Security MCP servers

3,561 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

  1. swyftstack-mcp com.npmjs/swyftstack-mcp

    Official Swyftstack MCP server — manage databases, storage, backups, imports, IP allow-lists, RLS, SSL and billing from AI assistants. Connect with one command via browser device login (no API key to

    Version check not run yet

    Files and storage npm Local 3 a week MIT

  2. galata-vault io.github.sercanatalik/galata-vault

    End-to-end-encrypted secrets and config documents with no accounts: the galata-vault Rust SDK. A token client and the owner API over a pluggable transport, with an optional in-process backend.

    Version check not run yet

    Security crates.io Local

  3. stellar-cyber-mcp-agents io.github.tsanford01/stellar-cyber-mcp-agents

    Model Context Protocol (MCP) server for Stellar Cyber security operations with specialized multi-agent analysis capabilities

    Version check not run yet

    Security npm Local 6 a week MIT

  4. vuln-mcp-example-secrets-pii io.github.appsecco/pentesting-mcp-servers-f0w8t7

    A simple MCP server with IP, weather, and news tools

    Version check not run yet

    Security npm Local 61 a week MIT

  5. @rashidazarang/propertyware-mcp io.github.rashidazarang/propertyware-mcp

    Enterprise PropertyWare MCP Server - Complete integration with PropertyWare API featuring advanced security, performance optimization, comprehensive analytics, and compliance reporting. Includes authe

    Version check not run yet

    Data warehouses and analytics npm Local 5 a week MIT

  6. @rashidazarang/propertyware-mcp-server io.github.rashidazarang/propertyware-mcp-9js3hn

    The Best PropertyWare MCP Server in Existence - Enterprise-grade Model Context Protocol server with advanced features, caching, security, and monitoring

    Version check not run yet

    Monitoring and observability npm Local 5 a week MIT

  7. agentsec io.github.ynishi/agentsec

    AgentSec — Agent ecosystem security suite (inventory scan / web sanitize / paste detection)

    Version check not run yet

    Security crates.io Local

  8. skills-guard-mcp io.github.skills-guard/skills-guard-mcp

    Skills Guard MCP Server - Model Context Protocol Server for Agent Skills Security

    Version check not run yet

    Security npm Local MIT

  9. euvd-enisa-mcp io.github.dankress/euvd-enisa-mcp

    MCP server for accessing EUVD (European Vulnerability Database) and ENISA security data

    Version check not run yet

    Security npm Local 6 a week APACHE-2.0

  10. @skybersec/opencti-mcp io.github.skybersec/opencti-mcp-server

    Comprehensive MCP server for OpenCTI threat intelligence platform

    Version check not run yet

    Security npm Local 5 a week MIT

  11. @missionsquad/mcp-helper-tools io.github.missionsquad/mcp-helper-tools

    MCP server providing encoding, geolocation, generator, datetime, and security tools

    Version check not run yet

    Security npm Local 9 a week APACHE-2.0

  12. cain-mcp-maigret io.github.burtthecoder/mcp-maigret-cksk6h

    CAIN MCP server for maigret - OSINT username search across social networks

    Version check not run yet

    Security npm Local 7 a week MIT

  13. whodis-mcp-server io.github.vinsidious/whodis-mcp-server

    Whodis MCP Server for checking the availability of domain names using WHOIS lookups.

    Version check not run yet

    DevOps and infrastructure npm Local 8 a week ISC

  14. gc-assetfinder-mcp io.github.gh05tcrew/mcp-for-security-main-assetfinder-mcp

    Model Context Protocol (MCP) server for Assetfinder - Passive subdomain discovery tool

    Version check not run yet

    Security npm Local 7 a week APACHE-2.0

  15. @mseep/mcp-dnstwist io.github.burtthecoder/mcp-dnstwist-ymzzqw

    MCP server for dnstwist - DNS fuzzing to detect typosquatting, phishing and corporate espionage

    Version check not run yet

    DevOps and infrastructure npm Local 8 a week MIT

  16. @mseep/mcp-shodan io.github.burtthecoder/mcp-shodan-f2cv5d

    A Model Context Protocol server for Shodan API queries.

    Version check not run yet

    Security npm Local 8 a week MIT

  17. Mondoo Security io.github.mondoohq/cnspec

    VS Code extension for Mondoo security with cnspec (infrastructure & policy) and xgrep (code), including AI agent skills for both.

    Not checked yet

    Security Open VSX PROPRIETARY

  18. @blacksandscyber/mcp-server-bursar com.npmjs.blacksandscyber/mcp-server-bursar

    Blacksands Bursar MCP server: free local codebase security scan and architecture atlas for AI agents, plus zero-trust provisioning, certificate, policy and Receiver management with a Blacksands accoun

    Version check not run yet

    Security npm Local 67 a week MIT

  19. @devinlai/document-library-mcp io.github.example/document-library-mcp

    MCP server for reading template files from local directory with security restrictions

    Version check not run yet

    Office documents and spreadsheets npm Local 3 a week MIT

  20. ludus-mcp io.github.noctedefensor/ludusmcp-mv9xsy

    MCP server for managing Ludus cybersecurity training environments through natural language commands

    Version check not run yet

    Security npm Local 4 a week GPL-3.0

  21. mcp-security-copilot-2025 io.github.kangjunlee/mcp-security-copilot

    AI Security Copilot for 2025 - MCP Server for comprehensive security analysis

    Version check not run yet

    Security npm Local 3 a week MIT

  22. security-auditor-mcp io.github.jackie-z528/security-auditor-mcp

    Version check not run yet

    Security npm Local 2 a week ISC

  23. mcp-server-core io.github.trozz/mcp-server-core-rs

    A batteries-included base for Model Context Protocol (MCP) servers over Streamable HTTP: OAuth 2.1 sign-in, TLS, per-service routing, abuse limits and observability on top of rmcp.

    Version check not run yet

    Monitoring and observability crates.io Local

  24. gc-shuffledns-mcp io.github.gh05tcrew/mcp-for-security-main-shuffledns-mcp

    Model Context Protocol (MCP) server for shuffledns - High-speed DNS brute-forcing and resolution tool

    Version check not run yet

    Security npm Local 6 a week APACHE-2.0

  25. osv-mcp io.github.jlfn/osv-mcp-rs

    MCP server for CVE and security advisory lookup via OSV.dev

    Version check not run yet

    Security crates.io Local

  26. Boundaryai ai.boundaryai/boundaryai

    Deterministic runtime safety for AI agents: scan PII, gate tool actions, verify LLM output.

    100% up · 30 days

    Security Official MCP Registry Remote

  27. Agent Sec ai.kernora/agent-sec

    Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.

    100% up · 30 days

    Coding agent tools Official MCP Registry Remote

  28. SOAR Record Gateway ai.lateos/soar-record-gateway

    SOAR security playbooks for AI agents: fetch, full-text search, and count. Metered via Stripe.

    100% up · 30 days

    Security Official MCP Registry Remote

  29. Limitguard Lead Verification ai.limitguard.api/limitguard

    Lead validation over MCP: KVK/KBO register, EU VAT, sanctions and email checks with sources.

    100% up · 30 days

    Security Official MCP Registry Remote

  30. Name.ai MCP Server ai.name/nameai-mcp

    Domain availability search, WHOIS lookup, TLD pricing and registry rules from name.ai. Read-only.

    100% up · 30 days

    Security Official MCP Registry Remote

  31. Fathom ai.qompass/fathom

    Reverse-engineering tools for agents over MCP/A2A, with evidence-carrying findings.

    Version check not run yet

    Security Official MCP Registry Local

  32. Rail Score ai.responsibleailabs/rail-score

    Responsible-AI guardrails for agents: scoring with policy, injection & PII detection, DPDP.

    0% up · 30 days

    Maps and location Official MCP Registry Remote

  33. Gateway ai.sealgate/gateway

    MCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.

    100% up · 30 days

    Security Official MCP Registry Remote

  34. Sekura ai.sekura/sekura

    Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.

    100% up · 30 days

    Git and code hosting Official MCP Registry Remote

  35. Python Code Validator ai.statemind/python-code-validator

    Proves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.

    100% up · 30 days

    Developer tools Official MCP Registry Remote

  36. Trent ai.trent/trent

    Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

    100% up · 30 days

    Security Official MCP Registry Remote

  37. VulX Watch ai.vulx/watch

    Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.

    100% up · 30 days

    Git and code hosting Official MCP Registry Remote

  38. APICK Identity app.apick/identity

    Korean ID document verification and PII masking APIs

    100% up · 30 days

    Security Official MCP Registry Remote

  39. Domain Lab app.domainlab/domain-lab

    Track domain expiry, DNS, SSL and email security across registrars, and explain what changed.

    100% up · 30 days

    Security Official MCP Registry Remote

  40. CVE Risk Check app.openkrill/cve

    Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.

    100% up · 30 days

    Security Official MCP Registry Remote

  41. Package Health Check app.openkrill/packages

    Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.

    100% up · 30 days

    Monitoring and observability Official MCP Registry Remote

  42. Automo Build build.automo/automo-build

    Operate Automo Build, the AI app builder, as yourself: projects, builds, QA, security, deployments.

    Address set by you

    Developer tools Official MCP Registry Remote

  43. Vigía cloud.coredls.vigia/vigia

    What breaks between versions, vulnerabilities, compatible versions, EOL dates: npm, PyPI, Rust, PHP.

    100% up · 30 days

    Security Official MCP Registry Remote

  44. Fetcher cloud.fetcher/fetcher

    The web capability layer for AI agents: render, extract, DNS, SSL, WHOIS & more via x402.

    100% up · 30 days

    Security Official MCP Registry Remote

  45. LaunchTrust co.launchtrust/launchtrust

    Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

    100% up · 30 days

    Security Official MCP Registry Remote

  46. 4bl1ty com.4bl1ty/mcp

    Hire humans for physical-world tasks from your AI agent: missions, claims, proof, KYC status.

    100% up · 30 days

    Security Official MCP Registry Remote

  47. IT Security — Access Change Request Recertify — Alder Court Partners (b578285f) com.a2awire/benchmark-access-change-request-recertify-2026-09-15-b578285f

    12 synthetic access change request exception cases: duplicate payments, policy-watch list entries, m

    100% up · 30 days

    Security Official MCP Registry Remote

  48. Policyholder Operations — Claim Review — Quillon Indemnity Co. (4cd7d405) com.a2awire/benchmark-claim-review-2026-09-10-4cd7d405

    12 synthetic claim exception cases: duplicate payouts, fraud watch list entries, missing proof of lo

    84.64% up · 30 days

    Security Official MCP Registry Remote