Security MCP servers

3,377 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. WA Warden402 io.github.sukrutkrdg/warden402-mcp

   Pre-execution security for AI agents on Base: guard token/tx/address + per-agent spend firewall.

   Version check not run yet

   Security Official MCP Registry · npm Local 242 a week MIT

2. GI GitHits com.githits/githits

   Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.

   100% up · 30 days

   Developer tools Official MCP Registry · npm Local Remote 237 a week APACHE-2.0

3. ME Megalinter io.github.DownAtTheBottomOfTheMoleHole/megalinter

   MCP server for running Ox Security MegaLinter via mega-linter-runner

   Version check not run yet

   Developer tools Official MCP Registry · npm Local MIT

4. MG MCP Gateway Scan io.github.willianpinho/mcp-gateway-scan

   Read-only MCP/agent-gateway readiness scanner — scores a repo across 7 security dimensions.

   Version check not run yet

   Model and agent tools Official MCP Registry · npm Local 17 a week MIT

5. SH ShieldFive io.github.shieldfive/mcp

   Move files off your computer into an E2E-encrypted vault, verified first. Decrypts locally.

   Version check not run yet

   Developer tools Official MCP Registry · npm Local 219 a week MIT

6. MA Maltiverse io.github.mrfentmen/maltiverse-mcp

   Threat intelligence for IPs and domains from Maltiverse. No key required.

   Version check not run yet

   Security Official MCP Registry · npm Local 217 a week MIT

7. PS Phantom Secrets io.github.ashlrai/phantom-secrets-mcp

   Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.

   Version check not run yet

   Coding agent tools Official MCP Registry · npm · crates.io Local 59 a week MIT

8. MO MCP OpenClaw Extensions io.github.romainsantoli-web/mcp-openclaw

   138-tool MCP server for AI agent firms: security, A2A, Hebbian memory, fleet mgmt

   Version check not run yet

   Security Official MCP Registry · PyPI Local MIT

9. AU Authshore io.github.jyswee/authshore

   Auth infrastructure for coding agents. User pools, secrets vault, token management. As easy as git.

   100% up · 30 days

   Coding agent tools Official MCP Registry · npm Local Remote 210 a week SEE-LICENSE-IN

10. SM semgrep-mcp io.github.semgrep/mcp-changelog.md

    MCP Server for using Semgrep to scan code

    100% up · 30 days

    Security PyPI · Docker MCP Catalog · Docker MCP Registry Local Remote MIT

11. FO FormVault io.github.terjetyl/formvault

    Create and manage GDPR-compliant, EU-hosted forms from any MCP-compatible AI assistant.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 198 a week MIT

12. X6 X64dbg io.github.bromoket/x64dbg

    MCP server for x64dbg debugger - 23 mega-tools for AI-powered reverse engineering and debugging

    Version check not run yet

    Developer tools Official MCP Registry · npm Local 197 a week MIT

13. SH shieldcortex io.github.drakon-systems-ltd/shieldcortex

    Trustworthy memory and security for AI agents. Memory firewall for any host that writes through it; runtime tool gates on Claude Code, OpenClaw, and Hermes.

    Version check not run yet

    Security npm Local 1.5k a week MIT

14. OH Ohdear io.github.mrfentmen/ohdear-mcp

    Uptime, TLS and DNS checks for any website - no API key.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · npm Local 195 a week MIT

15. AF Agent Firewall io.github.mlawsonking/agent-firewall-mcp

    Input/output safety for AI agents: known-pattern injection and obfuscation scan, URL/IP, secrets.

    Version check not run yet

    Security Official MCP Registry · npm Local 52 a week MIT

16. NR Node Runtime io.github.mcp-protocol/node-runtime

    This package is intended for demonstration only. Maintained by JFrog Security.

    Version check not run yet

    Security Official MCP Registry · npm Local MIT

17. EI Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database com.exploit-intel/eip-mcp

    Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)

    0% up · 30 days

    Security Official MCP Registry · PyPI Local Remote MIT

18. WA Watchdog io.github.bountyyfi/mcp-watchdog

    MCP security proxy - detects and blocks 40+ MCP attack classes. Zero config.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

19. NN Nist Nvd io.github.cyanheads/nist-nvd-mcp-server

    Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 171 a week APACHE-2.0

20. FI Fidacy io.github.lucaslubi/fidacy-mcp

    AI Agent Firewall. Enforce signed authority before consequential actions. Free API key required.

    Version check not run yet

    Security Official MCP Registry · npm Local 168 a week APACHE-2.0

21. SS Security Suite io.github.GuardBee/security-suite

    Every GuardBee MCP security tool in one server: OWASP MCP Top 10, secrets, supply chain, TLS/DNS

    Version check not run yet

    Security Official MCP Registry · npm Local 165 a week MIT

22. IA Infomaniak Agent io.github.Mogacode-ma/infomaniak-mcp-agent

    Unofficial Infomaniak MCP — hosting, Node.js, mail, DNS, kDrive, SSL, VPS, domains. 81 tools.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · npm Local 45 a week MIT

23. MC MCP Code Review Server io.github.GoodJobwilliam/aicraft-code-review

    Code review as an MCP server — structured reviews with OWASP security scanning.

    Version check not run yet

    Developer tools Official MCP Registry Local

24. OP OpenOSINT io.github.OpenOSINT/openosint

    AI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.

    Version check not run yet

    Security Official MCP Registry Local

25. BS Bawbel Scanner io.github.bawbel/bawbel-scanner

    Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

    Version check not run yet

    Security Official MCP Registry Local

26. MA Marketnow io.github.edgarfloresguerra2011-a11y/marketnow

    MCP marketplace with 8,845 security-audited skills. 9-layer Sentinel audit + ATC trust cards.

    Version check not run yet

    Security Official MCP Registry Local

27. VA Valca io.github.pranlabs/valca

    Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · GitHub MCP Registry Local

28. RO Rosettahub io.github.danielcregg/rosettahub-mcp-server

    Manage RosettaHUB user AWS accounts — budgets, AWS CLI, access control.

    Version check not run yet

    Cloud platforms Official MCP Registry · PyPI Local MIT

29. IA IntoDNS.ai DNS & Email Security Scanner ai.intodns/scanner

    DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry · npm Local Remote 42 a week MIT

30. AC Automotive Cybersecurity io.github.Ansvar-Systems/automotive-cybersecurity

    Automotive cybersecurity: R155/R156 regulations, ISO 21434, TISAX, AUTOSAR, Chinese GB/T

    Version check not run yet

    Security Official MCP Registry · npm Local APACHE-2.0

31. AG Approval Gate io.github.itcustomsolution/approval-gate-mcp

    Fail-closed human approval gates for AI agent actions. Default-deny, TTL expiry, audit log.

    Version check not run yet

    Security Official MCP Registry · npm Local 147 a week MIT

32. PE Pentest io.github.cyanheads/pentest-mcp-server

    Offline methodology engine for authorized penetration testing, CTF, and security research.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 145 a week APACHE-2.0

33. OA Osv Advisory io.github.cyanheads/osv-advisory-mcp-server

    Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

    100% up · 30 days

    Developer tools Official MCP Registry · npm Local Remote 144 a week APACHE-2.0

34. F2 FedRAMP 20x Requirements io.github.KevinRabun/FedRAMP20xMCP

    An MCP server that provides access to FedRAMP 20x security requirements and controls.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

35. GS GDPR Shift-Left Compliance io.github.KevinRabun/GDPRShiftLeftMCP

    GDPR compliance MCP server - article lookup, DPIA, ROPA, DSR, IaC analysis, Bicep templates.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

36. SS Sanctions Screening io.github.cyanheads/sanctions-screening-mcp-server

    Screen names against OFAC, EU, UK, UN sanctions lists; resolve entities via GLEIF. Screening aid.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 128 a week APACHE-2.0

37. PR Promptrejectormcp io.github.revsmoke/promptrejectormcp

    Security gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.

    Version check not run yet

    Security Official MCP Registry · npm Local 34 a week ISC

38. CS Code Sanitizer io.github.notasandy/mcp-code-sanitizer

    Strict AI code reviewer powered by Groq. Finds bugs and vulnerabilities.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

39. WW Works With Agents MCP io.github.vystartasv/wwa-mcp

    14 MCP tools: facts, pitfalls, skills, handoff protocols, trust scores, identity verification.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

40. NS Notebooklm Secure io.github.Pantheon-Security/notebooklm-mcp-secure

    Security-hardened NotebookLM MCP with post-quantum encryption

    Version check not run yet

    Security Official MCP Registry · npm Local 115 a week MIT

41. SC Security Controls io.github.Ansvar-Systems/security-controls

    1,451 security controls across 261 frameworks with bidirectional mapping

    Version check not run yet

    Security Official MCP Registry · PyPI Local APACHE-2.0

42. DA Darkmoon io.github.ASCIT31/darkmoon-mcp-server

    Drive a self-hosted Darkmoon Pro AI pentest instance: start runs, read campaigns and findings.

    Version check not run yet

    Security Official MCP Registry · npm Local 31 a week GPL-3.0-ONLY

43. SI Ssl Inspector io.github.GuardBee/ssl-inspector

    TLS certificate/cipher/protocol inspection

    Version check not run yet

    Security Official MCP Registry · npm Local 114 a week MIT

44. KE Keyblind io.github.aarifmms/keyblind

    Encrypted secrets vault for AI agents. 27 MCP tools resolve secrets at runtime, never leaking them.

    Version check not run yet

    Security Official MCP Registry · npm Local 31 a week MIT

45. FA Fairquery Agent Trust & Data Safety com.getfairquery/agent-trust-mcp

    PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 2.4k a week MIT

46. CR chat-recall io.github.munhq/chat-recall

    One searchable history across every AI coding tool, with secret scanning and a shared task board.

    100% up · 30 days

    Communication and chat Official MCP Registry · npm Local Remote 110 a week ELASTIC-2.0

47. SH Shellward io.github.jnMetaCode/shellward

    AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

    Version check not run yet

    Security Official MCP Registry · npm Local 101 a week APACHE-2.0

48. WY Wyrm lk.ghosts/wyrm

    Local-first memory for AI agents: ground truths, failure firewall, negotiated recall over MCP.

    Version check not run yet

    Memory and context Official MCP Registry · npm Local 101 a week SEE-LICENSE-IN