Security MCP servers

3,553 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

  1. @tocharianou/mcp-shodan io.github.tocharianou/mcp-shodan

    Shodan MCP Server – network reconnaissance, DNS operations, and vulnerability intelligence

    Version check not run yet

    Security npm Local 7 a week MIT

  2. @agentsid/mcp-scanner io.github.stevenkozeniesky02/agentsid-scanner

    MCP security scanner. Scores any MCP server against the AgentsID trust framework and looks up pre-scanned results from the public registry.

    Version check not run yet

    Security npm Local 3 a week MIT

  3. vikunja-mcp-server io.github.dawidkulpa/vikunja-mcp-server

    Model Context Protocol server for Vikunja task management - Simplified architecture with enterprise-grade security and reliability

    Version check not run yet

    Project management npm Local 2 a week MIT

  4. pubsh-mcp io.github.imsomeoneelse/pubsh-mcp

    MCP server for pubsh — encrypt HTML and publish it to S3 from any AI host (Claude Desktop, Claude Code, Cursor, …)

    Version check not run yet

    Files and storage npm Local 1 a week AGPL-3.0-OR-LATER

  5. @apviso/mcp io.github.apviso/apviso-mcp

    MCP server for interacting with APVISO penetration testing platform

    Version check not run yet

    Security npm Local 3 a week MIT

  6. mcp-vet io.github.mintreel/mcp-vet

    Open-source security auditor for MCP (Model Context Protocol) servers

    Version check not run yet

    Security npm Local 5 a week MIT

  7. mpx-scan io.github.mesaplexdev/mpx-scan

    Website security scanner CLI. Headers, SSL, cookies, and DNS auditing. AI-native with JSON output and MCP server.

    Version check not run yet

    Security npm Local 8 a week SEE-LICENSE-IN

  8. @craftrift/verify-mcp io.github.jiibran/verify-mcp

    MCP server for CraftRift Verify API - verify websites, SSL certificates, DNS propagation, and API health

    Version check not run yet

    DevOps and infrastructure npm Local 3 a week MIT

  9. mcp-credentials-broker io.github.ars-system/mcp-credentials-broker

    MCP Secrets & Token Broker - A security layer for managing short-lived credentials and tokens

    Version check not run yet

    Security npm Local 3 a week MIT

  10. mcp-shield io.github.riseandignite/mcp-shield-jqfxfg

    Security scanner for MCP servers

    Version check not run yet

    Security npm Local 29 a week MIT

  11. shipvettd io.github.diskountz/shipvettd-mcp-wjdzh4

    Run a Vettd Site Scan from inside Claude Code, Cursor, Windsurf, or any MCP client. 82 production-readiness checks for any URL — security, SEO, performance, legal, accessibility, AI-search readiness.

    Version check not run yet

    Developer tools npm Local 1 a week MIT

  12. @aiagentkarl/agent-policy-gateway-mcp io.github.aiagentkarl/agent-policy-gateway-mcp-js

    MCP Server for AI agent policy enforcement - PII detection, guardrails, GDPR/EU AI Act compliance, audit logging, and emergency kill switch

    Version check not run yet

    Legal and compliance npm Local 4 a week MIT

  13. miyabi-mcp-bundle io.github.shunsukehayashi/miyabi-mcp-bundle-s1xqsn

    🚀 The Ultimate All-in-One MCP Server - 172 tools for Claude Desktop & AI Agents. Git, GitHub, System Monitoring, Tmux, Logs, Network, Process, File, and more! Enterprise-grade security with input sani

    Version check not run yet

    Git and code hosting npm Local 4 a week MIT

  14. pi-casefile io.github.x4cc3/casefile

    Offensive security case tracker for pi and Codex — bug bounties, CTFs, security audits

    Version check not run yet

    Security npm Local 17 a week

  15. @zilosoft/mcp-server-mysql io.github.zilosoft/mcp-server-mysql

    MCP server for interacting with MySQL databases with write operations support (security-hardened fork with SSL auto-detection, AST-based permission checks, and hardened remote mode)

    Version check not run yet

    Databases npm Local 2 a week MIT

  16. Paysafe com.paysafe-agent/paysafe

    Payment firewall for x402: scans for replay, overpayment, PII/secret leaks, prompt-injection.

    Version check not run yet

    Security Official MCP Registry Local

  17. Agent Security Scanner io.github.Mikehzp/agentvuln

    Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.

    Version check not run yet

    Security Official MCP Registry Local

  18. Legal Doc Analyzer io.github.vpatser1/legal-doc-analyzer

    Contract analysis, risk assessment, version diffs, compliance checks (GDPR, CCPA, SOC2)

    Version check not run yet

    Legal and compliance Official MCP Registry Local

  19. Sladd no.sladd/mcp

    Detect and redact Norwegian PII (fodselsnummer, names, health data) in text and PDFs.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote

  20. meok-mcp-aml-checker io.github.meok-ai-labs/mcp-aml-checker

    MCP server for AML/KYC checks and transaction monitoring

    Version check not run yet

    Security npm Local 1 a week MIT

  21. mcp-sentinel-scanner io.github.j420/mcpsentinal-mcp-sentinel-scanner

    MCP server for security scanning — analyze any MCP server against 177 detection rules with AST taint analysis, capability graph, and entropy-based secret detection

    Version check not run yet

    Developer tools npm Local 3 a week MIT

  22. @gtrevize/mcp-network io.github.gtrevize/mcp-network

    Comprehensive MCP (Model Context Protocol) server for AI agents to perform network testing and validation with built-in security and authentication

    Version check not run yet

    Developer tools npm Local 28 a week MIT

  23. @firmislabs/firmis io.github.firmislabs/firmis-scanner

    AI agent security platform — scan, fix, monitor, and pentest MCP servers, Claude skills, Codex plugins, Cursor extensions, and 5 more platforms. 227 rules across 17 threat categories.

    Version check not run yet

    Security npm Local 4 a week SEE-LICENSE-IN

  24. @cyberstrike-io/bolt io.github.cyberstrikeus/bolt

    Docker-based Kali Linux security tools via MCP — 100+ pre-installed penetration testing tools

    Version check not run yet

    Security npm Local 4 a week AGPL-3.0-ONLY

  25. @iflow-mcp/secfathy-offensiveset io.github.pentesterflow/offensiveset

    MCP server for generating high-quality offensive security datasets for LLM fine-tuning. Produces realistic multi-turn pentesting conversations with tool calls, reasoning chains, and professional repor

    Version check not run yet

    Security npm Local 2 a week MIT

  26. mcp-vaultwarden-server io.github.fkom13/mcp-vaultwarden

    MCP pour interagir avec Vaultwarden via la CLI Bitwarden.

    Version check not run yet

    Security npm Local 7 a week MIT

  27. @iflow-mcp/jane-xiaoer-skill-vision-control io.github.jane-xiaoer/skill-vision-control

    Safe MCP Skill version manager with security scanning - detect updates, parallel testing, smart merge, auto security audit

    Version check not run yet

    Developer tools npm Local 5 a week MIT

  28. @gtvar/yt-dlp-mcp io.github.gtvar/yt-dlp-mcp

    Model Context Protocol (MCP) Server for yt-dlp

    Version check not run yet

    Security npm Local MIT

  29. safechain-agent io.github.charliebot8888/safelink

    SafeLink: security-first OpenClaw skill for bidirectional agent hiring, escrow payments, MPC wallets, and policy-gated transactions

    Version check not run yet

    Finance and payments npm Local 5 a week MIT

  30. mcp-server-content-moderation io.github.alerterra/mcp-server-content-moderation

    Content moderation with prompt injection detection, toxicity scoring, and PII redaction

    Version check not run yet

    Security npm Local 4 a week MIT

  31. @sapper-ai/mcp io.github.sapper-ai/core-mcp

    Model Context Protocol (MCP) security proxy for SapperAI

    Version check not run yet

    Security npm Local 5 a week MIT

  32. skillscan-mcp io.github.alexchenai/skillscan-mcp

    MCP server for skillscan.chitacloud.dev — pre-install behavioral security scanner for AI agent skills. Detects natural language threats that VirusTotal misses. Pay in Lightning (sats) or USDC.

    Version check not run yet

    Security npm Local 1 a week MIT

  33. @depsshield/mcp-server io.github.depsshield/depsshield-mcp-server

    Model Context Protocol server for DepsShield - Real-time dependency security scoring for AI agents

    Version check not run yet

    Developer tools npm Local 4 a week MIT

  34. @mrknmc/vanta-mcp-server io.github.mrknmc/vanta-mcp-server

    Model Context Protocol server for Vanta's security compliance platform

    Version check not run yet

    Security npm Local 4 a week MIT

  35. chainwall io.github.consulalialpric/chainwall

    Antivirus for AI agents — scan your machine, see what's exposed, block threats

    Version check not run yet

    Security npm Local 7 a week MIT

  36. Mception io.github.soufianetahiri/mception

    Audits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.

    Version check not run yet

    Security Official MCP Registry Local

  37. windows-exe-decompiler-mcp-server io.github.last-emo-boy/windows-exe-decompiler-mcp-server

    MCP server for Windows binary reverse engineering, PE triage, Ghidra-assisted analysis, and reconstruction workflows.

    Version check not run yet

    Operating system and shell npm Local 2 a week MIT

  38. @hirehuman/mcp io.github.hirehuman/hirehuman-mcp

    MCP server for HireHumans.eu – book verified humans for physical real-world tasks via AI agents. EU-hosted, GDPR-compliant.

    Version check not run yet

    Security npm Local 3 a week MIT

  39. mpx-secrets-audit io.github.mesaplexdev/mpx-secrets-audit

    Secrets expiration tracking and audit CLI. Monitor API keys, tokens, and credentials. AI-native with JSON output and MCP server.

    Version check not run yet

    Security npm Local 6 a week SEE-LICENSE-IN

  40. clawlock-mcp-server io.github.palmcoast/clawlock-mcp-server

    ClawLock — MCP-native identity, credential vault, and audit layer for AI agents. Ed25519 identity, AES-256-GCM vault, immutable audit log.

    Version check not run yet

    Security npm Local 2 a week BUSL-1.1

  41. cto-ai-cli io.github.cto-ai/cto-ai-cli

    AI context selection done right. Picks the right files, sanitizes secrets, learns from your feedback. --context, --audit, --accept/--reject.

    Version check not run yet

    Files and storage npm Local 5 a week MIT

  42. vibecheck-audit-mcp io.github.bpn-solutions/vibecheck-mcp

    AI-powered security audit MCP server with real-time vulnerability data

    Version check not run yet

    Security npm Local 8 a week MIT

  43. driftdetect-mcp io.github.dadbodgeoff/drift

    MCP server that gives AI agents (Claude, Cursor, Copilot) deep understanding of your codebase patterns, conventions, and architecture. Query patterns, security boundaries, call graphs in real-time.

    Version check not run yet

    Developer tools npm Local 8 a week APACHE-2.0

  44. @intellicompli/mcp-server com.npmjs.intellicompli/mcp-server

    Official MCP server for IntelliCompli — AML/CTF compliance platform for Australian reporting entities. Connects Claude Desktop and other MCP clients to IntelliCompli's compliance APIs for KYC, sanctio

    Version check not run yet

    Security npm Local 29 a week MIT

  45. @mrzadexinho/scanline io.github.mrzadexinho/scanline

    Security scanning MCP server — semgrep integration, SARIF parsing, and finding triage for Claude Code

    Version check not run yet

    Security npm Local 4 a week MIT

  46. ko-security-mcp io.github.picpal/kfs

    Korean Framework for Security - MCP server providing Korean security standards (MOIS 49, ISMS-P, Privacy Act) for LLM-assisted secure coding

    Version check not run yet

    Security npm Local 4 a week MIT

  47. mcp-maven-security io.github.fronnian/mpc-maven-security

    MCP tool for scanning Maven project dependency vulnerabilities

    Version check not run yet

    Security npm Local 16 a week MIT

  48. @stranzwersweb2/skillsync-mcp io.github.adityasugandhi/skillsync-mcp

    SkillSync MCP server — search, scan, install & manage Claude Code skills with built-in security scanning and startup verification

    Version check not run yet

    Security npm Local 5 a week MIT