Security MCP servers

3,560 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. PR prompttrap io.github.wardspan/prompttrap 1.3 · 26/100

   Open-source AI governance toolkit — MCP server with DLP scanning, policy enforcement, and audit logging for Claude Desktop, Cursor, VS Code, ChatGPT, and more

   Version check not run yet

   Developer tools npm Local 3 a week APACHE-2.0

2. TA triage-ai io.github.wyman101/triage-ai 1.3 · 26/100

   Collaborative AI triage for code, plans and architecture — Claude, Gemini and Codex independently analyze your codebase then merge findings with consensus scoring. Security audits, bug hunts, plan rev

   Version check not run yet

   Developer tools npm Local 2 a week MIT

3. @A @dj_abstract/mcp-audit io.github.abregoarthur-star/mcp-audit 1.3 · 26/100

   Security auditor for Model Context Protocol (MCP) servers — scans tool definitions for prompt injection, tool poisoning, unsafe combinations, and other AI-native vulnerabilities.

   Version check not run yet

   Security npm Local MIT

4. @S @prooflayer/scanner-lite io.github.sinewaveai/agent-security-scanner-mcp-scanner-lite 1.3 · 26/100

   Lightweight MCP security scanner for AI coding agents. 400+ YAML rules, tool-poisoning detection, prompt injection scanning, package hallucination checks, auto-fix generation, and optional LLM deep au

   Version check not run yet

   Coding agent tools npm Local 2 a week MIT

5. @V @indicated/vibeguard io.github.indicated/vibeguard 1.3 · 26/100

   Local CLI security scanner for AI-generated code

   Version check not run yet

   Security npm Local 3 a week ISC

6. RS rsigma io.github.timescale/rsigma 1.3 · 26/100

   CLI for parsing, validating, linting and evaluating Sigma detection rules

   Version check not run yet

   Security crates.io Local

7. RC rustyclaw-core io.github.rexlunae/rustyclaw 1.3 · 26/100

   Core library for RustyClaw — config, gateway protocol, secrets, tools, and shared types

   Version check not run yet

   Security crates.io Local

8. @C @checkspec/core io.github.jjevsikov/checkspec-asp6zv 1.3 · 26/100

   Core library for MCP server testing — recording client, test runner, schema-based fuzzing, and security scanning

   Version check not run yet

   Developer tools npm Local 1 a week MIT

9. @C @isagasi/codeguard-mcp-server io.github.isagasi/codeguard-mcp-server 1.3 · 26/100

   Centralized security instruction server for AI-assisted code generation

   Version check not run yet

   Developer tools npm Local 3 a week MIT

10. GN gc-nuclei-mcp io.github.gh05tcrew/nuclei-mcp 1.3 · 26/100

    Model Context Protocol (MCP) server for interacting with Nuclei vulnerability scanner

    Version check not run yet

    Security npm Local 37 a week APACHE-2.0

11. VM veladon-mcp-pii-redactor io.github.grindworks-studio/veladon-mcp 1.3 · 26/100

    MCP server that redacts PII/PHI/secrets from outbound prompts before they leave your AI agent. Deterministic, local, auditable — built for CISOs preparing for EU AI Act Article 26 (Aug 2, 2026) and IS

    Version check not run yet

    Security npm Local APACHE-2.0

12. TM tracecat-mcp-community io.github.adrojis/tracecat-mcp-community 1.3 · 26/100

    MCP server for Tracecat SOAR platform — 49 tools for workflows, actions, cases, secrets, tables, and more

    Version check not run yet

    Security npm Local 1 a week MIT

13. PS pmcp-server-toolkit io.github.paiml/rust-mcp-sdk-r6dg3j 1.3 · 26/100

    Runtime library for config-driven MCP servers — auth, secrets, static resources/prompts, [[tools]] synthesizer, code-mode wiring

    Version check not run yet

    Model and agent tools crates.io Local

14. @M @appknox/mcp-server io.github.appknox/appknox-mcp 1.3 · 26/100

    Official Model Context Protocol (MCP) server for Appknox - enables AI assistants to perform mobile application security testing

    Version check not run yet

    Developer tools npm Local 4 a week MIT

15. DV data-verify-mcp io.github.cccpan/data-verify-mcp 1.3 · 26/100

    MCP Server for identity verification, enterprise check, vehicle query, OCR recognition and risk assessment in China.

    Version check not run yet

    Security npm Local 1 a week MIT

16. @M @iflow-mcp/pantheon-security-notebooklm-mcp-secure io.github.pantheon-security/notebooklm-mcp-secure-tc95ps 1.3 · 26/100

    Security-hardened MCP server for NotebookLM API with enterprise compliance (GDPR, SOC2, CSSF)

    Version check not run yet

    Security npm Local 4 a week MIT

17. @S @stranzwersweb2/skillsmp-mcp io.github.adityasugandhi/skillsmp-mcp 1.3 · 26/100

    MCP server for SkillsMP — search, scan, install & uninstall Claude Code skills with built-in security scanning

    Version check not run yet

    Security npm Local 2 a week MIT

18. @M @vibecheckai/mcp-server io.github.vibecheckai/vibecheck-nq1b5a 1.3 · 26/100

    VibeCheck — AI Code Firewall | MCP Server for hallucination prevention in AI-assisted development

    Version check not run yet

    Security npm Local 3 a week MIT

19. AS agent-security-scanner-mcp-full io.github.sinewaveai/agent-security-layer-fork 1.3 · 26/100

    Full MCP security scanner with npm hallucination detection (3.3M npm packages). Use 'agent-security-scanner-mcp' for lightweight version without npm.

    Version check not run yet

    Security npm Local 3 a week MIT

20. AM adler-mcp io.github.commit3296/adler 1.3 · 26/100

    Model Context Protocol server for the Adler OSINT username-search engine — exposes scan / list / doctor / history tools, registry + scan-history resources, and OSINT workflow prompts.

    Version check not run yet

    Model and agent tools crates.io Local

21. PM pedant-mcp io.github.jostled-org/pedant 1.3 · 26/100

    MCP server exposing pedant security and capability analysis

    Version check not run yet

    Security crates.io Local

22. @A @clinetools/anonymizer io.github.clinetools/clinetools 1.3 · 26/100

    Replace PII (names, emails, phone numbers, addresses, SSNs) with realistic fake data. Consistent replacement across files.

    Version check not run yet

    Files and storage npm Local 2 a week MIT

23. TM truthsea-mcp-server io.github.turfptax/truthsea-mcp-server 1.3 · 26/100

    TruthSea MCP Server — AI agents verify claims, build epistemological dependency graphs, and earn TRUTH tokens through on-chain scoring with security-hardened contracts on Base L2

    Version check not run yet

    Developer tools npm Local 2 a week MIT

24. SI sipnab io.github.normb/sipnab 1.3 · 26/100

    SIP & RTP capture, analysis, and security tool

    Version check not run yet

    Security crates.io Local

25. MC murk-cli io.github.interrupted-sh/murk 1.3 · 26/100

    Encrypted secrets manager for developers — one file, age encryption, git-friendly

    Version check not run yet

    Git and code hosting crates.io Local

26. @E @growthspace-engineering/gs-mcp-proxy-pii-redactor io.github.growthspace-engineering/gs-mcp-proxy-pii-redactor 1.3 · 26/100

    MCP Proxy with PII Redaction & Tool Filtering

    Version check not run yet

    Security npm Local 8 a week MIT

27. @M @qantuslab/mcp-sdk io.github.qantuslab/mcp-sdk 1.3 · 26/100

    QantusLab SDK for MCP monitoring, security, and analytics

    Version check not run yet

    MCP development npm Local 7 a week MIT

28. @S @hlos/staamp-mcp io.github.hlos-ai/hlos-hlos-mcp-server 1.3 · 26/100

    STAAMP (Secure Trust Agent Access Management Protocol) MCP server - enables AI assistants to manage secrets without ever receiving credentials

    Version check not run yet

    Security npm Local

29. DR droidsaw io.github.droidsaw/droidsaw 1.3 · 26/100

    DROIDSAW — unified Android reverse engineering CLI. Hermes, DEX, APK signing. JSON output, MCP server. Bytecode is not a security layer.

    Version check not run yet

    Security crates.io Local

30. @M @easysolutions906/mcp-ofac com.npmjs.easysolutions906/mcp-ofac 1.3 · 26/100

    OFAC SDN sanctions screening API with fuzzy matching - screen names against the Treasury Department SDN list

    Version check not run yet

    Security npm Local ISC

31. @M @doc77/mcp io.github.xyy277/doc77 1.3 · 26/100

    Doc77 MCP — MCP protocol implementation, security guard, operation queue, transactions

    Version check not run yet

    Security npm Local 11 a week MIT

32. JD jdcodec io.github.jdcodec/connector 1.3 · 26/100

    JD Codec — local MCP proxy that compresses browser-agent snapshots ~80%+ via a cloud codec, with on-device PII redaction. The privacy-first connector for Playwright MCP and any MCP-capable agent.

    Version check not run yet

    Browser automation npm Local 11 a week APACHE-2.0

33. VA vacant io.github.alltuner/vacant 1.3 · 26/100

    Fast domain availability checker. Asks authoritative TLD nameservers directly instead of WHOIS.

    Version check not run yet

    Security crates.io Local

34. JR jshook-reverse-tool io.github.wuji1/jshook-reverse-tool-sswmw6 1.3 · 26/100

    AI-powered JavaScript reverse engineering tool with 80+ MCP tools for browser automation, debugging, network monitoring, and intelligent hooking

    Version check not run yet

    Browser automation npm Local 7 a week MIT

35. @M @iflow-mcp/szowesgad-mcp-server-semgrep io.github.szowesgad/mcp-server-semgrep 1.3 · 26/100

    MCP Server for Semgrep Integration - static code analysis with AI

    Version check not run yet

    Security npm Local 1 a week MIT

36. AG agentbrake io.github.ujjwaljain16/agentbrake 1.3 · 26/100

    The safety control plane for AI agents — a transparent MCP proxy that enforces security policies on tool calls in real-time.

    Version check not run yet

    Security npm Local 2 a week MIT

37. TO toolvault io.github.teamsparkai/toolvault 1.3 · 26/100

    ToolVault: An Integrated platform for AI agent tool management and security

    Version check not run yet

    Security npm Local 16 a week SEE-LICENSE-IN-LICENSE.MD

38. DG deca-guard-mcp-server io.github.tomtarpey/deca-guard-mcp-server 1.3 · 26/100

    MCP Server for code smell and security analysis

    Version check not run yet

    Security npm Local 4 a week MIT

39. @M @blindfold/mcp-server io.github.blindfold-dev/blindfold-mcp-server 1.3 · 26/100

    MCP server for Blindfold PII detection - protect sensitive data in AI conversations

    Version check not run yet

    Security npm Local 1 a week MIT

40. SG style-guide-mcp-server io.github.cbuntingde/style-guide-mcp-server 1.3 · 26/100

    Lightning-fast MCP server providing comprehensive programming style guides, security best practices, and code analysis for 15+ languages with intelligent caching and optimization

    Version check not run yet

    Developer tools npm Local 4 a week MIT

41. EM envshield-mcp io.github.yourusername/envshield-mcp 1.3 · 26/100

    MCP server that lets AI agents use secrets without seeing them

    Version check not run yet

    Security npm Local 4 a week MIT

42. @M @soufienne/mcp-server-driftguard io.github.ramailo1/mcp-server-driftguard 1.3 · 26/100

    A Firewall for Intelligence - MCP server that enforces strict state machine for agentic coding

    Version check not run yet

    Security npm Local 3 a week MIT

43. VA vaultproxy io.github.aaronckj/vaultproxy 1.3 · 26/100

    Secure credential sidecar for MCP servers — injects auth from Vaultwarden without exposing secrets to AI agents

    Version check not run yet

    Security crates.io Local

44. @M @oversecured/mcp io.github.oversecured/os-platform-mcp 1.3 · 26/100

    Oversecured MCP server for mobile application security scans

    Version check not run yet

    Security npm Local 4 a week

45. WM whois-mcp io.github.simplebytes-com/whois-mcp-25ba7b 1.3 · 26/100

    WHOIS MCP Server - Domain registration lookup using proper WHOIS protocol (port 43). Supports 877+ TLDs with parsing for 169 ccTLDs.

    Version check not run yet

    Security npm Local 8 a week MIT

46. @A @arvoretech/aws-secrets-manager-mcp io.github.arvoreeducacao/arvore-mcp-servers-aws-secrets-manager 1.3 · 26/100

    AWS Secrets Manager MCP Server for managing secrets

    Version check not run yet

    Cloud platforms npm Local 9 a week MIT

47. @M @royalpinto007/mcp-audit com.npmjs.royalpinto007/mcp-audit 1.3 · 26/100

    A security scanner and linter for Model Context Protocol (MCP) servers. Like npm audit / eslint, but for MCP.

    Version check not run yet

    Developer tools npm Local 62 a week MIT

48. MS mcp-security-agent io.github.johnjohn2410/mcp-security-agent 1.3 · 26/100

    An MCP-based security scanner and agentic AI for vulnerability detection

    Version check not run yet

    Security npm Local 15 a week MIT