Security MCP servers

3,377 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. CF Cordon for MCP io.github.marras0914/cordon

   Cordon for MCP. Security gateway with policy enforcement, audit log, and HITL approvals.

   Version check not run yet

   Security Official MCP Registry · npm Local 17 a week MIT

2. MC MCP Customs io.github.mcpcustoms/mcp-customs

   Inspect an MCP server for common security risks before you install it. Offline, zero telemetry.

   Version check not run yet

   Legal and compliance Official MCP Registry · npm Local 17 a week APACHE-2.0

3. NE Netexpert io.github.Omodaka9375/netexpert-mcp

   Cross-platform local-network diagnostics & security-posture MCP server — 31 tools.

   Version check not run yet

   Security Official MCP Registry · npm Local 829 a week MIT

4. P( Porkbun (official) com.porkbun/mcp

   Official Porkbun MCP server: domains, DNS, SSL, hosting and Cloudflare via the Porkbun API.

   100% up · 30 days

   Cloud platforms Official MCP Registry · npm Local Remote 809 a week MIT

5. A3 ARGUS-3 MCP Server io.github.alexar76/argus3

   ARGUS-3 stdio MCP with WARDEN firewall: argus_ask, argus_status, argus_capabilities.

   Version check not run yet

   Security Official MCP Registry · npm Local 219 a week MIT

6. 1P 1password io.github.CakeRepository/1password

   MCP server for 1Password service accounts — tools and resources for vaults and credentials

   Version check not run yet

   Security Official MCP Registry · npm Local 742 a week APACHE-2.0

7. NE Netintel io.github.kjgueye/netintel-mcp

   MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments

   Version check not run yet

   Security Official MCP Registry · npm Local 708 a week MIT

8. TU Tuteliq ai.tuteliq/mcp

   Detect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video.

   100% up · 30 days

   Design and media Official MCP Registry · npm Local Remote 696 a week MIT

9. SH Shodan io.github.w0h1v/shodan

   MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.

   Version check not run yet

   Security Official MCP Registry · npm Local 661 a week MIT

10. KM Kiprio MCP Server com.kiprio/kiprio-mcp

    23 API tools for Claude Code — email, DNS, SSL, NLP, scraping. Free tier included.

    Version check not run yet

    Web search and scraping Official MCP Registry · PyPI Local MIT

11. CA CallerKit com.caller-kit/callerkit-mcp

    Caller ID and phone lookup: names, spam reports, fraud risk score, name/email search.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 622 a week MIT

12. OM OPNsense MCP Server io.github.itunified-io/opnsense

    OPNsense MCP Server — 72 tools for DNS, Firewall, DHCP, ACME, Routing, VLANs & more

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · npm Local AGPL-3.0-ONLY

13. SP Security Proxy io.github.GuardBee/security-proxy

    MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

    Version check not run yet

    Security Official MCP Registry · npm Local 604 a week MIT

14. DO Doppler io.github.mrfentmen/doppler-mcp

    Doppler API: projects, configs, secrets listing and download. Needs service or personal token.

    Version check not run yet

    Security Official MCP Registry · npm Local 601 a week MIT

15. VI Virustotal io.github.w0h1v/virustotal

    MCP server for querying VirusTotal API with comprehensive security analysis tools.

    Version check not run yet

    Security Official MCP Registry · npm Local 596 a week MIT

16. DN Dnstwister io.github.mrfentmen/dnstwister-mcp

    DNS twister domain threat intelligence: fuzz domains for typosquatting, check whois.

    Version check not run yet

    Security Official MCP Registry · npm Local 585 a week MIT

17. SS Secret Scanner io.github.GuardBee/secret-scanner

    Scans files for leaked secrets and API keys

    Version check not run yet

    Files and storage Official MCP Registry · npm Local 555 a week MIT

18. PY Pymetasploit3 io.github.daedalus/mcp-pymetasploit3

    MCP server for Metasploit Framework via pymetasploit3

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

19. RN Recon Ng io.github.daedalus/mcp-recon-ng

    MCP server exposing full recon-ng OSINT framework functionality

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

20. QC Qc uk.quickcloud/qc-mcp

    QuickCloud hosting from your AI assistant: VMs, servers, DNS, firewalls and more. Read-only default.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · npm Local 532 a week MIT

21. BE BenchFleet io.github.jimbob1414/benchfleet

    Let AI agents use your real Android phones safely, with permissions, approvals and an audit log.

    Version check not run yet

    Security Official MCP Registry · npm Local 527 a week MIT

22. SH Shodan io.github.daedalus/mcp-shodan

    MCP server exposing all Shodan API functionality

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

23. JA Janee io.github.rsdouglas/janee

    Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials.

    Version check not run yet

    Security Official MCP Registry · npm Local 31 a week MIT

24. MM MCPAmpel - MCP Security Scanner io.github.diemoeve/mcpampel

    Scan installed MCP servers for security vulnerabilities with 16 detection engines.

    Version check not run yet

    Security Official MCP Registry · PyPI Local APACHE-2.0

25. MC mcpm io.github.getmcpm/cli

    MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.

    Version check not run yet

    Developer tools Official MCP Registry · npm Local 467 a week MIT

26. ZE ZeroDOM io.github.DevHusnainAi/zerodom

    The deterministic attack-surface perception layer for AI security agents

    Version check not run yet

    Security Official MCP Registry · npm Local 446 a week APACHE-2.0

27. PM pdfnative MCP — PDF/A & PDF/X-4 generation, PAdES signing & introspection io.github.Nizoka/pdfnative-mcp

    PDF MCP: generate PDF/A & PDF/X-4, sign & verify PAdES (LTV), forms, merge, split, encrypt. 28 tools

    Version check not run yet

    Office documents and spreadsheets Official MCP Registry · npm Local 121 a week MIT

28. OA Onepassword Agent io.github.gambadio/onepassword-agent-mcp

    Save and use 1Password secrets locally without exposing plaintext to AI agents.

    Version check not run yet

    Security Official MCP Registry · npm Local 423 a week MIT

29. 1V 1Claw Vault io.github.1clawAI/1claw-mcp

    HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

    Version check not run yet

    Security Official MCP Registry · npm Local 390 a week MIT

30. MC mcpwall io.github.behrensd/mcpwall

    iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.

    Version check not run yet

    Monitoring and observability Official MCP Registry · npm Local 35 a week APACHE-2.0

31. IH Impreza Host io.github.imprezahost/impreza-mcp

    No-KYC offshore hosting an AI agent runs end-to-end: no-email signup, crypto, VPS, deploy, Tor.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry · npm Local Remote 357 a week MIT

32. NE Network io.github.rog0x/network

    DNS, IP info, SSL, WHOIS, ping for AI agents

    Version check not run yet

    Security Official MCP Registry · npm Local MIT

33. NA NullClear Arbiter io.github.mithgalalfayez/nullclear

    Autonomous x402 payment schema-escrow arbiter, spend firewall, failover & ERC-8004 Sybil oracle

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 345 a week MIT

34. SP SPARDA io.github.zyx77550/sparda-mcp

    AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.

    Version check not run yet

    Security Official MCP Registry Local

35. AM Aml com.oceanalt/aml

    Pre-payment checks for AI agents: sanctions and AML screening of payees, payment pages and requests.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 314 a week MIT

36. AS Attack Surface io.github.cyanheads/attack-surface-mcp-server

    Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.

    Version check not run yet

    Security Official MCP Registry · npm Local Remote 308 a week APACHE-2.0

37. WH Whois io.github.cyanheads/whois-mcp-server

    Domain registry records and status, DNS records, and IP/ASN resolution over RDAP and DoH.

    Version check not run yet

    Security Official MCP Registry · npm Local Remote 306 a week APACHE-2.0

38. DG Db Gateway io.github.GuardBee/db-gateway

    KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

    Version check not run yet

    Security Official MCP Registry · npm Local 298 a week MIT

39. TR Threat Rules io.github.GuardBee/threat-rules

    GuardBee MCP bridge to Agent Threat Rules (ATR) for runtime agent/MCP threat detection

    Version check not run yet

    Security Official MCP Registry · npm Local 298 a week MIT

40. PR Privacyscrubber io.github.moxno/privacyscrubber-mcp

    Zero-Trust PII & secrets sanitizer for AI agents with in-memory local redaction.

    Version check not run yet

    Security Official MCP Registry · npm · PyPI Local 296 a week SEE-LICENSE-IN-LICENSE.MD

41. SL Secrets-LE io.github.nolindnaidoo/secrets-le

    Detect hardcoded secrets in source and config. Reports masked previews, never the values.

    Version check not run yet

    Security Official MCP Registry · npm Local 292 a week MIT

42. FE Feedmyagent io.github.makash/feedmyagent

    Agent-readable feed: AI/agent tech news, security advisories, compliance deadlines, and live events.

    100% up · 30 days

    Web search and scraping Official MCP Registry · npm Local Remote 271 a week MIT

43. KE Keyboardcrumbs com.keyboardcrumbs/mcp

    Live threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

44. DS Domain Security io.github.OrtaMarco/domain-security-mcp-server

    Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.

    Version check not run yet

    Security Official MCP Registry · npm Local 264 a week MIT

45. BD Black Duck Security Scanner com.blackduck/mcp-server

    AI-powered security scanning using Black Duck Signal for vulnerability detection.

    Version check not run yet

    Security Official MCP Registry · GitHub MCP Registry · npm Local 121 a week MIT

46. SE sealkeep io.github.munhq/sealkeep

    Let AI agents use secrets without seeing them: inject into a command, redact the output.

    Version check not run yet

    Security Official MCP Registry · npm Local 261 a week MIT

47. MA Mitre Attack io.github.imouiche/mitre-attack-mcp-server

    MCP server providing 50+ tools for MITRE ATT&CK techniques, groups, and mitigations

    Version check not run yet

    Security Official MCP Registry · npm Local APACHE-2.0

48. IT isMalicious threat intelligence for AI agents com.ismalicious/mcp-server

    Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 249 a week MIT