Security MCP servers

3,531 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

Code Sentinel io.github.salrad22/code-sentinel

Code quality analysis MCP server - detects security issues, deceptive patterns, and placeholders

Version check not run yet

Developer tools Official MCP Registry · npm Local 27 a week MIT
@securitychecks/mcp io.github.securitychecks/securitychecks

MCP server for SecurityChecks - verify security invariants via AI assistants

Version check not run yet

Security npm Local 19 a week SEE-LICENSE-IN
@aegis-skills/core io.github.drupadsachania/aegis-skills-22a8nn

Universal security skill library (24 skills) for Claude, ChatGPT, Cursor, Gemini, and VS Code. Install once globally, use everywhere.

Version check not run yet

Model and agent tools npm Local 12 a week MIT
@flatcash/mcp-server io.github.flatdefi/flatcash-mcp-server

MCP server for flat.cash — give your AI agent a treasury. Buy, hold, and transfer CPI-pegged FLAT with no wallet, no gas, no KYC.

Version check not run yet

Security npm Local 12 a week MIT
@korayda4/vibe-security io.github.korayda4/vibe-security

Security guard MCP server for Vibe Coded projects — scans Frontend and Backend across every layer and language, plans + tests + fixes vulnerabilities. Claude Code and VS Code Anthropic Claude extensio

Version check not run yet

Security npm Local 12 a week MIT
@nuoframework/darktrace-mcp io.github.nuoframework/darktrace-mcp

Stdio MCP server for the Darktrace Threat Visualizer API (unofficial)

Version check not run yet

Security npm Local 12 a week APACHE-2.0
@oilflow/mcp-server io.github.rafaemush/oilflow-mcp-server

Verifiable compliance evidence for agent decisions. MCP server for the OilFlow Network APIs: screen counterparties against 8 sanctions lists and a first-party fraud-cluster registry, check trade trada

Version check not run yet

Security npm Local 12 a week APACHE-2.0
ebka-caido-ai io.github.slonser/ebka-caido-ai-claude-mcp-server

MCP server for Caido - AI-powered security testing assistant

Version check not run yet

Developer tools npm Local 12 a week GPL-3.0
dungngo-ida-pro-mcp io.github.mrexodia/ida-pro-mcp

Vibe reversing with IDA Pro (republished for testing)

Version check not run yet

Security PyPI Local
ida-pro-mcp io.github.mrexodia/ida-pro-mcp-4zscqc

Vibe reversing with IDA Pro

Version check not run yet

Security PyPI Local
@iflow-mcp/badchars-cve-mcp io.github.badchars/cve-mcp

CVE/vulnerability intelligence MCP server — NVD, EPSS, KEV, GitHub Advisory, OSV

Version check not run yet

Security npm Local 16 a week MIT
@safekeylab/mcp-enterprise io.github.safekeylab/safekeylab-mcp-mcp-enterprise

SafeKeyLab Enterprise MCP Server - Agent Security, RAG Protection, and Compliance

Version check not run yet

Security npm Local MIT
@safekeylab/mcp-pii io.github.safekeylab/safekeylab-mcp-mcp-pii

SafeKeyLab PII Detection MCP Server - Detect and redact PII in text, images, and documents

Version check not run yet

Security npm Local MIT
@agentskillshub/mcp io.github.zhuyansen/agentskillshub-mcp

MCP server for AgentSkillsHub — search, audit, and install open-source AI agent skills & MCP servers from inside your agent. Security-graded, quality-scored. Zero backend load.

Version check not run yet

Security npm Local 11 a week MIT
@keyvaluesystems/agent-opfor-cli io.github.keyvaluesoftwaresystems/agent-opfor-cli

Opfor CLI — security testing for AI agents and MCP servers (opfor setup|run|hunt)

Version check not run yet

Developer tools npm Local 11 a week APACHE-2.0
@libermall/card-mcp io.github.libermall/libermall-card-mcp

MCP server for Libermall Card — a Telegram-native crypto card. Lets AI assistants (Claude, ChatGPT, Cursor) read the public card catalog: card types, supported networks (USDT TRC-20 / TON), KYC requir

Version check not run yet

Security npm Local 11 a week MIT
@npm_xiyuan/mcp-npm-radar io.github.jiyi1990118/mcp-npm-radar

🚀 Real-time npm package intelligence MCP server - Search, analyze, compare packages, security audit, smart recommendations

Version check not run yet

Developer tools npm Local 11 a week ISC
@rexymayderio/sentinel io.github.rexysaragih/sentinel

Universal Security Verification Framework for AI Agent Installations

Version check not run yet

Security npm Local 11 a week MIT
@saiteja1123/mcp-server io.github.vibesecur/vibesecur

Vibesecur MCP security scanner — universal account config, multi-project CRU, folder locking, cross-IDE

Version check not run yet

Developer tools npm Local 11 a week MIT
change-firewall io.github.himanshyou2003/change-firewall

The deterministic trust layer for autonomous AI coding agents. Compiler-grounded verification of what an agent actually did vs. what it claimed, blast radius mapping, and persistent contract memory.

Version check not run yet

Coding agent tools npm Local 11 a week MIT
cloudpanel-mcp io.github.heyjishh/cloudpanel-mcp

MCP server for CloudPanel — manage sites, databases, SSL, Docker, and deploy apps via AI. Works with Claude, Cursor, OpenCode, Gemini CLI, Kiro, and any MCP client.

Version check not run yet

DevOps and infrastructure npm · PyPI Local 11 a week MIT
keysnag io.github.sheldon-desouza/keysnag

Cybersecurity for AI founders and vibe coders. A pre-push security gate for apps built with Claude Code, Cursor, Codex, Lovable and Bolt: 12 offline checks for leaked keys, Supabase RLS, cross-account

Version check not run yet

Security npm Local 11 a week MIT
mcp-smart io.github.sliday/mcp-smart

MCP server providing multi-advisor AI consultations via OpenRouter API with advanced caching, rate limiting, and security features

Version check not run yet

Security npm Local 11 a week MIT
mitre-mcp io.github.lidless-labs/mitre-mcp

MCP server for MITRE ATT&CK knowledge base - technique lookup, threat intelligence, detection coverage analysis

Version check not run yet

Security npm Local 11 a week MIT
mrcp-engine io.github.faelscarpato/mrcp-engine

Deterministic AST code-intelligence engine for AI agents — MCP server + REST API for architecture analysis, security audits, and doc generation.

Version check not run yet

Developer tools npm Local 11 a week MIT
solidity-agent-toolkit io.github.whackur/solidity-agent-toolkit

MCP server providing Solidity smart contract security analysis tools, OWASP knowledge base, and development utilities for AI agents

Version check not run yet

Finance and payments npm Local 11 a week MIT
@iflow-mcp/mcp-shodan-server io.github.cyreslab-ai/shodan-mcp-server

A Model Context Protocol server for comprehensive Shodan API integration with advanced cybersecurity features

Version check not run yet

Security npm · Docker Hub · Docker MCP Catalog Local 2 a week MIT
@agenthotline/mcp io.github.turinggames/agenthotline

Agent Hotline MCP server — gives AI agents a place to report safety incidents they discover (hidden exploits, planted instructions, covert agent channels).

Version check not run yet

Monitoring and observability npm Local 10 a week MIT
@altirs/mcp-server io.github.altirs/mcp-server

MCP server for Altirs — AI guardrails (content safety, PII, prompt injection, hallucination) as tools for Claude Code, Claude Desktop, Cursor, and any MCP client

Version check not run yet

Model and agent tools npm Local 10 a week MIT
@breachr/mcp io.github.gjdbradford/breachr-mcp

Breachr CodeGuard — reviews the changes on your branch for security weaknesses, from inside your IDE.

Version check not run yet

Developer tools npm Local 10 a week SEE-LICENSE-IN
@mhdd_24/ai-red-team-mcp io.github.mhdd-24/ai-red-team-mcp

MCP server for Structured robustness/security testing

Version check not run yet

Developer tools npm Local 10 a week ISC
@microsoft/agentmesh-mcp-proxy io.github.microsoft/agent-governance-toolkit-mcp-proxy

Public Preview — Security proxy for MCP servers: The Firewall for Model Context Protocol

Version check not run yet

Model and agent tools npm Local 10 a week MIT
@nqatech/vibeaudit io.github.nguyenquocanhz/vibeaudit

VibeAudit Tool: Next-Gen OWASP Top 10 Security & Web Vibe/UX Quality Auditor (MCP Server & CLI)

Version check not run yet

Security npm Local 10 a week MIT
@paretools/security io.github.dave-london/pare-server-security

MCP server for security scanning — structured Trivy, Semgrep, and Gitleaks findings for AI agents

Version check not run yet

Security npm Local 10 a week MIT
@shnitzel/plugscout io.github.amitrintzler/plugscout

Claude plugins + Claude connectors + Copilot extensions + Skills + MCP security intelligence framework

Version check not run yet

Security npm Local 10 a week MIT
@th0t3p/m8m io.github.th0t3p/m8m

AI memory observability, provenance & security. Eight eyes. Nothing gets past.

Version check not run yet

Monitoring and observability npm Local 10 a week MIT
@wit-secops/knowbe4-mcp io.github.wit-secops/knowbe4-mcp

Read-only, multi-client MCP server for KnowBe4 security awareness training: partner-wide account and user risk figures, plus per-client phishing and training detail from the Reporting API.

Version check not run yet

Security npm Local 10 a week MIT
aegisq-codeshield-mcp io.github.jeffgrayson1969/aegisq-codeshield-mcp-server

AegisQ-CodeShield MCP server — AI security scanning for Claude Code, Cursor, Windsurf, Copilot, ChatGPT, Cline, and more

Version check not run yet

Security npm Local 10 a week MIT
agent-permission-guard io.github.iamjohn96/agent-permission-guard

Firewall and audit layer for AI agents.

Version check not run yet

Security npm Local 10 a week APACHE-2.0
agentmods-mcp io.github.iosdevsk/agentmods-mcp

MCP server for agentmods.dev — search 648k+ measured mods for coding agents (token cost, security scan, originality) from any MCP client.

Version check not run yet

Coding agent tools npm Local 10 a week MIT
aura-courier-mcp io.github.auraajenticai/aura-courier-mcp

Universal Bangladesh courier MCP server — Steadfast, Pathao, RedX & Paperfly with a built-in fraud-risk engine — for Claude, Antigravity, Cursor & n8n AI agents. Runs as a local npx (STDIO) server or

Version check not run yet

Security npm Local 10 a week MIT
locklink-mcp io.github.clgeoio/locklink-mcp-shim

MCP server for LockLink — create and request one-time secrets while keys stay client-side

Version check not run yet

Security npm Local 10 a week MIT
mcp-exploit-check io.github.squatguard/mcp-exploit-check

SquatGuard MCP Template for Python

Version check not run yet

Security npm · PyPI Local 10 a week BSD-3-CLAUSE
mcp-ink-design io.github.marwandevspace/mcp-ink-design

Model Context Protocol (MCP) server for high-craft web design, anti-AI-slop typography & OKLCH color palettes, Three.js 3D scenes, frontend security audits, and Python-backed verification.

Version check not run yet

Design and media npm Local 10 a week MIT
nfunc-mcp io.github.hiddensound/nfunc_mcp

MCP server for non-functional QA — Lighthouse, pa11y, ESLint and Semgrep in parallel with cross-tool correlation, plus PageSpeed Insights audits that compare lab scores against real-user Core Web Vita

Version check not run yet

Developer tools npm Local 10 a week ISC
oceanalt-mcp-pay io.github.oceanalt/oceanalt-mcp-pay

MCP tool that runs every agent payment through OceanAlt's hosted gateway before it settles: agent attribution (KYA), limits, payee allowlist, mandate match and AML screening, with a reason_code and pe

Version check not run yet

Security npm Local 10 a week MIT
saglitzsecure io.github.halidsaglam/saglitzsecure

Static security scanner that needs no parser: web/backend source and Apple platform configuration, as both a CLI and an MCP server.

Version check not run yet

Security npm Local 10 a week MIT
soc2-compliance-mcp io.github.crawde/soc2-compliance-mcp

MCP server for SOC 2 compliance — browse Trust Service Criteria, assess audit readiness, generate control narratives, evidence templates, and gap analysis for Type I and Type II audits

Version check not run yet

Legal and compliance npm Local 10 a week MIT