Security MCP servers

3,560 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. @M @ohshit/mcp io.github.becoolme/ohshit-mcp 1.4 · 27/100

   MCP server for OhShit! security incidents, graded by stench. No key needed.

   Version check not run yet

   Monitoring and observability npm Local MIT

2. @S @sed-sh/mcp-server io.github.sed-sh/mcp-server 1.4 · 27/100

   MCP server for sed.sh — pay-per-use developer APIs (malware scanning, URL shortening, email inboxes, PDF generation, uptime monitoring, real-time channels, terminal sharing)

   Version check not run yet

   Monitoring and observability npm Local MIT

3. @M @yokedotlol/mcp-server io.github.yokedotlol/yoke-mcp 1.4 · 27/100

   MCP server for Yoke domain intelligence — analyze domains across security, speed, DNS, SSL, email, and tech stack from any MCP-compatible AI client.

   Version check not run yet

   Security npm Local MIT

4. AA agent-app-forge io.github.prasannakumar0718/skull 1.4 · 27/100

   Agent-agnostic software recreation, reverse engineering, and declarative full-stack application synthesis system with autonomous verification and MCP tooling.

   Version check not run yet

   Security npm Local MIT

5. AS audit-sherpa io.github.ramprakashram/audit-sherpa 1.4 · 27/100

   Guided npm audit: list vulnerabilities in a filterable table and fix them selectively (prod-only, direct-only, or hand-picked). Includes an MCP server for LLM agents.

   Version check not run yet

   Security npm Local MIT

6. BA break-anything io.github.enkiyuan/break-anything 1.4 · 27/100

   One CLI and MCP server for coding agents to find vulnerabilities across code, dependencies, apps, and infrastructure — on targets you own or are authorized to test.

   Version check not run yet

   Coding agent tools npm Local MIT

7. CF cve-fix-check io.github.derek-coleman-associates-corporation/cve-fix-check 1.4 · 27/100

   MCP server: CVE lookup + fixed-version availability for packages, container images, and SBOMs. Keyless public sources (OSV.dev, EPSS, Alpine/Wolfi secdb, Ubuntu security tracker). No telemetry.

   Version check not run yet

   Security npm Local APACHE-2.0

8. MG money-guard-mcp io.github.spundu/money-guard-mcp 1.4 · 27/100

   MCP server that checks how a project handles money: float money columns in SQL migrations, unbalanced double-entry ledger exports, and tampered sealed audit logs. Read-only and offline.

   Version check not run yet

   Databases npm Local MIT

9. SE sevlex io.github.meetpanchal-sevlex/sevlex-mcp-gateway 1.4 · 27/100

   Layer 7 Zero-Trust Security Gateway & Control Plane for the Model Context Protocol (MCP)

   Version check not run yet

   Security npm Local APACHE-2.0

10. UM unapi-mcp io.github.mohdxaid/unapi-mcp 1.4 · 27/100

    Unwrap any website's hidden Shadow APIs into a typed Python/TypeScript SDK, OpenAPI 3.1 spec, Auth Dependency Chain, Security Audit, and Mock/MCP server.

    Version check not run yet

    Developer tools npm Local MIT

11. SA safefix com.npmjs/safefix 1.4 · 27/100

    Find and fix security holes in apps built with AI tools: Supabase Row Level Security, leaked keys, Docker, GitHub Actions and app config. CLI and MCP server.

    Crashes on start

    DevOps and infrastructure npm Local 461 a week MIT

12. CH claude-https-mcp io.github.cyphers-ai/claude-https-mcp 1.4 · 27/100

    MCP server providing secure HTTPS fetch with custom TLS configuration for Claude Code

    Version check not run yet

    Security npm Local 6 a week MIT

13. SM shieldnet-mcp io.github.hhhashexe/shieldnet-mcp 1.4 · 27/100

    ShieldNet Security Scanner — MCP Server for AI Agent Security Governance. Scans URLs for XSS, SQLi, SSTI, CORS misconfig, missing headers, info disclosure, and more. Returns ALLOW/WARN/BLOCK governanc

    Version check not run yet

    Security npm Local 1 a week MIT

14. @M @vadaski/mcp-guard io.github.vadaski/va-project-mcp-guard 1.4 · 27/100

    MCP Server security scanner and audit tool — scan tool definitions for prompt injection, permission escalation, and data exfiltration risks

    Version check not run yet

    Security npm Local 3 a week MIT

15. NM nimbus-mcp io.github.h4cd0c/nimbus-mcp 1.3 · 27/100

    Nimbus - AWS Security Assessment MCP Server - 45 Tools with Full OWASP MCP Security

    Version check not run yet

    Security npm Local 4 a week MIT

16. IV id-verify-mcp io.github.tanveerafzal/id-verify-mcp 1.3 · 27/100

    MCP server for ID Verify identity verification API - enables AI assistants to create and manage identity verifications

    Version check not run yet

    Security npm Local 6 a week MIT

17. MV mcp/vuln-nist-mcp-server io.github.haroldfinchift/vuln-nist-mcp-server 1.3 · 27/100

    This MCP server exposes tools to query the NVD/CVE REST API and return formatted text results sui...

    Version check not run yet

    Security Docker Hub · Docker MCP Catalog · Docker MCP Registry Local MIT

18. CM carapace-mcp io.github.jdesl55/carapace-mcp 1.3 · 27/100

    Armor for your AI agent. Security verification, goal anchoring, drift detection, and session grading for OpenClaw and MCP-compatible agents.

    Version check not run yet

    Security npm Local 3 a week MIT

19. @D @edgebird.dev/check-pack io.github.itsocialist/check-pack 1.3 · 27/100

    A zero-trust supply chain gate and MCP server for LLM vibe coders. Intercepts npm, pip, and docker commands to score packages before they touch your machine.

    Version check not run yet

    DevOps and infrastructure npm Local 1 a week ISC

20. @M @skvil/mcp-server io.github.skvil-ia/skvil-mcp 1.3 · 27/100

    MCP server for the Skvil security scanner — verify, scan, and report AI agent skills

    Version check not run yet

    Security npm Local 3 a week MIT

21. @M @jadegate/mcp-server io.github.jadegate/jade-core 1.3 · 27/100

    JadeGate MCP Server — Deterministic security verification for AI agent skills

    Version check not run yet

    Security npm Local 3 a week APACHE-2.0

22. @M @aicryptorisk/mcp-server io.github.djangamane/montecrypto 1.3 · 27/100

    The security layer for agentic crypto trading. Detect honeypots, rugpulls, and scam tokens before your AI agent trades.

    Version check not run yet

    Finance and payments npm Local 4 a week MIT

23. MM meok-mcp-gdpr-audit io.github.meok-ai-labs/mcp-gdpr-audit 1.3 · 27/100

    MCP server for GDPR comprehensive audit and gap analysis

    Version check not run yet

    Security npm Local MIT

24. MM meok-mcp-sanctions-screening io.github.meok-ai-labs/mcp-sanctions-screening 1.3 · 27/100

    MCP server for sanctions list screening and PEP checking

    Version check not run yet

    Security npm Local MIT

25. AN anticheck io.github.muhamedessamz/anticheck 1.3 · 27/100

    AntiCheck MCP Server - Validates code architecture, security, frontend quality, and vibe coding anti-patterns

    Version check not run yet

    Developer tools npm Local 3 a week MIT

26. MS mcp-server-nucleus io.github.eidetic-works/mcp-server-nucleus 1.3 · 27/100

    The Agent Control Plane - Default-Deny Security for MCP Servers

    Version check not run yet

    Security PyPI Local

27. @D @clinetools/dep-scanner io.github.clinetools/clinetools-4eq56x 1.3 · 27/100

    Scan package.json, requirements.txt, Cargo.toml, and go.mod for known CVEs. Offline database of vulnerabilities, no API needed.

    Version check not run yet

    Security npm Local 3 a week MIT

28. @C @mrzadexinho/codeguard io.github.mrzadexinho/codeguard 1.3 · 27/100

    AI code review MCP server — automated pattern detection for bugs, security issues, and silent failures

    Version check not run yet

    Developer tools npm Local 2 a week MIT

29. R3 r3v3rs3 io.github.kilimcininkoroglu/r3v3rs3 1.3 · 27/100

    A reverse proxy server with a built-in WebUI for TCP, UDP, TLS, HTTP, WebSocket and HTTP/3, and a deployment platform that runs your apps behind it.

    Version check not run yet

    DevOps and infrastructure crates.io Local

30. @M @iflow-mcp/ahammednibras8-secure-mcp-db io.github.iflow-mcp/ahammednibras8-secure-mcp-db 1.3 · 27/100

    Secure MCP Database Bridge - Zero Trust Data Gateway for LLMs

    Version check not run yet

    Databases npm Local 5 a week MIT

31. @G @yhonda/gcloud-secrets-mcp io.github.yhonda-ohishi/gcloudsec 1.3 · 27/100

    GCP Secret Manager を GitHub clone 風に管理する MCP サーバー

    Version check not run yet

    Security npm Local 5 a week ISC

32. FM fridayops-mcp io.github.fridayai700/mcp-server 1.3 · 27/100

    MCP server for developer tools — DNS, TLS, WHOIS, security audit, and more. Built by Friday.

    Version check not run yet

    Security npm Local 3 a week MIT

33. SC shipguard-cli io.github.ykavak-dev/shipguard 1.3 · 27/100

    AI-powered security scanner with Claude API integration and MCP server support

    Version check not run yet

    Security npm Local 2 a week MIT

34. SP spidershield-proxy io.github.teehooai/spidershield-spidershield-proxy 1.3 · 27/100

    MCP security proxy — Trust Score checks, DLP scanning, and policy enforcement for every tool call

    Version check not run yet

    Security npm Local 1 a week MIT

35. LS leak-secure-mcp io.github.cbuntingde/leak-secure-mcp 1.3 · 27/100

    MCP server for Leak Secure - Enterprise GitHub security scanner detecting 35+ types of secrets

    Version check not run yet

    Security npm Local 6 a week MIT

36. PE Pentest com.pentest-tools/mcp-server 1.3 · 27/100

    MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

    100% up · 30 days

    Security Official MCP Registry Remote

37. AT AgentGraph Trust io.github.agentgraph-co/agentgraph-trust 1.3 · 27/100

    Security scanning and trust verification for AI agent tools.

    Version check not run yet

    Security Official MCP Registry Local

38. @M @lionchat/mcp-server com.npmjs.lionchat/mcp-server 1.3 · 27/100

    MCP server for LionChat API — 547 tools + 10 resources + 9 prompts. Audit-log aware, completion API, progress notifications.

    Version check not run yet

    Model and agent tools npm Local 362 a week MIT

39. @B @rsabde/blackduck-mcp io.github.rushikeshsabde/blackduck-mcp 1.3 · 27/100

    A Model Context Protocol (MCP) server for Blackduck and Server APIs, built with Node.js. Provides comprehensive tools for listing BOM, Operational risks and security issues

    Version check not run yet

    Security npm Local ISC

40. MC mcp-cli io.github.gkctou/mcp-cli 1.3 · 27/100

    A secure MCP CLI server implementation with comprehensive path whitelist validation, providing controlled file system operations and command execution in a protected environment. Features include stri

    Version check not run yet

    Files and storage npm Local 60 a week MIT

41. SM stratos-mcp io.github.h4cd0c/stratos-mcp 1.3 · 27/100

    Stratos - Azure Security Assessment MCP Server - 32 Professional Security Tools (With Annotations & Tests)

    Version check not run yet

    Cloud platforms npm Local 3 a week MIT

42. @S @j0kz/security-scanner-mcp io.github.j0kz/mcp-agents-security-scanner 1.3 · 27/100

    Security Scanner MCP - Detect vulnerabilities, hardcoded secrets, SQL injection, XSS, and OWASP Top 10 issues. Works with Claude Code, Cursor, Windsurf, Roo Code, and any MCP-compatible editor.

    Version check not run yet

    Security npm Local 12 a week MIT

43. DM Dependency Management com.sonatype/dependency-management-mcp-server 1.3 · 27/100

    Sonatype component intelligence: versions, security analysis, and Trust Score recommendations

    100% up · 30 days

    Developer tools Official MCP Registry · GitHub MCP Registry Remote

44. YT yt-transcript-mcp io.github.alialfredji/yt-transcript-mcp 1.3 · 27/100

    MCP server that fetches YouTube video transcripts using yt-dlp - supports local (stdio) and remote (HTTP/SSE) deployment

    Version check not run yet

    Design and media npm Local 3 a week MIT

45. DP dbmcp-pii io.github.haymon-ai/dbmcp-1a6f43 1.3 · 27/100

    PII analyzer and anonymizer for dbmcp

    Version check not run yet

    Security crates.io Local

46. @C @tocharianou/cloudtrail-mcp io.github.tocharianou/cloudtrail-mcp 1.3 · 27/100

    AWS CloudTrail MCP Server – audit log lookup, CloudTrail Lake SQL analytics, and event data store management for security investigations

    Version check not run yet

    Security npm Local 2 a week APACHE-2.0

47. @M @iflow-mcp/ashgw-vault-mcp com.npmjs.iflow-mcp/ashgw-vault-mcp 1.3 · 26/100

    MCP Server for HashiCorp Vault secret management

    Version check not run yet

    Security npm Local MIT

48. @M @iflow-mcp/george-mellow-spotter-sast io.github.george-mellow/spotter-sast 1.3 · 26/100

    Advanced SAST security analysis with multi-tool integration and comprehensive compliance verification

    Version check not run yet

    Security npm Local 3 a week MIT