Security MCP servers
3,561 servers
Scan code and dependencies, look up vulnerabilities and work with security tools.
- swyftstack-mcp
com.npmjs/swyftstack-mcpOfficial Swyftstack MCP server — manage databases, storage, backups, imports, IP allow-lists, RLS, SSL and billing from AI assistants. Connect with one command via browser device login (no API key to
Version check not run yet
Files and storage npm Local 3 a week MIT
- galata-vault
io.github.sercanatalik/galata-vaultEnd-to-end-encrypted secrets and config documents with no accounts: the galata-vault Rust SDK. A token client and the owner API over a pluggable transport, with an optional in-process backend.
Version check not run yet
Security crates.io Local
- stellar-cyber-mcp-agents
io.github.tsanford01/stellar-cyber-mcp-agentsModel Context Protocol (MCP) server for Stellar Cyber security operations with specialized multi-agent analysis capabilities
Version check not run yet
Security npm Local 6 a week MIT
- vuln-mcp-example-secrets-pii
io.github.appsecco/pentesting-mcp-servers-f0w8t7A simple MCP server with IP, weather, and news tools
Version check not run yet
Security npm Local 61 a week MIT
- @rashidazarang/propertyware-mcp
io.github.rashidazarang/propertyware-mcpEnterprise PropertyWare MCP Server - Complete integration with PropertyWare API featuring advanced security, performance optimization, comprehensive analytics, and compliance reporting. Includes authe
Version check not run yet
Data warehouses and analytics npm Local 5 a week MIT
- @rashidazarang/propertyware-mcp-server
io.github.rashidazarang/propertyware-mcp-9js3hnThe Best PropertyWare MCP Server in Existence - Enterprise-grade Model Context Protocol server with advanced features, caching, security, and monitoring
Version check not run yet
Monitoring and observability npm Local 5 a week MIT
- agentsec
io.github.ynishi/agentsecAgentSec — Agent ecosystem security suite (inventory scan / web sanitize / paste detection)
Version check not run yet
Security crates.io Local
- skills-guard-mcp
io.github.skills-guard/skills-guard-mcpSkills Guard MCP Server - Model Context Protocol Server for Agent Skills Security
Version check not run yet
Security npm Local MIT
- euvd-enisa-mcp
io.github.dankress/euvd-enisa-mcpMCP server for accessing EUVD (European Vulnerability Database) and ENISA security data
Version check not run yet
Security npm Local 6 a week APACHE-2.0
- @skybersec/opencti-mcp
io.github.skybersec/opencti-mcp-serverComprehensive MCP server for OpenCTI threat intelligence platform
Version check not run yet
Security npm Local 5 a week MIT
- @missionsquad/mcp-helper-tools
io.github.missionsquad/mcp-helper-toolsMCP server providing encoding, geolocation, generator, datetime, and security tools
Version check not run yet
Security npm Local 9 a week APACHE-2.0
- cain-mcp-maigret
io.github.burtthecoder/mcp-maigret-cksk6hCAIN MCP server for maigret - OSINT username search across social networks
Version check not run yet
Security npm Local 7 a week MIT
- whodis-mcp-server
io.github.vinsidious/whodis-mcp-serverWhodis MCP Server for checking the availability of domain names using WHOIS lookups.
Version check not run yet
DevOps and infrastructure npm Local 8 a week ISC
- gc-assetfinder-mcp
io.github.gh05tcrew/mcp-for-security-main-assetfinder-mcpModel Context Protocol (MCP) server for Assetfinder - Passive subdomain discovery tool
Version check not run yet
Security npm Local 7 a week APACHE-2.0
- @mseep/mcp-dnstwist
io.github.burtthecoder/mcp-dnstwist-ymzzqwMCP server for dnstwist - DNS fuzzing to detect typosquatting, phishing and corporate espionage
Version check not run yet
DevOps and infrastructure npm Local 8 a week MIT
- @mseep/mcp-shodan
io.github.burtthecoder/mcp-shodan-f2cv5dA Model Context Protocol server for Shodan API queries.
Version check not run yet
Security npm Local 8 a week MIT
- Mondoo Security
io.github.mondoohq/cnspecVS Code extension for Mondoo security with cnspec (infrastructure & policy) and xgrep (code), including AI agent skills for both.
Not checked yet
Security Open VSX PROPRIETARY
- @blacksandscyber/mcp-server-bursar
com.npmjs.blacksandscyber/mcp-server-bursarBlacksands Bursar MCP server: free local codebase security scan and architecture atlas for AI agents, plus zero-trust provisioning, certificate, policy and Receiver management with a Blacksands accoun
Version check not run yet
Security npm Local 67 a week MIT
- @devinlai/document-library-mcp
io.github.example/document-library-mcpMCP server for reading template files from local directory with security restrictions
Version check not run yet
Office documents and spreadsheets npm Local 3 a week MIT
- ludus-mcp
io.github.noctedefensor/ludusmcp-mv9xsyMCP server for managing Ludus cybersecurity training environments through natural language commands
Version check not run yet
Security npm Local 4 a week GPL-3.0
- mcp-security-copilot-2025
io.github.kangjunlee/mcp-security-copilotAI Security Copilot for 2025 - MCP Server for comprehensive security analysis
Version check not run yet
Security npm Local 3 a week MIT
- security-auditor-mcp
io.github.jackie-z528/security-auditor-mcpVersion check not run yet
Security npm Local 2 a week ISC
- mcp-server-core
io.github.trozz/mcp-server-core-rsA batteries-included base for Model Context Protocol (MCP) servers over Streamable HTTP: OAuth 2.1 sign-in, TLS, per-service routing, abuse limits and observability on top of rmcp.
Version check not run yet
Monitoring and observability crates.io Local
- gc-shuffledns-mcp
io.github.gh05tcrew/mcp-for-security-main-shuffledns-mcpModel Context Protocol (MCP) server for shuffledns - High-speed DNS brute-forcing and resolution tool
Version check not run yet
Security npm Local 6 a week APACHE-2.0
- osv-mcp
io.github.jlfn/osv-mcp-rsMCP server for CVE and security advisory lookup via OSV.dev
Version check not run yet
Security crates.io Local
- Boundaryai
ai.boundaryai/boundaryaiDeterministic runtime safety for AI agents: scan PII, gate tool actions, verify LLM output.
100% up · 30 days
Security Official MCP Registry Remote
- Agent Sec
ai.kernora/agent-secZero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.
100% up · 30 days
Coding agent tools Official MCP Registry Remote
- SOAR Record Gateway
ai.lateos/soar-record-gatewaySOAR security playbooks for AI agents: fetch, full-text search, and count. Metered via Stripe.
100% up · 30 days
Security Official MCP Registry Remote
- Limitguard Lead Verification
ai.limitguard.api/limitguardLead validation over MCP: KVK/KBO register, EU VAT, sanctions and email checks with sources.
100% up · 30 days
Security Official MCP Registry Remote
- Name.ai MCP Server
ai.name/nameai-mcpDomain availability search, WHOIS lookup, TLD pricing and registry rules from name.ai. Read-only.
100% up · 30 days
Security Official MCP Registry Remote
- Fathom
ai.qompass/fathomReverse-engineering tools for agents over MCP/A2A, with evidence-carrying findings.
Version check not run yet
Security Official MCP Registry Local
- Rail Score
ai.responsibleailabs/rail-scoreResponsible-AI guardrails for agents: scoring with policy, injection & PII detection, DPDP.
0% up · 30 days
Maps and location Official MCP Registry Remote
- Gateway
ai.sealgate/gatewayMCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.
100% up · 30 days
Security Official MCP Registry Remote
- Sekura
ai.sekura/sekuraScan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.
100% up · 30 days
Git and code hosting Official MCP Registry Remote
- Python Code Validator
ai.statemind/python-code-validatorProves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.
100% up · 30 days
Developer tools Official MCP Registry Remote
- Trent
ai.trent/trentSecurity reviews, threat models over a repo or website, and remediation tracking, in your editor.
100% up · 30 days
Security Official MCP Registry Remote
- VulX Watch
ai.vulx/watchIndependent security review for AI-built apps. Watch a GitHub repo. Never a patch.
100% up · 30 days
Git and code hosting Official MCP Registry Remote
- APICK Identity
app.apick/identityKorean ID document verification and PII masking APIs
100% up · 30 days
Security Official MCP Registry Remote
- Domain Lab
app.domainlab/domain-labTrack domain expiry, DNS, SSL and email security across registrars, and explain what changed.
100% up · 30 days
Security Official MCP Registry Remote
- CVE Risk Check
app.openkrill/cveTriage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.
100% up · 30 days
Security Official MCP Registry Remote
- Package Health Check
app.openkrill/packagesCheck an npm or Python package, or a package.json, for vulnerabilities and upkeep.
100% up · 30 days
Monitoring and observability Official MCP Registry Remote
- Automo Build
build.automo/automo-buildOperate Automo Build, the AI app builder, as yourself: projects, builds, QA, security, deployments.
Address set by you
Developer tools Official MCP Registry Remote
- Vigía
cloud.coredls.vigia/vigiaWhat breaks between versions, vulnerabilities, compatible versions, EOL dates: npm, PyPI, Rust, PHP.
100% up · 30 days
Security Official MCP Registry Remote
- Fetcher
cloud.fetcher/fetcherThe web capability layer for AI agents: render, extract, DNS, SSL, WHOIS & more via x402.
100% up · 30 days
Security Official MCP Registry Remote
- LaunchTrust
co.launchtrust/launchtrustCompliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
100% up · 30 days
Security Official MCP Registry Remote
- 4bl1ty
com.4bl1ty/mcpHire humans for physical-world tasks from your AI agent: missions, claims, proof, KYC status.
100% up · 30 days
Security Official MCP Registry Remote
- IT Security — Access Change Request Recertify — Alder Court Partners (b578285f)
com.a2awire/benchmark-access-change-request-recertify-2026-09-15-b578285f12 synthetic access change request exception cases: duplicate payments, policy-watch list entries, m
100% up · 30 days
Security Official MCP Registry Remote
- Policyholder Operations — Claim Review — Quillon Indemnity Co. (4cd7d405)
com.a2awire/benchmark-claim-review-2026-09-10-4cd7d40512 synthetic claim exception cases: duplicate payouts, fraud watch list entries, missing proof of lo
84.64% up · 30 days
Security Official MCP Registry Remote