npm Local 487 a week BSL-1.1
DechoNet io.github.node-man/dechonet-mcp

Moved to com.dechonet/mcp. 25 security tools, hosted at https://dechonet.com/mcp

Not checked yet

Security Official MCP Registry
@wolpertingerlabs/drawlatch io.github.wolpertingerlabs/drawlatch

Encrypted MCP proxy with mutual authentication. Local MCP server forwards requests through an encrypted channel to a remote secrets-holding server.

Version check not run yet

Security npm Local 21 a week MIT
@yashau/prick-mcp io.github.yashau/prick-mcp

Model Context Protocol server for a self-hosted secrets manager on Cloudflare Workers and D1. Lets an AI coding assistant list and write secrets without a value ever entering the conversation.

Version check not run yet

Coding agent tools npm Local 21 a week MIT
mcp-detector io.github.adebayomoses/mcp-detector

Security, reliability, and quality scanner for Model Context Protocol (MCP) servers.

Version check not run yet

Security npm Local 21 a week MIT
github-security-mcp io.github.badchars/github-security-mcp-d7kyq7

GitHub security posture audit tools for AI agents — organization, repository, Actions, secrets, supply chain analysis via MCP

Version check not run yet

Git and code hosting npm Local 66 a week MIT
Mund — MCP Security Scanner io.github.Tyox-all/mund

Scan for prompt injection, secrets, PII, and vet MCP servers before installation

Version check not run yet

Security Official MCP Registry Local
@jrooig/mcpshield io.github.jaumerohi2007-cell/mcp-shield

A local firewall for AI agents: pauses dangerous MCP tool calls (shell, file deletes, secret exfiltration) for your approval before they run — live in the connection, 100% on your machine.

Version check not run yet

Files and storage npm Local 5 a week MIT
supabase-security-mcp io.github.larik15/supabase-security-mcp

MCP server that audits a Supabase project's security from Claude, Cursor or any MCP client: anon-key probe, RLS policy audit, and a two-account cross-tenant test.

Version check not run yet

Databases npm Local 20 a week MIT
Skylos io.github.duriantaco/skylos

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

Version check not run yet

Security Official MCP Registry Local