Security MCP servers

3,544 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

vault-properties-mcp io.github.nasuryavanshi/vault-mcp-server

MCP server for fetching and comparing HashiCorp Vault secrets across pods

Version check not run yet

Security npm Local 10 a week MIT
ironward io.github.rayentr/ironward

Security scanning for the vibe coding era. MCP server + CLI that finds secrets, auth bugs, SQL injection, XSS, IDOR, and vulnerable deps — and opens fix PRs. Works in Cursor, Claude Code, and VS Code.

Version check not run yet

Security npm Local 10 a week MIT
@mukundakatta/maskprompt-mcp io.github.mukundakatta/maskprompt-mcp

MCP server: redact PII (emails, phones, credit cards, SSNs, IPs, AWS keys, GitHub tokens, JWTs) from text before it leaves your control. Built for Claude Desktop, Cursor, Cline, Windsurf, and Zed.

Version check not run yet

Git and code hosting npm Local 2 a week MIT
@mukundakatta/pii-sentry-mcp io.github.mukundakatta/pii-sentry-mcp

MCP server exposing pii-sentry: detect and redact PII (emails, phones, SSNs, credit cards, API keys) from text before AI processing. Built for Claude Desktop, Cursor, Cline, Windsurf, and Zed.

Version check not run yet

Monitoring and observability npm Local 2 a week MIT
@mukundakatta/secretsniff-mcp io.github.mukundakatta/secretsniff-mcp

MCP server: scan text/code for accidentally-committed secrets — AWS/GitHub/Slack/Stripe keys, JWTs, RSA private keys, and high-entropy strings. Built for Claude Desktop, Cursor, Cline, Windsurf, and Z

Version check not run yet

Git and code hosting npm Local 2 a week MIT
argus-mcp-firewall io.github.alexar76/argus-87cabp

ARGUS-3 — MCP security firewall (WARDEN) + frugal personal AI agent. Wallet and on-chain economy are optional; crypto is OFF by default.

Version check not run yet

Finance and payments npm Local 2 a week MIT
abscore-mcp-gateway io.github.abs-core/abs-core-mcp-gateway-8jsbtj

Security Proxy for Model Context Protocol — Govern any MCP tool call with ABS Core NRaaS (Non-Repudiation as a Service)

Version check not run yet

Model and agent tools npm Local 12 a week MIT
bitwarden-mcp io.github.bitwarden/mcp-server-9076hh

Bitwarden MCP Server

Version check not run yet

Security npm Local 5 a week SEE-LICENSE-IN-LICENSE.TXT
mcp-transport-firewall io.github.shleder/mcp-transport-firewall

Fail-closed stdio firewall for risky local MCP JSON-RPC tool calls

Version check not run yet

Security npm Local 21 a week MIT
@maiife-ai-pub/mcp-audit io.github.sakthivelchan89/scan_your_ai_toolkit-mcp-audit

MCP server security scanner — score configurations on permissions, data sensitivity, blast radius

Version check not run yet

Security npm Local 15 a week APACHE-2.0
agentshield-mcp io.github.atmflow55/agentshield-mcp

AgentShield MCP server — real-time smart contract security for AI agents. Verify contracts for honeypots, rug pulls, and risks via x402 micropayments.

Version check not run yet

Security npm Local 16 a week MIT
@mtarikucar/claude-password-manager io.github.mtarikucar/claude-password-manager

A local, encrypted password-manager MCP server that lets Claude Code use your own credentials with per-access auditing. Works on Linux, macOS and Windows.

Version check not run yet

Operating system and shell npm Local 9 a week MIT
@rampa-solutions/cli io.github.spierinid/accesswatch-cli

The review before you launch: accessibility, security, privacy, legal and surprise-bill risks of a website, from your terminal or your AI editor (MCP).

Version check not run yet

Developer tools npm Local 9 a week MIT
@wit-secops/crowdstrike-mcp io.github.wit-secops/crowdstrike-mcp

MCP server for CrowdStrike Falcon built for Flight Control (MSSP) parents: every tool takes a tenant, and read tools can sweep all child tenants. Read-only by default.

Version check not run yet

Security npm Local 9 a week MIT
argus-ci io.github.venkatswaramoyya/argus-ci

6-pass security & quality agent — Opengrep + Bearer + quality linter + ESLint/tsc + dep audit + Sonar — MCP server for Cursor/Claude + pre-commit gate

Version check not run yet

Developer tools npm Local 9 a week MIT
cheapshot-mcp io.github.all-caps-dev/cheapshot-mcp

MCP server for cheapshot: on-device OCR for coding agents with secrets redacted first. Shells out to the cheapshot binary.

Version check not run yet

Coding agent tools npm Local 9 a week MIT
codex-security-cloud-mcp io.github.obinnanwachukwu1/codex-security-cloud-mcp

MCP server for the Codex Security Cloud service.

Version check not run yet

Security npm Local 9 a week MIT
ctscout-mcp-server io.github.minghsuy/ctscout-mcp

MCP server for ctscout.dev — domain attribution via Certificate Transparency + multi-signal Pro enrichment

Version check not run yet

Security npm Local 9 a week MIT
dynamic-db-mcp-server io.github.hand-by-hand/dynamic-db-mcp-server

Turn any relational database into a secure MCP server by configuration: API Key auth, table ACL, SQL AST validation, audit log and a web admin console.

Version check not run yet

Databases npm Local 9 a week MIT
mcp-rce-guard io.github.studiomeyer-io/mcp-rce-guard

v0.1 policy-synthesis (descriptor-only) for MCP-server RCE defense: landlock/sandbox-exec/cgroups-v2 profile builder + CVE-replay predicates + canary tracker + append-only NDJSON audit log. v0.2 adds

Version check not run yet

Security npm Local 9 a week MIT
pagefire-mcp io.github.bradyliuy/page-fire-mcp-client

stdio MCP connector for PageFire — bridges your MCP client to the hosted PageFire endpoint over Node's TLS stack, sidestepping client-runtime TLS quirks (e.g. Bun) and network fingerprint filtering.

Version check not run yet

Security npm Local 9 a week MIT
sentinelone-mcp io.github.jamescash1976/sentinelone-mcp

MCP server for the SentinelOne management API (read-only) — sites, agents, threats, activities and estate-wide health/threat reporting for MSPs

Version check not run yet

Security npm Local 9 a week MIT
@falconfeeds/mcp io.github.technisanct/falconfeeds-mcp

Official MCP server for FalconFeeds.io threat intelligence data

Version check not run yet

Security npm Local MIT
Benchline io.github.fabwaseem/benchline

Open-source developer, PDF, image, SEO and security tools over a stateless HTTP MCP server. No key.

0% up · 30 days

Security Official MCP Registry Remote
@gelenlen/playwright-mcp-server-security io.github.o0x1024/mcp-playwright-security

Model Context Protocol servers for Playwright

Version check not run yet

Browser automation npm Local MIT
mcp/ramparts io.github.getjavelin/ramparts

A comprehensive security scanner for MCP servers with YARA rules and static analysis capabilities.

Version check not run yet

Security Docker Hub · Docker MCP Catalog · Docker MCP Registry Local APACHE-2.0
@falzz1010/laravel-mcp-server io.github.falzz1010/laravel-mcp-server

Secure MCP Server for Laravel development — AI-powered artisan commands, log inspection, and code management with 10-layer security

Version check not run yet

Security npm Local 8 a week MIT
@opensploit/core io.github.silicon-works/opensploit-plugin

Autonomous penetration testing plugin for OpenCode

Version check not run yet

Security npm Local 8 a week MIT
@raviraj87/blackduck-mcp io.github.raviraj-ntp/blackduck-mcp

Local MCP server for Black Duck vulnerability, BOM, policy, and remediation workflows

Version check not run yet

Security npm Local 8 a week MIT
@teralynk/mcp-server io.github.teralynk/mcp-server

Teralynk MCP Server — 37 tools for AI-native file intelligence, PII scanning, compliance automation (HIPAA, GDPR, PCI-DSS, SOX, CCPA, FERPA, GLBA, COPPA), audit trails, and data subject rights

Version check not run yet

Legal and compliance npm Local 8 a week MIT
@thepedroofficial/mcp io.github.quickpr/pedro-mcp

MCP server for The Pedro — AI security scanner with auto-fix. Scan, find and fix vulnerabilities from Claude, Cursor, or any MCP-compatible AI.

Version check not run yet

Security npm Local 8 a week MIT
@tracepoint/mcp-doctor io.github.shinu-cherian/mcp-doctor

Security auditor for MCP servers. Finds tool descriptions carrying hidden instructions, annotations that contradict their own schema, over-shared credentials, and pairs of tools that together form a p

Version check not run yet

Security npm Local 8 a week MIT
@trevorbyrum/keymask io.github.trevorbyrum/keymask

Local MCP credential broker for coding agents (Claude Code, Codex, Gemini, and any other MCP-stdio client). Values never enter the AI transcript — the agent requests secrets through a schema, a localh

Version check not run yet

Coding agent tools npm Local 8 a week MIT-AND-OFL-1.1
certmate-mcp-server io.github.fabriziosalmi/certmate-mcp.md

Model Context Protocol server for CertMate: let an AI agent list, issue, renew, deploy and inspect TLS certificates through CertMate's API

Version check not run yet

DevOps and infrastructure npm Local 8 a week MIT
encrypted-vault-mcp io.github.khushalb25/encrypted-vault-mcp

MCP server providing a local-first encrypted key-value vault. AES-GCM 256-bit cipher, PBKDF2-derived key from a user PIN. Stores secrets, API keys, notes, or any string data on disk. Zero cloud, zero

Version check not run yet

Docs and knowledge bases npm Local 8 a week MIT
factory-ai io.github.itsvedantkumar/factory-ai

Deploy a private autonomous coding-agent factory on Azure: isolated builders, testers, security reviewers, durable orchestration, multi-model routing, memory, cost controls, and gated GitHub pull requ

Version check not run yet

Git and code hosting npm Local 8 a week MIT
handoffprobe io.github.heaviside479/handoffprobe

Adversarial security testing for AI agent handoffs

Version check not run yet

Developer tools npm Local 8 a week APACHE-2.0
mcp-perforce-server io.github.iprabhu/mcp-perforce-server

Enterprise-grade MCP (Model Context Protocol) server for Perforce P4 integration with AI assistants. Includes 59 MCP tools, native-style batch and flag support, rich review/search workflow helpers, an

Version check not run yet

Monitoring and observability npm Local 8 a week MIT
safe-audit-fix io.github.pasindudilshan1/safe-audit-fix

Safely fix npm audit vulnerabilities: one fix at a time, test after each, auto-revert anything that breaks. Usable as a CLI or as an MCP server for AI assistants.

Version check not run yet

Security npm Local 8 a week MIT
vikunja-mcp-ng io.github.netadvanced/vikunja-mcp-ng

Model Context Protocol server for Vikunja task management - direct-REST, composite-first tools, enterprise-grade security and reliability

Version check not run yet

Project management npm Local 8 a week MIT
secrets-detection-mcp io.github.deja666/secrets-detection-mcp

MCP server for detecting accidentally committed secrets, API keys, tokens, and credentials in your codebase

Version check not run yet

Security npm Local 14 a week MIT
@deepsweepai/mcp-firewall io.github.deepsweep-ai/mcp-firewall

Enterprise-grade MCP firewall for conscious AI stewardship - Zero-trust security layer for Model Context Protocol servers

Version check not run yet

Security npm Local MIT
meok-mcp-soc2 io.github.meok-ai-labs/mcp-soc2

MCP server for SOC 2 Type II trust services criteria

Version check not run yet

Security npm Local 9 a week MIT
adversary-mcp-server io.github.brettbergin/adversary-mcp-server

MCP server for security vulnerability scanning and detection

Version check not run yet

Security PyPI Local MIT
agentic-store-mcp io.github.agenticstore/agentic-store-mcp

Model Context Protocol (MCP) Server for AI Data Privacy: LLM prompt firewall, audit logs, and 74 MCP tools for Claude, Codex, Cursor, and Windsurf.

Version check not run yet

Security PyPI Local MIT
agent-policy-gateway-mcp io.github.aiagentkarl/agent-policy-gateway-mcp

Compliance & guardrails for AI agents — PII filtering, audit logging, GDPR/AI Act checks, kill switch

Version check not run yet

Security PyPI Local MIT
atomic-red-team-mcp io.github.cyberbuff/atomic-red-team-mcp

MCP server providing access to Atomic Red Team security tests with search, validation, and creation capabilities

Version check not run yet

Security PyPI Local MIT
attack-query-mcp io.github.swoodeng/attack-query

MCP server for ATT&CK queries via AI assistants

Version check not run yet

Security PyPI Local MIT