Security MCP servers

3,526 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

pentest-mcp io.github.dmontgomery40/pentest-mcp-8cd11y

Professional pentest MCP server with stdio + Streamable HTTP transports, bundled MCP Inspector launcher, bearer auth, SoW-aware reporting, and modern tooling across sniffing/finding/bruteforce/crackin

Version check not run yet

Security npm Local 98 a week GPL-3.0-OR-LATER
@ghostswapio/mcp io.github.ghostswap1/ghostswap-agents-mcp-server

Model Context Protocol (MCP) server for the GhostSwap Partners API — no-KYC crypto-to-crypto swaps. Compatible with Claude Desktop, Cursor, Windsurf, Continue.dev, OpenAI Agents SDK, Vercel AI SDK, an

Version check not run yet

Model and agent tools npm Local 19 a week MIT
vox-trust-mcp io.github.vox-trust/vox-trust-mcp

MCP server for the Vox Trust protocol: verify sealed voice recordings (WAV) from any AI assistant, with the seconds that changed. Verify-only, no secrets. Pre-1.0, not audited.

Version check not run yet

Security npm Local 19 a week APACHE-2.0
InsAIts - AI Communication Security Monitor io.github.Nomadu27/insaits

Runtime AI-to-AI security monitor. 23 anomaly types, OWASP MCP Top 10 coverage.

Version check not run yet

Security Official MCP Registry Local
@misterhuydo/cairn-mcp io.github.misterhuydo/cairn

MCP server that gives Claude Code persistent memory across sessions. Index your codebase once, search symbols, bundle source, scan for vulnerabilities, and checkpoint/resume work — across Java, TypeSc

Version check not run yet

Memory and context npm Local 18 a week MIT
@noorfatima123456/packet-chef-mcp io.github.noor202401938-netizen/packet-chef-mcp

Zero-native-dependency pure-JavaScript PCAP/PCAPng forensics MCP server for AI agents: packet inspection, conversation tracking, DNS, HTTP, TLS JA3/JA4, WebSocket, QUIC/HTTP3, and threat detection.

Version check not run yet

Security npm Local 18 a week APACHE-2.0
@sitelint/auditor-mcp io.github.sitelint/auditor-mcp

MCP server for SiteLint Auditor - WCAG and SiteLint accessibility, SEO, performance, and security audits via LLM

Version check not run yet

Developer tools npm Local 18 a week MPL-2.0
acidtest io.github.chuckyatsuk/acidtest

Security scanner for MCP servers and AI agent skills. Scan before you install.

Version check not run yet

Security npm Local 18 a week MIT
romdev-mcp io.github.monteslu/romdev

MCP server giving coding agents full control of homebrew ROM development AND reverse-engineering/romhacking across 14 retro platforms (NES, SNES, GB, Genesis, Atari, C64, PC Engine, MSX, ...) via WASM

Version check not run yet

Coding agent tools npm Local 18 a week MIT
SentinelGate io.github.Sentinel-Gate/sentinelgate

Open-source MCP proxy for AI agent access control with CEL policies, RBAC, and audit.

Version check not run yet

Security Official MCP Registry Local
codex-reasonix-mcp io.github.rixzkiye/codex-reasonix-mcp

A security-first MCP bridge that lets Codex supervise Reasonix ACP workers.

Version check not run yet

Security npm Local 17 a week MIT
mcpeek io.github.iamakash-06/mcpeek

Source-code-level security scanner for MCP (Model Context Protocol) server implementations

Version check not run yet

Developer tools npm Local 17 a week MIT
opentechalyzer io.github.houseofmvps/opentechalyzer

Free, open source website technology detection. Identifies the full stack of any URL from headers, cookies, rendered DOM, JS globals, sourcemap dependencies, DNS records, certificate transparency, wel

Version check not run yet

Developer tools npm Local 17 a week MIT
safehands-pharos io.github.sztch/safehands-pharos

Open-source reusable Pharos Skill, the transaction firewall for AI agent finance on Pharos Pacific Mainnet: deterministic safety verdicts before any wallet signs. Read-only by default; write tools opt

Version check not run yet

Finance and payments npm Local 17 a week MIT
Fray — WAF Security Testing MCP Server io.github.dalisecurity/fray

WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI

Version check not run yet

Developer tools Official MCP Registry Local
Drumbeats io.github.drumbeats-io/mcp

Manage Drumbeats cron, heartbeat and uptime monitors, report job runs and handle incidents.

100% up · 30 days

Monitoring and observability Official MCP Registry · npm Local Remote 4 a week APACHE-2.0
@wardnmesh/mcp-server io.github.pcircle-ai/wardnmesh-mcp-server

WardnMesh.AI MCP Server - Security Middleware for Claude and MCP Clients

Version check not run yet

Security npm Local MIT
alderpost-mcp io.github.8randonpickart5/alderpost-mcp

MCP server for Alderpost Intelligence API — 8 endpoints bundling premium data sources (VirusTotal, People Data Labs, Hunter.io, AbuseIPDB, Qualys SSL Labs, NIH RxNorm, US Census, ESPN, The Odds API).

Version check not run yet

Security npm Local 18 a week MIT
@amandamalavedev/precheck io.github.amandamalavedev/website-precheck

Check your website before you launch — test speed, accessibility, and security headers, generate essential SEO files, and get guidance on what to fix. Works with your terminal or AI coding assistant.

Version check not run yet

Coding agent tools npm Local 16 a week MIT
mythos-x402-mcp io.github.mythos-agent/x402-mcp

MCP server for x402 agent economy — 170+ pay-per-call APIs for AI agents. USDC on Base. No signup, no KYC.

Version check not run yet

Security npm Local 16 a week MIT
GuardianShield io.github.sparkvibe-io/GuardianShield

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

Version check not run yet

Security Official MCP Registry Local
Ybe Check io.github.AddyCuber/ybe-check

Ybe Check – security and compliance orchestrator for AI-generated repositories.

Version check not run yet

Security Official MCP Registry Local
@akshay7273/skill-advisories io.github.akshay7273/skill-advisories

Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.

Version check not run yet

Databases npm Local 15 a week MIT
@connordb/mcp-server io.github.identy-cloud/connordb-mcp-server

MCP (Model Context Protocol) server for ConnorDB — gives LLM agents (Claude Desktop, Cursor, Claude Code, any MCP client) one-click access to a ConnorDB engine: hybrid search, document retrieval, audi

Version check not run yet

Search and retrieval (RAG) npm Local 15 a week SEE-LICENSE-IN
@mimranakb/trust-layer-mcp io.github.mimranchohan/x402-trust-layer-trust-layer-mcp

MCP server for the x402 Trust Layer — 13 agent-payment trust tools (preflight guard, KYM merchant score, mandate diff, semantic escrow, receipt audit, Agent Trust Protocol v4: passport, fraud scan, cr

Version check not run yet

Security npm Local 15 a week MIT
@opentriologue/depsight-mcp io.github.lannguyensi/depsight-mcp

MCP server for depsight — query CVE, license, dependency and CI data from Claude / other agents

Version check not run yet

Developer tools npm Local 15 a week MIT
codeslick-mcp-server io.github.vitorlourenco/codeslick-mcp-server

CodeSlick Security Analysis MCP Server - 323 security checks across 5 languages + 17 MCP-specific behavioral checks + AI code detection

Version check not run yet

Security npm Local 15 a week MIT
mcp-server-security-snapshot io.github.seiya-wasabi/mcp-server-security-snapshot

MCP server for Website Security Snapshot API — scan HTTP security headers from Claude and AI agents

Version check not run yet

Security npm Local 15 a week MIT
open-agenthub io.github.nekrozdev/agenthub

Universal Knowledge Base & Zero-Leak Security Hub for AI Agents (Antigravity, Claude Code, DeepSeek, Hermes, OpenCode, Cursor, Windsurf)

Version check not run yet

Security npm Local 15 a week MIT
securitytrails-mcp io.github.aqhmal/securitytrails-mcp

Unofficial MCP server for the SecurityTrails API — DNS history, subdomain enumeration, WHOIS, SSL certificates and IP intelligence as tools for LLM agents. Not affiliated with SecurityTrails or Record

Version check not run yet

Security npm Local 15 a week MIT
@buildwithabid/mcp-shield io.github.buildwithabid/mcp-shield

Security scanner for MCP servers. Find vulnerabilities before your AI agent does.

Version check not run yet

Security npm Local 14 a week MIT
@reverse-craft/rc-devtools-mcp io.github.reverse-craft/rc-devtools-mcp-5v7c91

ReverseCraft DevTools MCP - MCP server for browser debugging and reverse engineering

Version check not run yet

Developer tools npm Local APACHE-2.0
@solsentry/mcp io.github.solsentry/solsentry-mcp

SolSentry MCP server + TypeScript SDK — Solana threat intelligence. Operator risk, token risk, rug pull detection via mainnet monitoring.

Version check not run yet

Security npm Local 14 a week MIT
countersign-mcp io.github.countersignai/countersign-firewall

Transaction firewall and intent-verification layer for AI agents transacting onchain. Countersign firewalls the MCP execution path of the OKX OnchainOS stack.

Version check not run yet

Security npm Local 14 a week MIT
orangerail-mcp io.github.kimhyeongrae0/orangerail-mcp

Serve an ontology registry as an MCP server: typed read tools, destructive writes staged for human approval, and an audit log of every call.

Version check not run yet

Security npm Local 14 a week MIT
domain-mcp io.github.joachimbrindeau/domain-mcp

MCP server for domain management via Claude, Cursor, and any Model Context Protocol client. 108 Dynadot API actions across 10 generic tools: domain search, registration, renewal, DNS, WHOIS, nameserve

Version check not run yet

DevOps and infrastructure npm Local 24 a week MIT
@vaultry/claude-secrets io.github.vaultry/claude-secrets

Encrypted secrets store for Claude Code (MCP) + CLI + .env placeholder expansion. macOS Keychain backed.

Version check not run yet

Security npm Local 20 a week SEE-LICENSE-IN-LICENSE.MD
audit-mcp-cli io.github.double527/audit-mcp-cli

Lightweight dependency vulnerability audit tool with CLI and MCP Server support

Version check not run yet

Developer tools npm Local 3 a week MIT
@iflow-mcp/ashlrai-phantom-secrets io.github.ashlrai/phantom-secrets

MCP server for Phantom Secrets — lets AI coding tools manage API keys safely without ever seeing real values. 10 tools for Claude Code, Cursor, Windsurf, and Codex.

Version check not run yet

Security npm Local 5 a week MIT
zpl-engine-mcp io.github.cicicalex/zpl-engine-mcp

MCP server for the ZPL stability engine — AIN bias detection & neutrality scoring for finance, gaming, AI/ML, security, crypto. 69 tools across 11 categories. Plug into Claude Desktop / Cursor / Winds

Version check not run yet

Finance and payments Official MCP Registry · npm Local 13 a week MIT
@gixcopilot/mcp io.github.afoudaswe/gix_ai_copilot_nx-mcp

Connects to MCP servers and turns their tools into canonical, security-governed AI tools for the AI Copilot SDK.

Version check not run yet

Security npm Local 13 a week MIT
@maksiph14/toolwall io.github.shleder/toolwall

Fail-closed stdio firewall for risky local MCP JSON-RPC tool calls

Version check not run yet

Security npm Local 13 a week MIT
aws-security-mcp io.github.jowhee327/aws-security-agent

MCP Server for AWS security scanning

Version check not run yet

Cloud platforms npm Local 13 a week MIT
cpanel-pilot-mcp io.github.rayss868/cpanel-pilot-mcp

cPanel Pilot MCP — A comprehensive AI server for cPanel hosting management. Seamlessly control DNS, email, databases, domains, SSL, cron, security, backups, and more.

Version check not run yet

Security npm Local 13 a week ISC
fingerprint-mcp io.github.badchars/fingerprint-mcp

Universal digital fingerprinting MCP server — 100 tools for TCP/TLS/SSH/HTTP/DNS/WAF/IoT/SMTP/SMB fingerprinting, infrastructure topology, C2 detection, OSINT enrichment

Version check not run yet

DevOps and infrastructure npm Local 13 a week AGPL-3.0
Service Public France io.github.OneNicolas/mcp-service-public

French public services: tax, property, admin, education, healthcare, security, risks, legal texts

100% up · 30 days

Security Official MCP Registry Remote
@keywaysh/mcp io.github.keywaysh/keyway-mcp

MCP server for Keyway secrets management - let AI manage your secrets securely

Version check not run yet

Security npm Local MIT
@pangeacyber/mcp-proxy io.github.pangeacyber/pangea-mcp-proxy

Protect any MCP server from malicious entities and confidential PII.

Version check not run yet

Model and agent tools npm Local APACHE-2.0