Security MCP servers

3,547 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

@mseep/urlcheck-openclaw io.github.cybrlab-ai/urlcheck-openclaw

URLCheck plugin for OpenClaw. Assess target URLs for potential threats and alignment with the user's browsing intent before agent navigation.

Version check not run yet

Security npm Local 4 a week APACHE-2.0
@perufitlife/appwrite-security-mcp io.github.perufitlife/appwrite-security-mcp

MCP server for Appwrite security: audit collection/document permissions, preview fixes. Active probe confirms leaks live.

Version check not run yet

Security npm Local 4 a week MIT
@perufitlife/supabase-security-mcp io.github.perufitlife/supabase-security-mcp

MCP server for Supabase security: audit (with active anon-key probe that proves leaks live), dry-run fixes, and apply remediations with rollback. The only auditor that closes the loop in your AI agent

Version check not run yet

Databases npm Local 4 a week MIT
@rexlmanu/bugsink-mcp io.github.rexlmanu/bugsink-mcp

Local MCP server for Bugsink issues and Laravel error details with bounded pagination and project access controls

Version check not run yet

Security npm Local 4 a week MIT
@rtwsvj/skill-switch io.github.rtwsvj/skill-switch

Security audit for AI agent skills & MCP configs (reverse shells, exfiltration, dangerous MCP servers, hardcoded secrets) → SARIF/code-scanning; plus cross-agent skill governance for Claude Code, Curs

Version check not run yet

Security npm Local 4 a week MIT
@samirthakur024/mcp io.github.wabmetacontact-svg/devmemory-mcp

The DevMemory MCP tool surface: project, context, memory, task, code, git and security tools.

Version check not run yet

Git and code hosting npm Local 4 a week MIT
@spacetime-os/mcp-server io.github.spacetime-industries/spacetime-frontend

Sentinel OS MCP Server — 27 AI agent tools for critical infrastructure security intelligence. Real-time maritime threat detection, vessel tracking, cable risk scoring, dark vessel identification, dron

Version check not run yet

Security npm Local 4 a week MIT
@yagyeshvyas/vibeguard io.github.yagyeshvyas/vibeguard

Security scanner + AI agent firewall. Blocks secret/PII exfiltration in real time. 752 rules, 82 MCP tools (agent-scan, mcp-audit, guard-action, generate-sbom, dep-reachability, license-compliance), A

Version check not run yet

Security npm Local 4 a week MIT
airlock-cli io.github.cjaston/airlock

A firewall between AI coding agents and dangerous actions. Blocks hallucinated packages, leaked secrets, destructive commands, and test-subversion.

Version check not run yet

Coding agent tools npm Local 4 a week MIT
aveva-pisystem-mcp-server io.github.digital-enginks/aveva-pisystem-mcp-server

Stateless, zero-trust MCP server for AVEVA PI System Web API

Version check not run yet

Security npm Local 4 a week APACHE-2.0
bit-security-mcp io.github.businessitecuador/bit-mcp-claude-code-security

BIT Security Review — MCP server for devs + CLI for CI/CD pipelines. Activates 7 specialized agents (SECRETS, AUTH, DATA, INPUT, DEPS, INCIDENTS, AGENTIC) mapped to OWASP A1–A10, OWASP Agentic AI T1–T

Version check not run yet

Security npm Local 4 a week MIT
complianceiq-controls-mcp io.github.crawde/complianceiq-controls-mcp

MCP server for compliance control mapping — browse SOC2, ISO 27001, HIPAA, GDPR, PCI-DSS controls, map between frameworks, get implementation guidance, and track control status

Version check not run yet

Security npm Local 4 a week MIT
complianceiq-gap-analysis-mcp io.github.crawde/mcp-complianceiq-gap-analysis

MCP server for compliance gap analysis — assess organizational readiness against SOC2, ISO 27001, HIPAA, GDPR, and PCI-DSS frameworks. Identify control gaps, calculate maturity scores, and generate re

Version check not run yet

Security npm Local 4 a week MIT
critic-mcp io.github.layermedya/critic-mcp

A Model Context Protocol (MCP) server providing automated, read-only code review and vulnerability analysis using LLMs.

Version check not run yet

Developer tools npm Local 4 a week MIT
domainlooker io.github.arorashreshth/domainlooker

A fast CLI and MCP server for inspecting domains: WHOIS/RDAP, DNS, SSL, ports, subdomains, with CSV/JSON export.

Version check not run yet

Security npm Local 4 a week MIT
gdpr-compliance-mcp io.github.crawde/gdpr-compliance-mcp

MCP server for GDPR compliance — browse regulation articles, assess readiness, generate DPIA templates, data processing records, privacy notices, and gap analysis for EU data protection

Version check not run yet

Legal and compliance npm Local 4 a week MIT
ghost-specter io.github.ghost-protocol-lk/specter

Autonomous AI agent runtime — 19 skill packs, ecosystem integration (Wyrm + DragonKeep + PhantomDragon), NL rituals, workspaces, web dashboard, Telegram, security-first

Version check not run yet

Data warehouses and analytics npm Local 4 a week MIT
hyperdope io.github.howtopwn/hyperdope

MCP server for adversarial security research — 6-phase pipeline from profile to disclosure

Version check not run yet

DevOps and infrastructure npm Local 4 a week MIT
preflight-pro io.github.av29nassh-sketch/preflight-8p4tfs

The local security gate for AI-generated code.

Version check not run yet

Security npm Local 4 a week BUSL-1.1
pup-appsec io.github.shadowexia1/pup

Pup — AI-native, evidence-based AppSec: contextual SAST, reachability SCA, threat modelling, and secrets for JavaScript/TypeScript, Python, Java/Kotlin, Go, Ruby, PHP, and C#.

Version check not run yet

Security npm Local 4 a week SEE-LICENSE-IN
starkgate-mcp-server io.github.wenjoseph16/starkgate-starkgate-mcp-server

MCP server that routes agent tool calls through StarkGate's universal firewall — fail-closed evaluation with offline-verifiable proofs.

Version check not run yet

Security npm Local 4 a week MIT
taintmcp io.github.khs28/taintmcp-gateway

A runtime, client-side security gateway for the Model Context Protocol (MCP). Blocks indirect prompt injection, tool poisoning, rug-pulls, and tool shadowing.

Version check not run yet

Security npm Local 4 a week MIT
veilguard io.github.elmimoha15/veilguard

MCP security scanner for AI-assisted development. Catches vulnerabilities in AI-generated code.

Version check not run yet

Security npm Local 4 a week MIT
vetmcp io.github.chri2k02/vetmcp

Security scanner for MCP servers — npm audit for the Model Context Protocol

Version check not run yet

Security npm Local 4 a week MIT
agentmask io.github.adithyan-ak/agentmask

Secrets never enter context. AI never misses a beat.

Version check not run yet

Security npm Local 8 a week MIT
mcp-services io.github.san-npm/mcp-services

Multi-tool MCP server + REST API for AI agents. 29 tools: web scraping, SEO toolkit, agent memory, screenshot, PDF, PDF-to-DOCX, WHOIS, DNS, SSL, OCR, HTML-to-Markdown, multi-chain blockchain data, an

Version check not run yet

Office documents and spreadsheets npm Local 16 a week MIT
vape-mcp-server io.github.juxtaposition1/v.a.p.e-mcp_server.md

V.A.P.E. (Virtual Ape Private Eye) — an autonomous on-chain security detective for Base, exposed over the standard Model Context Protocol (MCP).

Version check not run yet

Security Official MCP Registry · PyPI Local MIT
@bithyte/mcp-firewall-console io.github.bithyte/mcp-firewall-console

MCP Firewall admin console and per-machine host service

Version check not run yet

Security npm Local APACHE-2.0
@bithyte/mcp-firewall-core io.github.bithyte/mcp-firewall-core

MCP Firewall policy daemon

Version check not run yet

Security npm Local APACHE-2.0
@celo/buy-mcp com.npmjs.celo/buy-mcp

buy MCP server — exposes x402+KYC-aware payment tools to AI agents (Claude Code, Codex, etc.)

Version check not run yet

Security npm Local APACHE-2.0
@crowdstrike/aidr-mcp-proxy io.github.crowdstrike/aidr-mcp-proxy

Protect any MCP server from malicious entities and confidential PII.

Version check not run yet

Model and agent tools npm Local MIT
@crowdstrike/aidr-mcp-server io.github.crowdstrike/aidr-mcp-server

A Model Context Protocol (MCP) server that provides integration with CrowdStrike AIDR APIs

Version check not run yet

Security npm Local MIT
@cylixlee/ghidra-mcp io.github.cylixlee/ghidra-mcp

Simple TypeScript implementation of Ghidra MCP

Version check not run yet

Security npm Local MIT
@metacomp/visionx-kyt-mcp io.github.metacomp-ai/remote-mcp

Web3 wallet & transaction security MCP server powered by MetaComp VisionX

Version check not run yet

Finance and payments npm Local 9 a week MIT
agentvault-score io.github.hiroshic9-png/agentvault-81tzps

Automated quality & security scoring for MCP servers — trust scores for the AI agent ecosystem

Version check not run yet

Security npm Local 4 a week MIT
vaulter io.github.forattini-dev/vaulter

Multi-backend environment variable and secrets manager with AES-256-GCM encryption

Version check not run yet

Security npm Local 9 a week MIT
LeakGuard co.youraitools/leakguard

Find and redact leaked secrets, wallet keys and PII before an AI agent sends text.

100% up · 30 days

Security Official MCP Registry · npm Local Remote MIT
PkgGuard co.youraitools/pkgguard

Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker

100% up · 30 days

Developer tools Official MCP Registry · npm Local Remote MIT
Veridion Nexus io.github.Brano80/Veridion-nexus

Veridion Nexus MCP server - GDPR Art. 44-49 runtime compliance for AI agents

Version check not run yet

Security Official MCP Registry · npm Local 15 a week
mcp-diagnostics io.github.kame6493-del/mcp-diagnostics

Website & Server Diagnostics MCP Server. DNS, SSL, HTTP headers, security scan, performance audit.

Version check not run yet

Security npm Local 8 a week MIT
domain-intel io.github.jason-shprintz/mcp-services-domain-intel

MCP server for domain intelligence — DNS records, WHOIS lookups, SSL certificate checks, and domain availability

Version check not run yet

Security npm Local 5 a week ISC
hotwash-mcp io.github.solomonneas/hotwash-mcp

MCP server for Hotwash - drive incident response playbooks (start runs, advance steps, attach evidence) and review the Wazuh ingest suggestion queue from any MCP-capable LLM

Version check not run yet

Monitoring and observability npm Local 4 a week MIT
@nohacklabs/mcp-server io.github.nohacklabs/mcp-server

MCP server for NoHack security scanning API - query vulnerabilities, secrets, scans, and repo configs

Version check not run yet

Security npm Local 32 a week MIT
firmis-cli io.github.firmislabs/firmis-scanner-04gyt4

The security layer for AI agents — platform-agnostic threat detection with 300+ rules, runtime blocking, and remediation guidance. Continuous protection.

Version check not run yet

Security npm Local 7 a week SEE-LICENSE-IN
web-intel-mcp io.github.tedysek01/web-intel-mcp

MCP server for web intelligence — DNS, SSL, tech stack, metadata, link safety. One tool to investigate any website. No API keys needed.

Version check not run yet

DevOps and infrastructure npm Local 6 a week MIT
@iflow-mcp/sgroy10-speclock io.github.sgroy10/speclock-ef1r3m

AI Constraint Engine by Sandeep Roy — AI Patch Firewall. Diff-native review (interface breaks, protected symbols, dependency drift, schema changes, API impact), Patch Gateway (ALLOW/WARN/BLOCK verdict

Version check not run yet

Developer tools npm Local 3 a week MIT
@vpursuit/swipl-mcp-server io.github.vpursuit/swipl-mcp-server

SWI-Prolog MCP Server with dual query modes and security layer

Version check not run yet

Security npm Local BSD-3-CLAUSE
secret-scanner-mcp io.github.baneado98/secret-scanner

Scan a blob of code/text/diff for LEAKED SECRETS before you commit or share — API keys (AWS, GitHub, OpenAI, Stripe, Google, Slack…), tokens, private keys (RSA/EC/SSH/PGP), DB connection strings, .env

Version check not run yet

Git and code hosting Official MCP Registry · npm Local 3 a week MIT