Security MCP servers

3,546 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

toolcenter-mcp io.github.toolcenter-dev/mcp

The Swiss-Army MCP server for web tools — one install, 15 LLM-ready tools: web search, scraping, screenshots, SEO/a11y audits, DNS/WHOIS/SSL, and more.

Version check not run yet

Web search and scraping npm Local 6 a week MIT
vaultmorph-guard io.github.nitinchauhan22/vaultmorph_ai_guard

MCP server that redacts secrets and PII from files before an AI coding agent (Claude Code, Cursor, Codex) ever reads them into its context — closing the agent-reads-file leak surface that chat-box pri

Version check not run yet

Security npm Local 6 a week SEE-LICENSE-IN
io.github.Nekzus/npm-sentinel-mcp io.github.nekzus/npm-sentinel-mcp-4zckkk

NPM Sentinel MCP - AI-powered NPM package analysis for security, dependencies, and performance.

Version check not run yet

Developer tools Official MCP Registry · npm Local 77 a week MIT
solanashield-mcp io.github.elromevedelelyon/solanashield-mcp

AI-powered smart contract security MCP server for Solana — x402 pay-per-audit, 12 tools, 40 vulnerability patterns

Version check not run yet

Security npm Local 12 a week MIT
@jrejaud/op-mcp io.github.jrejaud/op-mcp

Lightweight 1Password MCP server using op CLI. Zero idle CPU.

Version check not run yet

Security npm Local 23 a week MIT
rapid7-mcp io.github.solomonneas/rapid7-mcp

Model Context Protocol server for the Rapid7 InsightIDR SIEM platform

Version check not run yet

Security npm Local 6 a week MIT
@cybrium-ai/mcp-server io.github.cybrium-ai/mcp-server

MCP server for AI security + AI governance + AI inventory + code security. Lets Claude, Cursor, Windsurf, Cline invoke cyscan (SAST/SCA/secrets — 1,815 rules / 75+ languages), cyweb (web vulnerability

Version check not run yet

Security npm Local 5 a week APACHE-2.0
@devmind-ai/mcp-server io.github.devmind-ai/devmind-mcp-server

DevMind Model Context Protocol server — expose code review, security scan, knowledge base, and chat as MCP tools for Cursor / Claude Desktop / Continue / any MCP client

Version check not run yet

Developer tools npm Local 5 a week MIT
@inferlane/mcp io.github.inferlane/mcp

Local-first compute fuel gauge for Claude Code + 50 MCP tools for model selection, spend tracking, budget firewall, credibility, routing, and the compute exchange. Auto-ingests real usage from Claude

Version check not run yet

Security npm Local 5 a week APACHE-2.0
@jacobmolz/mcpguard io.github.jmolz/m0lz.03

Security proxy daemon for MCP servers — adds auth, rate limiting, PII detection, and audit logging

Version check not run yet

Security npm Local 5 a week MIT
@kynver-app/mcp-server io.github.totalsolutionsync/kynver-feedback-aq3han

MCP server for Kynver — verify AI agents, check trust scores, resolve DIDs, register agents, and complete ownership challenges or KYC directly from Cursor, Claude Desktop, or VS Code.

Version check not run yet

Developer tools npm Local 5 a week MIT
@nuggetslife/mcp-server io.github.nuggetsltd/langchain-nuggets-mcp-server

Nuggets identity verification MCP server — KYC, KYA, selective disclosure, and OAuth tools for any MCP client

Version check not run yet

Security npm Local 5 a week MIT
@seclayer/mcp io.github.cc4480/seclayer.io2026-mcp-server

Model Context Protocol stdio server for Seclayer — run live black-box security pen-tests from Claude Code, Cursor, Windsurf, or any MCP client via the seclayer_scan tool.

Version check not run yet

Security npm Local 5 a week MIT
@veriguard/mcp io.github.alekslinde/veriguard-mcp

MCP server for rule-based scam, phishing and impersonation checks. Scoring runs locally — the content you check is never sent anywhere.

Version check not run yet

Security npm Local 5 a week APACHE-2.0
@weave_protocol/hundredmen io.github.tyox-all/weave_protocol-hundredmen

Real-time MCP security proxy - intercepts, scans, and gates AI agent tool calls. Now with WARD.md policy enforcement.

Version check not run yet

Security npm Local 5 a week APACHE-2.0
@zincapp/znvault-mcp-server io.github.vidaldiego/zn-vault-mcp-server

MCP server for ZnVault secrets management - enables AI assistants to securely access secrets

Version check not run yet

Security npm Local 5 a week MIT
aegis-sb io.github.bkessing/aegis-sb

Supabase security guardian — audits a Supabase project for the security holes that ship by default when AI builds your app

Version check not run yet

Databases npm Local 5 a week MIT
agentguard-mcp-server io.github.sreejith1357/agentguard-mcp

Production-grade reliability and security control plane for AI agents.

Version check not run yet

Security npm · PyPI Local 5 a week ISC
ai-security-skill io.github.abhishekksoni/ai-security-skill

Open-source security control layer for AI coding agents.

Version check not run yet

Coding agent tools npm Local 5 a week APACHE-2.0
aliensec-mcp-server io.github.vrillabs/aliensec-mcp-server

AlienVault OTX Endpoint Security Scanning MCP Server with VirusTotal Integration

Version check not run yet

Security npm Local 5 a week MIT
dtrack-mcp io.github.msiemens/dtrack-mcp

Model Context Protocol server for OWASP Dependency-Track.

Version check not run yet

Developer tools npm Local 5 a week MIT
mcp-doorman io.github.sushank05/mcp-doorman

Security gateway for Model Context Protocol servers: policy enforcement, secret redaction, prompt-injection screening, tool rug-pull detection, rate limiting, human approval gates, and audit logging —

Version check not run yet

Model and agent tools npm Local 5 a week APACHE-2.0
mcp-pentest io.github.squatguard/mcp-pentest

SquatGuard MCP Template for Python

Version check not run yet

Security npm · PyPI Local 5 a week BSD-3-CLAUSE
mcp-policy-guard io.github.mughalhere/mcp-policy-guard

Policy and safety middleware for MCP servers — authorization, rate limits, confirmation gates, audit logging, and PII redaction.

Version check not run yet

Monitoring and observability npm Local 5 a week MIT
mcp-reverse io.github.chineseastar/mcp-reverse

Reverse transports for MCP (Model Context Protocol) — SSE engine. Allows internal MCP servers behind NAT/firewall to connect out to public MCP clients.

Version check not run yet

Security npm Local 5 a week MIT
misp-mcp io.github.lidless-labs/misp-mcp

MCP server for MISP threat intelligence platform - IOC lookups, event management, correlation discovery, and intelligence enrichment

Version check not run yet

Security npm Local 5 a week MIT
rubiscout-mcp io.github.raj-rubicon/rubiscout-mcp

MCP server for Rubiscout email analysis — analyze, retrieve, and list phishing/BEC forensic reports from Claude, Cursor, and other MCP-compatible agents

Version check not run yet

Security npm Local 5 a week MIT
site-doctor io.github.subhro-kar/site-doctor

Audit rendered websites for broken links, images, accessibility, SEO, security headers, and more. CLI + MCP server for AI agents.

Version check not run yet

Developer tools npm Local 5 a week MIT
vulcn io.github.vulcnize/vulcn

Security evals for the AI era. Probes · Targets · Graders · Proof. Confirmed XSS / SQLi / BOLA / prompt-injection / MCP-RCE with reproducible proof attached to every finding.

Version check not run yet

Model and agent tools npm Local 5 a week MIT
watchtower-mcp io.github.edentan26/watchtower

Cost tracking + deep security scanning (live RLS cross-tenant probe, leaked-key verification) for AI builders. MCP server for Claude Code.

Version check not run yet

Security npm Local 5 a week MIT
zeek-mcp io.github.lidless-labs/zeek-mcp

MCP server for Zeek network analysis framework - query and analyze Zeek logs via AI

Version check not run yet

Security npm Local 5 a week MIT
@bharathvaj/whois-mcp io.github.bharathvaj-ganesan/whois-mcp

MCP to lookup whois information

Version check not run yet

Security npm Local MIT
@domaindetails/mcp io.github.simplebytes-com/domaindetails-mcp

DomainDetails MCP Server - Complete domain research toolkit with RDAP, WHOIS, and comprehensive domain information lookup

Version check not run yet

Security npm Local MIT
troxy-cli com.npmjs/troxy-cli

A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI

Not run: needs install scripts

Security npm Local 2.6k a week SEE-LICENSE-IN
kolide-mcp-server io.github.coreweave-sandbox/kolide-mcp-server

Model Context Protocol server for Kolide security platform

Version check not run yet

Security npm Local 201 a week MIT
hotskills io.github.epiphytic/hotskills-server

MCP server for hotskills — pre-configured skill management for Claude Code with security gating

Version check not run yet

Security npm Local 5 a week MIT
@agentsid/scanner io.github.stevenkozeniesky02/agentsid-scanner-yswg21

Security scanner for MCP servers. Grades authentication, permissions, input validation, and tool safety. The Lighthouse of agent security.

Version check not run yet

Security npm Local 9 a week MIT
astra-os io.github.astraos-india/astra-os

AstraOS — The most complete AI agent operating system. Multi-LLM, MCP, A2A, GraphRAG, Computer Use, RBAC, Multi-Tenancy, Marketplace (55+ skills), Admin Dashboard, Workflow Builder, SSO (SAML+OIDC), A

Version check not run yet

Model and agent tools npm Local 19 a week MIT
axis-asv io.github.cooperdunkin/axis-asv

An agent secrets vault (ASV) for AI agents — credentials stay server-side, agents never see raw keys

Version check not run yet

Security npm Local 8 a week MIT
@acuityscan/mcp io.github.acuityscan/mcp

Model Context Protocol server for AcuityScan — run website security, accessibility, performance, and SEO scans from Claude Desktop, Cursor, and any other MCP-compatible AI client.

Version check not run yet

Developer tools npm Local 4 a week MIT
@codenotary/amon-mcp io.github.codenotary/agentmon-mcp

MCP server for AgentMon — query AI agent observability telemetry (cost, traces, security findings) from an AI agent.

Version check not run yet

Monitoring and observability npm Local 4 a week APACHE-2.0
@goldtopcollective/keiko-mcp io.github.goldtopcollective/keiko-mcp

Keiko MCP server — secure secrets manager for AI agents. Injects secrets as env vars without exposing values to AI models.

Version check not run yet

Security npm Local 4 a week MIT
@hari9885/mcpaudit io.github.hari9885/mcpaudit

Security, conformance, and quality auditor for MCP servers.

Version check not run yet

Security npm Local 4 a week MIT
@hexrailsec/mcp io.github.hexrailsec/hexrail-mcp

HexRail as a Model Context Protocol server — give your AI agent (Claude Desktop, Cursor, Cline) the ability to scan smart contracts and code, replay famous exploit patterns, and post onchain attestati

Version check not run yet

Finance and payments npm Local 4 a week MIT
@jbctechsolutions/mcp-mercury io.github.jbctechsolutions/mcp-mercury

Read-only MCP server for Mercury business banking — accounts, transactions, and statements. API token is resolved from 1Password at runtime and never logged.

Version check not run yet

Security npm Local 4 a week MIT
@konsulto/mcp io.github.konsulto/konsulto-mcp

Konsulto MCP server — drive the Konsulto cybersecurity audit platform from MCP-capable clients (Claude Code, etc.)

Version check not run yet

Security npm Local 4 a week MIT
@merge-risk/mcp io.github.cristianosousaa-dev/merge-risk-mcp

Scan a GitHub repo for leaked secrets and open databases, from inside your editor. Public repos are free and need no account.

Version check not run yet

Git and code hosting npm Local 4 a week MIT
@mseep/upgates-com-mcp io.github.lukasorcik/upgates-com-mcp

Model Context Protocol server for Upgates e-shop API v2 - AI asistent pro automatizaci e-shopu s GDPR anonymizací

Version check not run yet

Security npm Local 4 a week CC-BY-NC-4.0