Security MCP servers

3,553 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

complianceiq-policy-mcp io.github.crawde/complianceiq-policy-mcp

MCP server for compliance policy document generation — create security policies, SOPs, incident response plans, risk assessment templates, and training outlines aligned to regulatory frameworks

Version check not run yet

Legal and compliance npm Local 3 a week MIT
depsonar io.github.soflution1/depsonar

MCP server for dependency auditing, live CVE scanning, migration detection & full stack health. 23 tools, 9 languages.

Version check not run yet

Developer tools npm Local 12 a week MIT
vibecheck-ai io.github.vibecheck-oss/vibecheck-2p1z8r

VibeCheck Ultimate CLI — Ship with confidence. 65+ commands merged from 4 codebases: kernel infrastructure, ISL verification, Reality Mode, Agent Firewall, MCP Server.

Version check not run yet

Developer tools npm Local 12 a week MIT
@mtgibbs/blackduck-polaris-mcp io.github.mtgibbs/blackduck-polaris-mcp

MCP server for querying Black Duck Polaris security vulnerabilities, issues, and scan results

Version check not run yet

Security npm Local 10 a week MIT
@richard-stovall/opnsense-mcp-server io.github.richard-stovall/opnsense-mcp-server-2hch88

Modular MCP server for OPNsense firewall management - 88 tools providing access to 2000+ methods

Version check not run yet

Security npm Local 114 a week MIT
@lightspeedrun/mcp io.github.efd1/lightspeed-lightspeed-mcp-server

Model Context Protocol (MCP) server for Google Lighthouse: performance, accessibility, SEO, security, and Core Web Vitals.

Version check not run yet

Developer tools npm Local 3 a week MIT
@szemeng76/whois-mcp io.github.szemeng76/whois-mcp

MCP to lookup whois information

Version check not run yet

Security npm Local MIT
mcp-quality-gate io.github.bhvbhushan/mcp-quality-gate

Quality gate for MCP servers — compliance, security, and efficiency testing

Version check not run yet

Developer tools npm Local 4 a week MIT
mcp-server-agent-security io.github.joepangallo/mcp-server-agent-security

Security auditor for AI agents and MCP servers — config analysis, prompt injection testing, tool probing, data flow tracing

Version check not run yet

Security npm Local 7 a week MIT
Suprawall io.github.wiserautomation/suprawall-mcp

SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.

Version check not run yet

Security Official MCP Registry · npm Local 9 a week
MCPower Security Proxy io.github.MCPower-Security/mcpower-proxy

Security proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement

Version check not run yet

Security Official MCP Registry · PyPI Local
Microsoft Sentinel Data Exploration com.microsoft/sentinel-data-exploration

Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de

100% up · 30 days

Security Official MCP Registry · GitHub MCP Registry Remote
@nagafenix/medshield-js io.github.amir-benhadid/medshield-js

Privacy-first PII/PHI sanitization for Medical AI Agents.

Version check not run yet

Security npm Local 2 a week APACHE-2.0
@ascend-ai/mcp-server io.github.ow-ai/ascend-mcp-server

ASCEND governance integration for MCP (Model Context Protocol) servers - Enterprise-grade AI agent security

Version check not run yet

Security npm Local 4 a week MIT
jwt-hack io.github.hahwul/jwt-hack

Hack the JWT (JSON Web Token) - A tool for JWT security testing and token manipulation

Version check not run yet

Developer tools crates.io Local
isc-transforms-mcp io.github.simplifyauth/isc-transforms-mcp

MCP server for SailPoint Identity Security Cloud (ISC) Transform authoring — scaffold, strict lint, catalog, and safe upsert to live tenants.

Version check not run yet

Developer tools npm Local 5 a week MIT
bunnycdn-mcp io.github.anvme/bunnycdn-mcp

MCP server for BunnyCDN — manage pull zones, DNS, storage, video streaming, edge scripting, security, and more.

Version check not run yet

Files and storage npm Local 10 a week MIT
@upmonitor/mcp-server io.github.upmonitor/monitor-mate-mcp-server

UpMonitor MCP server — Model Context Protocol integration that lets AI agents (Claude Desktop, Claude Code, Cursor) run website diagnostics, SSL/DNS checks, and monitoring tasks on demand.

Version check not run yet

DevOps and infrastructure npm Local 2 a week APACHE-2.0
osint-agent-mcp io.github.edamame-x/osint-agent-rag

MCP server for OSINT workflows backed by local writeups

Version check not run yet

Security npm Local 7 a week ISC
claimdesk-mcp io.github.crawde/claimdesk-mcp

MCP server for ClaimDesk — AI-powered insurance claims triage, fraud detection, and settlement recommendations

Version check not run yet

Security npm Local 2 a week MIT
npm-guardian-mcp io.github.baneado98/npm-guardian

Supply-chain security audit for npm packages, as an MCP tool and a pay-per-call x402 endpoint. Cross-references known CVE/GHSA advisories (OSV.dev) and detects typosquatting, malicious install scripts

Version check not run yet

Security Official MCP Registry · npm Local 1 a week MIT
web-doctor-mcp io.github.baneado98/web-doctor

Live web health & security check for any domain or URL, as an MCP tool and a pay-per-call x402 endpoint. Does a real TLS handshake to grade the SSL/TLS certificate (validity, issuer, days-to-expiry, h

Version check not run yet

Security Official MCP Registry · npm Local 1 a week MIT
@agent.swaps/mcp-server io.github.swapsapp/swaps-mcp-server

Model Context Protocol server for Swaps route intelligence. Five read-only tools (swaps_quote, swaps_taxonomy, swaps_providers_for_corridor, swaps_explain_choice, swaps_corridors) plus legal:// resour

Version check not run yet

Security npm Local 1 a week MIT
@astudioplus/codegraph-pro-mcp io.github.codegraph-ai/codegraph-xd4kgc

CodeGraph Pro MCP server — semantic code graph + 41 proprietary tools incl. multi-engine security orchestrator and 21 security detectors (CWE-22/78/89/190/208/284/310/326-330/347/426/427/476/611/639/7

Version check not run yet

Security npm Local 1 a week SEE-LICENSE-IN
@axiler/cade-sdk io.github.shibly-axiler/mcp_security-sdk

Production MCP security SDK — enforce all tool calls through CADE gateway

Version check not run yet

Security npm Local 1 a week MIT
@brdndon/secure-mcp io.github.brbndon/secure-mcp

Local MCP server for structured, agent-first security audits of TypeScript/Next.js and Swift/SwiftUI codebases

Version check not run yet

Developer tools npm Local 1 a week APACHE-2.0
@crestdeploymentsystems/supership-mcp io.github.andysalvo/supership-docs

MCP server for supership - predeploy security scanner. Scan code for vulnerabilities without leaving your editor.

Version check not run yet

Security npm Local 1 a week MIT
@curatedmcp/sentinel io.github.curatedmcp/sentinel

CuratedMCP's local-first action firewall for MCP servers

Version check not run yet

Security npm Local 1 a week MIT
@jbctechsolutions/mcp-google-workspace io.github.jbctechsolutions/mcp-google-workspace

MCP server for Google Workspace — Gmail read + label tools (v0.1). OAuth client credentials are resolved from 1Password at runtime and the refresh token is stored 0600 outside the repo; nothing is eve

Version check not run yet

Git and code hosting npm Local 1 a week MIT
@perufitlife/firebase-security-mcp io.github.perufitlife/firebase-security-mcp

MCP server for Firebase Firestore Rules security: audit local rules files, probe deployed projects anonymously, preview fixes.

Version check not run yet

Databases npm Local 1 a week MIT
@rostise/propstack-mcp io.github.rostise/propstack-mcp

MCP server for Propstack real estate CRM — hardened fork with security fixes and modern SDK API

Version check not run yet

Security npm Local 1 a week MIT
@tocharianou/aws-security-mcp io.github.tocharianou/aws-security-mcp

AWS Security MCP Server – GuardDuty/SecurityHub/Inspector findings, security service status checks, and S3/EBS encryption audits for security investigations

Version check not run yet

Cloud platforms npm Local 1 a week APACHE-2.0
@x402-stellar-bazaar/agent io.github.utkucy/x402-stellar-bazaar-agent

Buyer/agent SDK: query the Stellar Bazaar and pay for discovered services with hard budget ceilings enforced before signing, plus a spend audit log.

Version check not run yet

Security npm Local 1 a week APACHE-2.0
@ziwansi/mcp-firewall-core io.github.plzbeavailable/mcp-firewall

Core proxy engine, security pipeline, and observability for MCP Firewall

Version check not run yet

Security npm Local 1 a week MIT
aws-iam-accesslens-mcp io.github.enelination/aws-iam-accesslens

MCP server for analyzing AWS IAM policies for security risks, wildcards, privilege escalation, and best practice violations

Version check not run yet

Security npm Local 1 a week MIT
cyberagent-toolset io.github.aboidrees/cyberagent-toolset

CyberAgentToolSet (CATS) — an MCP server + CLI that orchestrates authorized security assessments across the attack lifecycle via installable extensions.

Version check not run yet

Security npm Local 1 a week MIT
diamonize-lsa io.github.jk-advanced-technologies/diamonize-lsa

Diamonize LSA MCP server — military-grade zero-trust endpoint security. Deep scan IPs and files for malware, keyloggers, and unauthorized memory access. Part of the J&K Go-Green Tech Suite.

Version check not run yet

Security npm Local 1 a week ISC
domains-mcp io.github.fulldev-pl1/domains-mcp

MCP server for checking domain availability via RDAP (with WHOIS fallback). Free, no API keys.

Version check not run yet

Security npm Local 1 a week MIT
idenplane-mcp io.github.idenplane/idenplane-idenplane-mcp

MCP server for Idenplane IAM — manage identities in natural language

Version check not run yet

Security npm Local 1 a week MIT
korinfra io.github.korinfra/korinfra

AI-powered AWS FinOps CLI - cost optimization, security scanning, Terraform fixes

Version check not run yet

Cloud platforms npm Local 1 a week APACHE-2.0
mcp-easycompliance io.github.siemssen-consulting-gmbh/mcp-easycompliance

MCP server (Model Context Protocol) for the easycompliance sanctions list and PEP screening API

Version check not run yet

Security npm Local 1 a week MIT
paymcp-security io.github.sksamimgood/paymcp

PayMCP — an MCP server that helps AI coding agents add, audit, test, and debug payment integrations (V0.1: Razorpay + Next.js). Step 1: MCP foundation + secure read-only workspace layer.

Version check not run yet

Coding agent tools npm Local 1 a week MIT
porkbun-mcp-server io.github.eyalm321/porkbun-mcp

MCP server for Porkbun API v3 — domain registration, DNS management, SSL certificates, and more

Version check not run yet

DevOps and infrastructure npm Local 1 a week MIT
safedb-mcp io.github.panhong2025/safedb-mcp

Security-first database MCP server. Safe AI access to your PostgreSQL databases.

Version check not run yet

Databases npm Local 1 a week MIT
scan-my-mcp io.github.meanmachine889/mcp-scanner

Security scanner for MCP servers

Version check not run yet

Security npm Local 1 a week MIT
shipshape-scan io.github.cookient16/shipshape

Honest, zero-dependency pre-launch security scanner for AI-built ("vibe-coded") apps — Lovable, Bolt, Replit, Cursor, v0 + Supabase/Firebase. Finds exposed secrets, publicly-readable databases, and do

Version check not run yet

Databases npm Local 1 a week MIT
utem-mcp io.github.innavoto/utem-mcp

UTEM MCP Server — Unified Threat Exposure Management for Claude

Version check not run yet

Security npm Local 1 a week MIT
@tocharianou/abuseipdb-mcp io.github.tocharianou/abuseipdb-mcp

AbuseIPDB MCP Server – IP reputation, abuse confidence scoring, and threat blacklist

Version check not run yet

Security npm Local 7 a week APACHE-2.0