Security MCP servers
3,542 servers
Scan code and dependencies, look up vulnerabilities and work with security tools.
- kontrol-freek-mcp
io.github.berkbayri/kontrol-freek-mcpAI assumption firewall for MCP agents — intercepts risky decisions, detects contradictions, and gates human approval via Telegram or Slack.
Version check not run yet
Communication and chat PyPI Local MIT
- launch-detector-mcp
io.github.alialtunar/launch-detector-mcpMCP server: spot unannounced products from new subdomains in certificate transparency logs (crt.sh). No API keys.
Version check not run yet
Monitoring and observability PyPI Local MIT
- marlow-mcp
io.github.jarb02/marlowAI that works beside you, not instead of you. Windows desktop automation MCP server with background mode, security-first design, and zero telemetry.
Version check not run yet
Operating system and shell PyPI Local MIT
- mcp-agent-guard
io.github.mmbinumer/agent-guard-security.mdRuntime security proxy for MCP agent tool calls
Version check not run yet
Security PyPI Local MIT
- mcpaisuite-evalmcp
io.github.gashel01/evalmcpEvaluation suite for MCP AI agents — golden datasets, LLM-as-judge, security benchmarks
Version check not run yet
Model and agent tools PyPI Local APACHE-2.0
- mcp-api-pentest
io.github.josenieto/mcp-api-pentestMCP server for autonomous API logic penetration testing — OWASP API Top 10 / BOLA-IDOR detection via LLM-driven analysis
Version check not run yet
Security PyPI Local MIT
- mcp-armor
io.github.aira-security/mcp-armorA comprehensive MCP configuration scanner with client-aware security analysis.
Version check not run yet
Security PyPI Local APACHE-2.0
- mcp-assure
io.github.stellarrequiem/mcp-assureOpen-source security CLI and runtime for MCP-style agent tool calls: deny-by-default policy, adaptive campaign watch, hash-chained receipts.
Version check not run yet
Security PyPI Local APACHE-2.0
- mcp-auditor
io.github.mkrtchian/mcp-auditorAgentic security testing for MCP servers
Version check not run yet
Developer tools PyPI Local MIT
- mcp-audit-scanner
io.github.adudley78/mcp-audit-changelog.mdPrivacy-first security scanner for MCP server configurations
Version check not run yet
Security PyPI Local APACHE-2.0
- mcp-bandit
io.github.giridharpandurangi/mcp-scanSecurity scanner for Model Context Protocol (MCP) servers
Version check not run yet
Security PyPI Local MIT
- mcp-behaviour-guard
io.github.hacker-vs-cracker/mcp-behaviour-guard-changelog.mdDeterministic security contracts and regression evidence for MCP servers used by AI agents
Version check not run yet
Security PyPI Local MIT
- mcp-doorman
io.github.shaxzodbek-uzb/mcp-doormanSecure-by-default FastAPI->MCP bridge. Deny-by-default exposure, scope->tool auth that fails closed (even on STDIO), built-in rate limiting, PII redaction at the source, and a structured audit log — i
Version check not run yet
Security PyPI Local MIT
- mcp-firewall
io.github.ressl/mcp-firewall-docsThe open-source security gateway for AI agents. Policy enforcement, threat detection, and compliance-ready audit logging for MCP.
Version check not run yet
Security PyPI Local AGPL-3.0-OR-LATER
- mcp-frisk
io.github.realgagenichols/friskVet a third-party MCP server before you trust it: sandboxed connect-and-enumerate plus deterministic security detectors.
Version check not run yet
Security PyPI Local MIT
- mcpfuzz
io.github.cyberneticsplus-services/mcpfuzzDynamic security scanner for MCP (Model Context Protocol) servers — actively probes live servers with exploit payloads
Version check not run yet
Security PyPI Local MIT
- mcp-fw
io.github.zyom45/mcp-fwMCP Firewall Proxy — policy-based tool access control using NAIL effects
Version check not run yet
Security PyPI Local MIT
- mcp-halflist
io.github.abhishekhsingh/mcp-halflistCI-first conformance, security, and benchmarking CLI for MCP servers. Lint your MCP server before your users do.
Version check not run yet
Developer tools PyPI Local MIT
- MCPiranha
io.github.ethanroubal/mcp-server-security-scanner-docsSecurity scanner for Model Context Protocol (MCP) servers
Version check not run yet
Security PyPI Local APACHE-2.0
- mcpkernel
io.github.piyushptiwari1/mcpkernel-changelog.mdOpen-source MCP/A2A security gateway — policy enforcement, taint tracking, sandboxed execution, deterministic envelopes, and Sigstore audit for every AI agent tool call. OWASP ASI 2026 compliant.
Version check not run yet
Security PyPI Local APACHE-2.0
- mcp-kitchen-sink
io.github.abidemialade/mylonite-mcp_kitchen_sinkDeliberately-vulnerable, fully mocked (network-less) reference MCP agent — the test target for the Mylonite AI-security scanner. NOT for production use.
Version check not run yet
Security PyPI Local APACHE-2.0
- mcp-mathematics
io.github.shsharkar/mcp-mathematicsProduction-ready MCP server built with FastMCP v2 for comprehensive mathematical operations, providing 52 advanced functions, 158 unit conversions, and enterprise-grade security
Version check not run yet
Science and research PyPI Local MIT
- mcp-mcts
io.github.mcp-audit/mcts-changelog.mdModel Context Threat Scanner — local MCP security scanning, attack chains, inventory, CI gates, and optional Semgrep/LLM analysis
Version check not run yet
Security PyPI Local APACHE-2.0
- mcp-neural-shield
io.github.vidiptvashist/mcp-neural-shieldA neural network-powered security middleware and reverse proxy for the Model Context Protocol (MCP). Detects tool poisoning, shadowing, and prompt injection attacks using deep learning classifiers tra
Version check not run yet
Search and retrieval (RAG) PyPI Local MIT
- mcp-nmap
io.github.zalaid/mcp-nmapMCP Server for Nmap scanning
Version check not run yet
Security PyPI Local MIT
- mcp-pii-guard-au
io.github.mattwagstaff/mcp-pii-guard-auMCP server for Australian PII detection and sanitisation — TFN, Medicare, ABN, ACN, BSB, bank account, drivers licence, passport, Centrelink CRN, and address recognisers with checksum validation, comp
Version check not run yet
Security PyPI Local MIT
- mcp-policy-gateway
io.github.spuddy10345/mcp-policy-gatewayAn authorising reverse proxy for MCP servers: capability-scoped tokens, per-tool and per-argument policy, rate limits, dry-run, and a tamper-evident audit log.
Version check not run yet
Security PyPI Local APACHE-2.0
- mcp-pypi
io.github.kimasplund/mcp-pypiMCP server for PyPI: search packages and audit dependency trees against OSV vulnerability data before an agent suggests them.
Version check not run yet
Developer tools PyPI Local MIT
- mcp-request
io.github.godzeo/mcp-requestA comprehensive HTTP client MCP server for security testing, API testing, and web automation
Version check not run yet
Developer tools PyPI Local MIT
- mcp-resk
io.github.your-username/mcp-reskRESK-MCP is an open-source Python library designed to add a robust security and management layer over the official MCP Library.
Version check not run yet
Security PyPI Local MIT
- mcp-safety
io.github.shuka0158/mcp-sentinelSecurity scanner for MCP servers — know what a server can do before you install it.
Version check not run yet
Security PyPI Local MIT
- mcpsec
io.github.manthanghasadiya/mcpsecSecurity scanner for MCP (Model Context Protocol) servers - pentest your AI agent's tool connections
Version check not run yet
Security PyPI Local MIT
- mcp-security-toolkit
io.github.x0base/mcp-security-toolkitAtomic MCP tools for AppSec and AI Security engineers
Version check not run yet
Security PyPI Local MIT
- mcp-server-nmap
io.github.daedalus/mcp-server-nmapMCP server for python-nmap network scanning
Version check not run yet
Security PyPI Local MIT
- mcp-server-zap
io.github.karacali/mcp-zap-changelog.mdMCP server that exposes OWASP ZAP as tools to Claude and other LLM clients
Version check not run yet
Security PyPI Local MIT
- mcpsharksec
io.github.mcp-shark/mcpsecThe security linter for MCP — scan any server for compliance with the MCP spec, OWASP MCP Top 10, and FastMCP baseline
Version check not run yet
Security PyPI Local MIT
- mcpshield-agent
io.github.runtimeadmin/mcpshieldMCPShield Agent - AI Agent Security Scanner for MCP servers
Version check not run yet
Security PyPI Local MIT
- mcp-shield-cli
io.github.thuggeelya/mcp-shieldSecurity scanner, runtime proxy, and audit logger for MCP servers
Version check not run yet
Security PyPI Local APACHE-2.0
- mcpsnare
io.github.den-sec/mcpsnare-changelog.mdActive security scanner that pentests MCP (Model Context Protocol) servers - triggers and out-of-band-confirms real vulnerabilities. Like Burp's Active Scan, but the target is an MCP server.
Version check not run yet
Security PyPI Local MIT
- mcp-sql-analyst
io.github.tanzil-ali-rizvi/mcp-sql-analystA secure, read-only SQL MCP server that lets AI assistants analyse CSV, Parquet and JSON files: SQL guard, sandboxed DuckDB, PII masking and an audit log.
Version check not run yet
Databases PyPI Local MIT
- mcp-tollbooth
io.github.realgagenichols/tollboothA security gateway for AI agents: a transparent MCP proxy that enforces policy, DLP, and audit on every tool call and result.
Version check not run yet
Security PyPI Local MIT
- mcp-toolguard
io.github.toolguard-io/toolguardContracts, drift detection and security checks for MCP servers — in CI and in production.
Version check not run yet
DevOps and infrastructure PyPI Local MIT
- mcp-trove
io.github.mauriziomocci/mcp-troveMCP server for a git-backed vault of plaintext snippets and encrypted secrets, with i18n support
Version check not run yet
Git and code hosting PyPI Local MIT
- mcp-vertica
io.github.nolleh/mcp-verticaA Model Context Protocol (MCP) server for Vertica database with connection pooling, schema management, and security features
Version check not run yet
Databases PyPI Local MIT
- mcpwn
io.github.ressl/mcpwnSecurity scanner for MCP (Model Context Protocol) servers
Version check not run yet
Security PyPI Local AGPL-3.0-OR-LATER
- mcpyghidra
io.github.nightwing-us/mcpyghidraGhidra MCP server.
Version check not run yet
Security PyPI Local APACHE-2.0
- mcpyida
io.github.nightwing-us/mcpyidaMCP server that exposes IDA Pro reverse-engineering capabilities to LLM clients.
Version check not run yet
Security PyPI Local APACHE-2.0
- mcp-zero-trust-layer
io.github.686f6c61/mcp-zero-trust-layer-docsOpen-source, self-hosted Zero Trust policy enforcement layer for MCP servers.
Version check not run yet
Security PyPI Local APACHE-2.0