Security MCP servers

3,546 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

sonarqube-mcp-server io.github.your-username/sonarqube-mcp-server

MCP Server for SonarQube - allows AI assistants to query bugs, vulnerabilities, code smells, security hotspots and more

Version check not run yet

Developer tools PyPI Local MIT
spiderfoot-mcp io.github.marlinkcyber/spiderfoot-mcp

Model Context Protocol server for SpiderFoot OSINT automation

Version check not run yet

Security PyPI Local MIT
ssl-expiry-checker-mcp io.github.tojoevan/ssl-expiry-checker-mcp

MCP server for checking SSL certificate expiration dates

Version check not run yet

Security PyPI Local MIT
t212-mcp io.github.watsonam/t212-mcp-security.md

MCP server for the Trading 212 public API

Version check not run yet

Security PyPI Local MIT
threatray-mcp io.github.threatray/threatray-mcp

MCP server for the Threatray malware analysis and threat intelligence platform

Version check not run yet

Security PyPI Local MIT
velox-mcp-audit io.github.veloxlabsio/mcp-audit

Security scanner for Model Context Protocol (MCP) servers

Version check not run yet

Security PyPI Local MIT
vending-machine-mcp io.github.yokiidesu/vending-machine-mcp

13 specialist AI agents for your coding assistant — security audits, test generation, infrastructure, and more. MCP-native for Claude Code, Codex, and any MCP-compatible client.

Version check not run yet

DevOps and infrastructure PyPI Local APACHE-2.0
whiteintel-mcp io.github.helgayhub233/whiteintel-mcp

WhiteIntel MCP server for credential exposure, threat feed, watchlist, and supplier intelligence APIs

Version check not run yet

Security PyPI Local MIT
whois-mcp-server io.github.your-username/whois-mcp-server

A WHOIS MCP server for domain availability checking

Version check not run yet

Security PyPI Local MIT
wse-dev-mcp-client io.github.icebergdata-io/wse-dev-mcp-client

Local stdio↔HTTP MCP proxy that talks to Iceberg Data's wse-dev MCP Cloud Run deploy. Auto-refreshes Google identity tokens via gcloud for transparent Cloud Run IAM auth — zero manual token juggling.

Version check not run yet

Cloud platforms PyPI Local MIT
yt-dlp-mcp io.github.gavinhuang/yt-dlp-mcp

MCP server for YouTube video operations using yt-dlp

Version check not run yet

Security PyPI Local MIT
yugen-docmost-mcp io.github.yugenlabsti/shrd-docmost-mcp-changelog.md

Unofficial, security-first MCP server for self-hosted Docmost Community Edition.

Version check not run yet

Security PyPI Local APACHE-2.0
soliris-mcp io.github.soliris/soliris-mcp

Soliris — Solana MCP Server. 46 tools: rug-pull & scam detection (9+ on-chain signals, bundle/coordinated-launch analysis, holder concentration, Rugcheck score), Birdeye Data integration (trending tok

Version check not run yet

Finance and payments npm Local 9 a week MIT
@iflow-mcp/stacks-clarity-mcp io.github.iflow-mcp/stacks-clarity-mcp

MCP server for Stacks blockchain development with 32+ tools for Clarity smart contracts, SIP compliance, security, and performance optimization

Version check not run yet

Finance and payments npm Local APACHE-2.0
@hecate-mcp/sdk io.github.protyoya/hecate-mcp-sdk

Runtime guard for MCP clients: rug-pull pinning, least privilege, human approval, lethal-trifecta breaking, audit log

Version check not run yet

MCP development npm Local 7 a week APACHE-2.0
@mahastrategies/maha-mcp-bridge io.github.maha-strategies/maha-mcp-bridge

Zero-trust local MCP bridge for the Maha Provenance Standard API. Your data stays on your machine.

Version check not run yet

Security npm Local 7 a week MIT
@mhdd_24/api-security-mcp io.github.mhdd-24/api-security-mcp

Identify API security weaknesses

Version check not run yet

Security npm Local 7 a week ISC
apivalidator-mcp-server io.github.gustavofmgh/rapid-api-portfolio-mcp-server

APIValidator Model Context Protocol (MCP) server for local validation, OpenAPI security auditing, and premium global telephone/IBAN verification.

Version check not run yet

Developer tools npm Local 7 a week MIT
cve-mcp-server io.github.k4pxd/cve-mcp-server

MCP server for realtime CVE intelligence: NVD details, CVSS/CWE/CPE, CISA KEV, EPSS scores, GitHub Security Advisories, public proof-of-concept (PoC) discovery, and packaged exploit tooling (Metasploi

Version check not run yet

Security npm Local 7 a week MIT
dynamicfeed-mcp io.github.dynamicfeed/dynamicfeed-mcp

Local stdio MCP server for Dynamic Feed — live data AI models lack (prices, weather, CVEs & exploited vulns, internet outages, global disasters, satellites/space, world news + more). Bridges any MCP c

Version check not run yet

Security npm Local 7 a week MIT
fivem-mcp io.github.hamchowderr/fivem-kit-mcp

MCP server serving FiveM, ox (Overextended), ESX and QBCore documentation, security rules, and live server-stack detection to any MCP-capable AI editor.

Version check not run yet

Security npm Local 7 a week MIT
mcp-cpanel-api io.github.imtaqin/mcp-cpanel-api

MCP server for cPanel UAPI — manage email, domains, databases, files, Git, SSL, DNS, security via Claude

Version check not run yet

Security npm Local 7 a week MIT
mcp-secure-remote io.github.framedparadox/mcp-secure-remote

Remote proxy for Model Context Protocol servers with mTLS (mutual TLS) client certificate authentication support.

Version check not run yet

Security npm · PyPI Local 7 a week MIT
osv-ui-mcp io.github.toan203/osv-ui-mcp

MCP server for osv-ui — scan npm, Python, Go, Rust, Java, PHP, and Ruby projects for CVEs with a human-reviewed dashboard

Version check not run yet

Data warehouses and analytics npm Local 7 a week MIT
secura-scanner-ashley io.github.ashleyalmeida07/authtrack-major-project-cli-ea74a9

SecuraAI security scanner CLI and MCP server — static analysis, recon, header audit and injection testing via AI agents.

Version check not run yet

Developer tools npm Local 7 a week MIT
vibe-audit-security io.github.shadowwmaliqua/vibe-audit-security

Security scanner for vibe-coded projects: local CLI and MCP server that catch the security mistakes an AI coding assistant can silently introduce (hardcoded secrets, disabled RLS, open CORS, missing s

Version check not run yet

Security npm Local 7 a week MIT
yt-dlp-mcp-server io.github.antonio-orionus/yt-dlp-mcp-server

Production-grade MCP server that lets LLM agents inspect, plan, download, and postprocess media URLs with yt-dlp, including YouTube and youtu.be links. 28 typed tools, managed output roots, safe argv

Version check not run yet

Security npm Local 7 a week MIT
Prometiam Risk Intelligence com.prometiam/risk-mcp

Company data and KYB API for 35 countries: monitoring, financial statements, insolvency, sanctions

100% up · 30 days

Monitoring and observability Official MCP Registry Local Remote
depshield-mcp io.github.devanshkaria88/depshield-mcp

MCP server for real-time dependency security — checks packages against CVE databases before your AI coding agent installs them. Works with Cursor, Claude Code, Windsurf, and any MCP-compatible IDE.

Version check not run yet

Developer tools npm Local 15 a week MIT
Agentsafe io.github.andyscott88/agentsafe

Real-time URL trust scoring for AI agents. Blocks phishing and malicious sites.

Version check not run yet

Security Official MCP Registry · npm Local 16 a week
@mcborov01/phantomauth io.github.andriyshevchenko/phantomauth

MCP server that fills web forms with secrets from SecureVault — AI agents never see raw credentials

Version check not run yet

Security npm Local 16 a week MIT
p3x-network-mcp io.github.patrikx3/network-mcp

🔍 P3X Network MCP — Model Context Protocol server exposing 17 DNS, SSL, WHOIS, email deliverability, and security tools to any MCP client

Version check not run yet

Security npm Local 8 a week MIT
rasuvaeff/yii3-mcp-audit-log-bridge io.github.rasuvaeff/yii3-mcp-audit-log-bridge

AI audit trail for MCP servers: records every yii3-mcp tools/call into rasuvaeff/yii3-audit-log

Not checked yet

Security Packagist BSD-3-CLAUSE
mobile-security-mcp io.github.serhatcck/mobile-security-mcp

Mobile app security analysis MCP server for Android APK and iOS IPA files

Version check not run yet

Security npm Local 14 a week MIT
mcp-1password io.github.kefapps/onepassword-mcp-codex

Neutral MCP server for 1Password desktop app integrations with opaque-by-default secret handling.

Version check not run yet

Security npm Local 7 a week MIT
@borgresearch/odin-mcp io.github.borgdevelopment/borg-platform-odin-mcp

MCP server for the Odin security API

Version check not run yet

Security npm Local 6 a week MIT
@goscreenapi/mcp-server io.github.bymtnturk/goscreenapi-mcp

Model Context Protocol server for GoScreenAPI - capture screenshots, analyze tech stacks, check uptime, run security audits, and compare websites from any MCP-compatible AI assistant.

Version check not run yet

Browser automation npm Local 6 a week MIT
@kotauth/mcp io.github.inumansoul/kotauth-mcp

MCP server for managing KotAuth identity platform — users, roles, groups, applications, sessions, audit logs, user attributes, claim mappers, API keys, resource servers, webhooks, workspace config, pa

Version check not run yet

Monitoring and observability npm Local 6 a week MIT
aegisproxy io.github.philipkofod-commits/aegisproxy

Autonomous security layer for AI agents — Claude Desktop integration

Version check not run yet

Security npm Local 6 a week MIT
complianceiq-audit-mcp io.github.crawde/mcp-complianceiq-audit

MCP server for compliance audit report generation — create audit findings, evidence checklists, risk assessments, and remediation plans across SOC2, ISO 27001, HIPAA, GDPR, PCI-DSS frameworks

Version check not run yet

Security npm Local 6 a week MIT
complianceiq-iso-mcp io.github.crawde/iso27001-compliance-mcp

MCP server for ISO 27001 compliance — browse Annex A controls, assess ISMS readiness, generate Statement of Applicability, risk treatment plans, and gap analysis for information security certification

Version check not run yet

Security npm Local 6 a week MIT
electromcp com.gitlab.therealseandonahoe/electromcp

Drive any Electron app from your AI. MCP server with 93 tools, 4 recipe packages (Slack/Discord/Notion/Linear), security primitives, and a CLI mirror. The testing surface area Tauri structurally canno

Version check not run yet

Communication and chat npm Local 6 a week MIT
hecate-mcp io.github.protyoya/hecate-mcp-cli

Security scanner for MCP servers and the AI agents that use them: tool poisoning, rug pulls, the lethal trifecta, secrets, supply chain

Version check not run yet

Security npm Local 6 a week APACHE-2.0
mcp-sec-cli io.github.ido-abramovitz/mcp-sec

Canary-proof security checks for MCP servers -- verifies real behavior instead of pattern-matching code.

Version check not run yet

Security npm Local 6 a week APACHE-2.0
openmembrane io.github.mohamadalhusseinie/openmembrane-mcp-server

The intelligent membrane for AI memory — autonomously learns from your sessions, blocks secrets, and persists only what matters. No manual saving. Local-first, private, tool-agnostic.

Version check not run yet

Security npm Local 6 a week MIT
scopegate io.github.nexgensystemsmx/scopegate

Ephemeral credentials & persistent connections gateway for coding agents (Claude Code, Kimi Code, Cursor, OpenCode). The agent never holds secrets — it holds short-lived, minimum-scope capabilities.

Version check not run yet

Coding agent tools npm Local 6 a week APACHE-2.0
security-scanner-mcp io.github.ongjin/security-scanner-mcp

MCP server that scans AI-generated code for security vulnerabilities (OWASP Top 10, hardcoded secrets, SQL injection, XSS)

Version check not run yet

Security npm Local 6 a week MIT
suricata-mcp io.github.lidless-labs/suricata-mcp

MCP server for Suricata IDS/IPS EVE JSON log analysis and rule management

Version check not run yet

Security npm Local 6 a week MIT