Security MCP servers

3,552 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

@leviai/netrecon-mcp io.github.levi-labs/netrecon-mcp

Network reconnaissance MCP server — DNS, WHOIS, port scanning, subdomain enumeration, TLS inspection, HTTP security headers, IP geolocation, and Shodan InternetDB. Zero API keys required.

Version check not run yet

Security npm Local 6 a week MIT
yt-dlp-mcp io.github.yourusername/yt-dlp-mcp

MCP Server for YouTube - Download videos and audio using yt-dlp with automatic setup

Version check not run yet

Design and media npm Local 12 a week ISC
@claytivi/driftguard-mcp io.github.claytini1/driftguard-mcp

MCP server for context-aware dependency vulnerability scanning. Finds which npm audit warnings actually matter in your code.

Version check not run yet

Developer tools npm Local 5 a week MIT
blackduck-mcp-server io.github.vwaghmare/blackduck-mcp-server

Model Context Protocol (MCP) server for Black Duck SCA — vulnerability scanning, remediation, and PR automation for AI assistants

Version check not run yet

Security npm Local 4 a week ISC
revxl-devtools io.github.johnmives/revxl-devtools

17 developer tools for AI agents. JSON, JWT, regex, cron, secrets scanner. Free core + Pro ($7).

Version check not run yet

Developer tools npm Local 5 a week MIT
@wd041216-bit/ironclaw-agent-guard io.github.wd041216-bit/ironclaw-agent-guard

Lightweight security guardrails for tool-enabled agent runtimes: scan risky payloads, redact secrets, expose stdio/HTTP MCP tools, and write audit logs.

Version check not run yet

Security npm Local 6 a week MIT
augure-mcp io.github.log0u7/augure

Three read-only tools: analyze_target (facts in, decision + provenance out), list_rules, explain_technique. The LLM proposes, augure disposes - the decision layer every security agent can call.

Not checked yet

Security RubyGems MIT
security-audit-mcp io.github.nasimashaoz/security-audit-mcp

MCP server for AI-powered security audits — OWASP Top 10, NIST SP 800-53, ISO 27001. Works with Claude, Cursor, and any MCP-compatible AI agent.

Version check not run yet

Security npm Local 4 a week MIT
mitre-attack-mcp io.github.mhaggis/mitre-attack-mcp-ps3py8

MCP server for querying MITRE ATT&CK framework and generating Navigator layers

Version check not run yet

Security npm Local 20 a week APACHE-2.0
nvd-cve-mcp-server io.github.socteam-ai/nvd-cve-mcp-server

MCP server for searching and retrieving CVE vulnerability information from NVD

Version check not run yet

Security npm Local 22 a week MIT
Runsec io.github.runsec-io/mcp

RunSec MCP server for workspace security scanning and remediation workflows.

Version check not run yet

Security Official MCP Registry · npm Local 13 a week MIT
@code-sense/core io.github.atbeta/code-sense

Config-driven code knowledge graph for Vue projects — tree-sitter AST parsing, Living Wiki, MCP server for AI agents, Sigma.js visualization

Version check not run yet

Developer tools npm Local 2 a week MIT
@crestdeploymentsystems/mcp-audit io.github.crest-deployment-systems/mcp-audit

MCP server for smart contract audit, code security scan, and wallet risk profiling via x402. By Crest Deployment Systems.

Version check not run yet

Finance and payments npm Local 2 a week MIT
@embodot/vibeguard io.github.dadwadw233/vibeguard

Security guard for AI coding agents - detects secrets, blocks dangerous operations

Version check not run yet

Coding agent tools npm Local 2 a week MIT
@fhestate/mcp-server io.github.fhestate/fhestate-fhestate-mcp

FHESTATE MCP server — confidential agents, FHE encrypt, and Solana devnet tools for Cursor and Claude

Version check not run yet

Security npm Local 2 a week MIT
@interventiononchain/mcp io.github.wenyveo/intervention-mcp

Intervention Security MCP server — give your AI agent free and pay-per-call (x402 USDG on Robinhood Chain) smart-contract and code security scans, plus a read-only Guard preflight. Thin hosted client;

Version check not run yet

Security npm Local 2 a week MIT
@kvmfleet/mcp io.github.kvmfleet/mcp

MCP server for KVM Fleet — let an AI assistant read your fleet, audit log, and compliance state and (opt-in) act on it. Includes curated governance prompts. All calls go through the platform REST API,

Version check not run yet

Model and agent tools npm Local 2 a week MIT
@lazymac/secrets-scanner-mcp io.github.lazymac2x/mcp-hub-secrets-scanner-mcp

AI-native secrets and credentials scanner MCP server — detects leaked API keys, tokens, private keys, and database URLs in files, directories, clipboards, and git history. Purpose-built for Claude age

Version check not run yet

Security npm Local 2 a week MIT
@lockzero/mcp io.github.lockzero-io/lockzero

LockZero MCP Server — give Claude Code zero-trust access to your secrets vault

Version check not run yet

Security npm Local 2 a week MIT
@miaggy/mcp-audit io.github.auaggy/agent-sec-scanners-mcp-audit

Audits the MCP servers configured on a machine for supply-chain risk: unpinned versions, inline secrets, missing provenance, install scripts, maintenance signals

Version check not run yet

Security npm Local 2 a week MIT
@phoenixaihub/mcp-security-scanner io.github.phoenix-assistant/mcp-security-scanner

Security scanner for MCP servers — detect vulnerabilities, CVEs, and attack vectors

Version check not run yet

Security npm Local 2 a week MIT
@pkgradar/mcp io.github.pkgradar/pkgradar-mcp

PkgRadar MCP server — check npm, PyPI and other packages for malware from inside your AI coding assistant (Claude Code, Cursor, Copilot, Windsurf) before you install them.

Version check not run yet

Coding agent tools npm Local 2 a week MIT
@promptguardapp/mcp io.github.krishojha1810/promptguard-mcp

Local-first MCP server that scans developer prompts for secrets, PII, and cost before they hit the LLM.

Version check not run yet

Model and agent tools npm Local 2 a week MIT
@sgintokic/har-mcp io.github.gsk-f/har-mcp

A professional MCP server for analyzing HAR (HTTP Archive) capture files: extract endpoints, detect GraphQL, hunt secrets, group by domain, find issues, export cURL/Postman, compare captures, and gene

Version check not run yet

Developer tools npm Local 2 a week MIT
@tocharianou/aws-iam-mcp io.github.tocharianou/aws-iam-mcp

AWS IAM MCP Server – user/role inspection, policy analysis, access key audit, and privilege simulation for security investigations

Version check not run yet

Security npm Local 2 a week APACHE-2.0
@tocharianou/cloudwatch-mcp io.github.tocharianou/cloudwatch-mcp

AWS CloudWatch MCP Server – Logs Insights queries, log stream events, alarm status, and metric statistics for security investigations

Version check not run yet

Data warehouses and analytics npm Local 2 a week APACHE-2.0
@weave_protocol/ward io.github.tyox-all/weave_protocol-ward

WARD.md — the agent security policy standard. Define what your agents can and cannot do, version-controlled alongside AGENTS.md and SKILL.md.

Version check not run yet

Security npm Local 2 a week APACHE-2.0
cade-connect io.github.shibly-axiler/mcp_security-connect

CADE MCP connector CLI — init, wrap, doctor, fleet setup

Version check not run yet

Security npm Local 2 a week MIT
cloak-business-mcp-server io.github.cloak-business/mcp-server

MCP Server for cloak.business - AI-powered PII anonymization. Supports both HTTP and stdio transports.

Version check not run yet

Security npm Local 2 a week MIT
dnssec io.github.tudadada/dnssec

Domain Name System Security Extensions (DNSSEC) Validation & Cryptographic Auditing MCP Server

Version check not run yet

Security npm Local 2 a week MIT
integrity-molt-mcp io.github.hans1132/integrity.molt-mcp

integrity.molt Solana security oracle — MCP tools for Claude Desktop

Version check not run yet

Security npm Local 2 a week MIT
mcp-cti-glossary-server io.github.aplaceforallmystuff/mcp-cti-glossary

MCP server for CTI and cyber jargon disambiguation — MITRE ATT&CK, NIST, ENISA, OFAC, Jargon File, with full-text search across sources

Version check not run yet

Security npm Local 2 a week MIT
mcpval-localmcp io.github.navalerakesh/mcp-validation-security

Local MCP server that wraps the mcpval CLI — validate MCP servers from any AI agent

Version check not run yet

Security npm Local 2 a week MIT
opentestmcp io.github.watcher1223/yc-hackathon-backend

Turn APIs into agent-callable MCP tools with auth, testing, and audit logs

Version check not run yet

Developer tools npm Local 2 a week MIT
opsis-mcp io.github.kaa911-syp/opsis-mcp

Opsis MCP server — pre-deploy launch checks + OWASP security scan with Playwright proof and recording upload, run from your coding agent (Claude Code, Cursor, Windsurf).

Version check not run yet

Security npm Local 2 a week MIT
rust-security-auditor io.github.lihytaihe-lang/rust-security-auditor

Local stdio MCP server for focused Rust security review.

Version check not run yet

Security npm Local 2 a week APACHE-2.0
signbridge-mcp io.github.rajesh-bijja/signbridge-mcp

MCP server for SignBridge — presign and invoke AWS SigV4 (IAM & SSO) and REST APIs from Claude, Cursor, and other MCP clients.

Version check not run yet

Cloud platforms npm Local 2 a week MIT
ssampin-ai-bridge io.github.pblsketch/ssampin-ai-bridge

쌤핀(SsamPin) 로컬 데이터를 외부 AI(Claude·Codex·Antigravity 등 MCP 클라이언트)와 API 키 없이 안전하게 연결하는 브릿지 — PII 토큰화·동의 게이트 내장

Version check not run yet

Security npm Local 2 a week GPL-3.0
sutro-mcp-server io.github.adrianjonmiller/sutro-mcp-server

Stdio MCP server for Sutro — exposes Sutro project, app, SLang deploy, and secrets tools to AI editors.

Version check not run yet

DevOps and infrastructure npm Local 2 a week MIT
Bitwarden Public API and Secrets Manager (unofficial) io.github.mguttmann/the-real-bitwarden-mcp

Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.

Version check not run yet

Security Official MCP Registry · npm Local 2 a week MIT
warden-gateway io.github.parveshsaini/warden

Warden — an open-source MCP gateway. A control plane for AI tool access: security screening and observability for Model Context Protocol servers.

Version check not run yet

Monitoring and observability npm Local 2 a week MIT
winston_sec_mcp io.github.tejgokani/winston

AI-assisted security auditing MCP server with an interactive threat graph.

Version check not run yet

Security npm Local 2 a week SEE-LICENSE-IN
agentseal-mcp-intel io.github.agentseal/agentseal-mcp-intel

MCP server for AgentSeal — find safe MCP servers, check security before installing, and scan your AI dev environment from inside your AI coding assistant

Version check not run yet

Coding agent tools npm Local 7 a week FSL-1.1-APACHE-2.0
@logwick/mcp io.github.logwickio/logwick-mcp

Logwick MCP server — connect AI agents to your audit log

Version check not run yet

Security npm Local 3 a week MIT
ramparts io.github.highflame-ai/ramparts

Security scanner for Model Context Protocol (MCP) servers and AI agent skills (Claude Code commands, agentskills.io bundles, Cursor / Codex / Windsurf / Gemini equivalents).

Version check not run yet

Model and agent tools crates.io Local
@praveen030686/yantrix-mcp io.github.praveen030686/yantrix-mcp

Dynamic MCP server for the Yantrix API portfolio — 30+ tools across research, memory, language, legal, security, intelligence, and more.

Version check not run yet

Security npm Local 1 a week MIT
Oxiploitability io.github.abelreqma/oxiploitability-mcp

Sourced, evidence-aware CVE research for CVEs, products, SBOMs and images via NVD, EPSS, KEV, OSV.

Version check not run yet

Security Official MCP Registry · crates.io Local
complianceiq-policy-mcp io.github.crawde/complianceiq-policy-mcp

MCP server for compliance policy document generation — create security policies, SOPs, incident response plans, risk assessment templates, and training outlines aligned to regulatory frameworks

Version check not run yet

Legal and compliance npm Local 3 a week MIT