Security MCP servers

3,547 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

@agentiam-dev/core io.github.lucasnarlochz/agent-iam

Capability-based policy enforcement for agent CLI actions

Version check not run yet

Security npm Local 3 a week MIT
@aigently/mcp-server io.github.aelbuni/aigently-catalog-mcp-server

MCP server for aigently security guardrails — reads static catalog-data JSON, zero API dependency

Version check not run yet

Developer tools npm Local 3 a week APACHE-2.0
@asterworks/aster-guard io.github.aster-works/aster-guard

A lightweight MCP security guard for Claude Code users and indie AI builders. Claude Codeユーザーのための、接続前MCPセキュリティ診断ツール。

Version check not run yet

Security npm Local 3 a week MIT
@bitofacoder/mcpaudit io.github.bitofacoder/mcpaudit

Security scanner for your installed MCP servers. Finds shell-exec tools, plaintext secrets, and unpinned supply chains across Claude Desktop, Claude Code, Cursor, and Windsurf configs.

Version check not run yet

Security npm Local 3 a week MIT
@bloxtools/mcp-server io.github.bloxtoolsio/bloxtools-mcp

BloxTools MCP server — a local stdio server that makes an agent a first-class BloxTools client (orient, drill, decrypt source, triage).

Version check not run yet

Security npm Local 3 a week MIT
@buildbench/mcp-security-scanner io.github.buildbench/mcp-security-scanner

Static security scanner for Model Context Protocol (MCP) servers. Detects tool-description poisoning, exfiltration cues, hidden-unicode payloads, arbitrary command execution, SSRF surface, hardcoded s

Version check not run yet

Security npm Local 3 a week MIT
@grovetech/vibe-mcp io.github.grovetechai/vibechek-vibe-mcp

MCP server for Grovetech Vibe Code Health Scanner — scan security, performance, GDPR and SEO from Cursor, Claude Code, Windsurf, Codex and Replit AI.

Version check not run yet

Security npm Local 3 a week MIT
@perufitlife/nhost-security-mcp io.github.perufitlife/nhost-security-mcp

MCP server for Nhost security: audit collection/document permissions, preview fixes. Active probe confirms leaks live.

Version check not run yet

Security npm Local 3 a week MIT
@perufitlife/pocketbase-security-mcp io.github.perufitlife/pocketbase-security-mcp

MCP server for PocketBase security: audit collections for permissive API rules, preview fixes, and apply rule updates from your AI coding agent.

Version check not run yet

Security npm Local 3 a week MIT
@poteshniy/agenttrust-mcp io.github.poteshniy/agenttrust

AgentTrust MCP Server — security scanner for AI agent skills and MCP servers

Version check not run yet

Security npm Local 3 a week MIT
@repsorp39/dlp io.github.repsorp39/database-lookup-protocol

Agent-friendly database introspection protocol for Claude Code, Cursor, Copilot

Version check not run yet

Databases npm Local 3 a week MIT
@smorchestraai-code/contabo-mcp io.github.smorchestra-ai/contabo-mcp

MCP server for Contabo VPS/VDS lifecycle management. 57 tools across instances, DNS, snapshots, tags, networks, secrets, users, domains, images, PTR records — give Claude full operational control with

Version check not run yet

DevOps and infrastructure npm Local 3 a week MIT
@sonnylabs/mcp io.github.sonnylabs/sonnylabs-mcp

Model Context Protocol server for the Sonny Labs AI firewall. Run it inside your agentic client (Claude Desktop, Cursor, Claude Code) to scan prompts and outputs for injection / PII / toxicity, manage

Version check not run yet

Developer tools npm Local 3 a week APACHE-2.0
@starter-series/create io.github.starter-series/create-starter-1v1fqh

Scaffold and audit Starter Series projects — slash commands, skill, MCP server, and CLI with release / CD / security audit primitives.

Version check not run yet

Developer tools npm Local 3 a week MIT
@swarm-api/mcp io.github.swarm-api-dev/swarm-api-mcp

MCP server for SwarmApi: 9 pay-per-call tools for SEC filings, company news, insider transactions, jobs, web search, GitHub repos, and npm/PyPI/cargo package security. Payments settled per request in

Version check not run yet

Git and code hosting npm Local 3 a week MIT
@traceexit/mcp io.github.pho3nix90/traceexit-mcp

Trace Exit MCP server — IP lookup, privacy, fraud, and network compare tools over the REST API

Version check not run yet

Security npm Local 3 a week MIT
@weave_protocol/tollere io.github.tyox-all/weave_protocol-tollere

Supply chain security for AI-generated code - scans packages, Docker images, and IDE extensions (VS Code, Cursor, JetBrains) before install for typosquats, CVEs, sandwich-pattern attacks, and Docker t

Version check not run yet

Developer tools npm Local 3 a week APACHE-2.0
canopii io.github.canopii-dev/canopii-cli

MCP server security scanner — the open-source engine behind the Canopii Trust Index

Version check not run yet

Security npm Local 3 a week APACHE-2.0
dep-collide io.github.mdrayaanpasha/cli-pes-collide

Multi-ecosystem dependency-collision & vulnerability scanner (npm, Go, Python, Rust, PHP) — CLI + MCP server.

Version check not run yet

Developer tools npm Local 3 a week MIT
devdrops-mcp io.github.rodriguez-diego-web/devdrops-mcp

MCP server for devdrops — gives AI agents zero-knowledge access to a project's secrets, commands and setup notes.

Version check not run yet

Docs and knowledge bases npm Local 3 a week MIT
fivosense-mcp io.github.thevinsoni/sense-mcp

MCP server for FivoSense security scanner

Version check not run yet

Security npm Local 3 a week MIT
mcp-server-moyan io.github.sixu-ai/mcp-server-moyan

MCP server exposing Moyan security audit tools to Claude Desktop, Cursor, Codex

Version check not run yet

Security npm Local 3 a week MIT
mykeep-mcp io.github.domuvn/mykeep-mcp

Optional MCP server for mykeep: exposes the memory + vault REST endpoints as MCP tools. Holds no secrets — every tool is a 1:1 passthrough to the gateway with the user's token.

Version check not run yet

Security npm Local 3 a week MIT
ohmypolicy-mcp io.github.silvernine/ohmypolicy-mcp

Model Context Protocol server for OhMyPolicy — scan Supabase Row Level Security from Claude Desktop, Cursor, and other MCP clients.

Version check not run yet

Databases npm Local 3 a week MIT
pgguard-mcp io.github.azzaraell/pgguard-mcp

Read-only MCP server for Postgres. A deny-by-default policy file decides which tables and columns an AI agent can see; every query runs inside a BEGIN READ ONLY transaction with a statement timeout, a

Version check not run yet

Databases npm Local 3 a week MIT
pleamo-mcp io.github.pleamo/pleamo-mcp

pleamo MCP server — expose AI scam/phishing URL checks as tools for any MCP client (Claude Desktop, Cursor, agents).

Version check not run yet

Security npm Local 3 a week MIT
posturecheck-mcp io.github.mvg777/posturecheck-mcp

MCP server for domain security checks — SPF, DKIM, DMARC, MTA-STS, TLS certificates and protocol support, and HTTP security headers.

Version check not run yet

Security npm Local 3 a week MIT
publicsofttools-mcp io.github.drejazahmed/publicsofttools-mcp

MCP server for PublicSoftTools — QR codes, PDF tools, DNS, SSL, IP lookup, hashing and more

Version check not run yet

Utilities npm Local 3 a week MIT
rikune io.github.last-emo-boy/rikune-a7vav0

MCP server for Windows binary reverse engineering, PE triage, Ghidra-assisted analysis, and reconstruction workflows.

Version check not run yet

Security npm Local 3 a week MIT
scout-ai io.github.maxchu0523/scout

Scout — a live scanner for connectable MCP servers and local AI APIs (LM Studio, Ollama). Discovers, verifies, and invokes them; like nmap for MCP.

Version check not run yet

Model and agent tools npm Local 3 a week MIT
solvr-mcp io.github.basedcryptoji/solvr-solvr-mcp

Solvr Intel as an MCP server — on-chain + security + DEX + TA + news for any MCP-compatible agent (Claude Code, Cursor, Cline, Zed, Continue, Odysseus).

Version check not run yet

Finance and payments npm Local 3 a week MIT
spacetime-os-mcp io.github.ainative-studio/spacetime-os

Sentinel OS MCP Server — 27 tools for critical infrastructure security intelligence. Maritime threat detection, cable risk scoring, drone dispatch, AI agent orchestration.

Version check not run yet

Security npm Local 3 a week MIT
vendorshield-risk-scoring-mcp io.github.crawde/vendorshield-risk-scoring-mcp

MCP server for third-party vendor risk assessment — score vendors across financial, operational, cybersecurity, compliance, and concentration dimensions with automated risk tiering and mitigation reco

Version check not run yet

Security npm Local 3 a week MIT
vibesafe-mcp io.github.sabahatghauri/vibesafe-mcp

VibeSafe security scanner as an MCP server — scan code, live URLs, and run a Launch Check on your app from any MCP client (Claude, Cursor, etc.).

Version check not run yet

Security npm Local 3 a week MIT
@amar_528/mcp-bridge io.github.hivemind/mcp-bridge

Sovereign EU MCP Bridge - Connect Claude Desktop/Cursor to HIVE-MIND hosted MCP service with GDPR-compliant data residency

Version check not run yet

Security npm Local 9 a week MIT
Norolu Frameworks io.github.noroshi-create/norolu-frameworks

Fill 3C / SWOT / MECE / OKR into your local file. Local-first, zero-trust strategy cockpit.

Version check not run yet

Files and storage Official MCP Registry · npm Local 17 a week MIT
companylens-mcp io.github.diplv/companylens-mcp

MCP server for CompanyLens — corporate intelligence API for AI agents. Search companies, get profiles, screen sanctions, and check government contracts.

Version check not run yet

Security npm Local 8 a week MIT
@tocharianou/mcp-virustotal io.github.tocharianou/mcp-virustotal

VirusTotal MCP Server – security analysis for URLs, files, IPs and domains

Version check not run yet

Security npm Local 14 a week MIT
oathe-mcp io.github.oathe-ai/oathe-mcp

MCP server for Oathe AI security audits — check trust scores before installing MCP servers, plugins, or AI agent skills

Version check not run yet

Security npm Local 15 a week MIT
review-ready-mcp io.github.yurukusa/review-ready-mcp

MCP server for Review Ready — run pre-PR checks (debug statements, secrets, TODO debt, complexity) from Claude

Version check not run yet

Developer tools npm Local 3 a week MIT
systemprompt io.github.systempromptio/systemprompt-core

Self-hosted AI governance infrastructure. The Rust library behind systemprompt.io: MCP-native tool-call governance, 6-tier RBAC, secret detection, full audit trails, SIEM-ready events. Provider-agnost

Version check not run yet

Model and agent tools crates.io Local
mcpflare io.github.forgedapps/mcpflare

Use local MCP servers securely with zero-trust isolation while reducing context window token usage by up to 98%.

Version check not run yet

Security npm Local 7 a week MIT
meok-mcp-cloud-security io.github.meok-ai-labs/mcp-cloud-security

MCP server for cloud security posture assessment (AWS/Azure/GCP)

Version check not run yet

Cloud platforms npm Local 3 a week MIT
meok-mcp-nist-csf io.github.meok-ai-labs/mcp-nist-csf

MCP server for NIST Cybersecurity Framework assessment

Version check not run yet

Security npm Local 3 a week MIT
meok-mcp-vulnerability-scanner io.github.meok-ai-labs/mcp-vulnerability-scanner

MCP server for automated vulnerability scanning and CVE tracking

Version check not run yet

Security npm Local 3 a week MIT
clyrolabs-vibesecurity io.github.clyrolabs/vibesecurity-ns8m58

Servidor MCP (Model Context Protocol) com Zero Trust para análise de segurança com Trivy. Protege workspaces contra Path Traversal, executa scans de vulnerabilidade e gera patches de correção.

Version check not run yet

Security npm Local 6 a week MIT
@marchev/claudit io.github.marchev/claudit-8rf57p

MCP server for searching Solodit smart contract security findings

Version check not run yet

Security npm Local 11 a week MIT
tether-name-mcp-server io.github.tether-name/tether-name-mcp-server

MCP server for tether.name - AI agent identity verification

Version check not run yet

Security npm Local 12 a week MIT