Security MCP servers

3,562 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. DP DPOLens com.dpolens/dpolens 1.2 · 23/100

   Privacy law your AI assistant can cite: the exact clause and its version. GDPR and UAE PDPL today.

   100% up · 30 days

   Security Official MCP Registry Remote

2. DR Dregs com.dregs/dregs-mcp 1.2 · 23/100

   Fraud and abuse detection for SaaS: investigate scored identities, triage escalations, tune rules.

   100% up · 30 days

   Security Official MCP Registry Remote

3. FS FEDLIN Scanners com.fedlin/fedlin-mcp-server 1.2 · 23/100

   Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.

   100% up · 30 days

   Security Official MCP Registry Remote

4. FN FernTool Network Tools com.ferntool/ip 1.2 · 23/100

   24 free tools: IP/VPN lookup, WHOIS, DNS, SPF/DMARC, site up/down, redirects, time zones. No key.

   100% up · 30 days

   DevOps and infrastructure Official MCP Registry Remote

5. GB Gemalli B2B Trade com.gemalli/trade 1.2 · 23/100

   Global B2B trade: verified manufacturers, product search, sanctions screening, HS codes.

   100% up · 30 days

   Legal and compliance Official MCP Registry Remote

6. HI HiddenSwap com.hiddenswap/swap 1.2 · 23/100

   No-KYC crypto swaps, no account or email. Read-only quotes, coins, swap links, order status.

   100% up · 30 days

   Security Official MCP Registry Remote

7. LA LayerCall com.layercall/trust-api 1.2 · 23/100

   Score an IP, email, phone, domain or device for fraud in one call, with the signals behind it.

   100% up · 30 days

   Security Official MCP Registry Remote

8. MC Moltline Code Review com.moltlinestudio/codereview 1.2 · 23/100

   Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.

   100% up · 30 days

   Developer tools Official MCP Registry Remote

9. NE Netmon com.netmon/netmon 1.2 · 23/100

   Query devices, alerts, syslog, Suricata IDS, NetFlow and captures on your Netmon appliance.

   Version check not run yet

   Monitoring and observability Official MCP Registry Local

10. NO Nocticas com.nocticas/nocticas 1.2 · 23/100

    Browser QA agent that won't return a false green: verified PASS/FAIL + access-control probing.

    100% up · 30 days

    Developer tools Official MCP Registry Remote

11. DI Domain Intelligence com.oti-labs/domain-intelligence 1.2 · 23/100

    WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.

    100% up · 30 days

    Security Official MCP Registry Remote

12. OT OTInstaller com.otinstaller/ot 1.2 · 23/100

    Install and run open-source OSINT tools in a local sandbox, asking before runs that touch a target.

    Version check not run yet

    Security Official MCP Registry Local

13. OR OTInstaller Registry com.otinstaller/registry 1.2 · 23/100

    Read-only search of the OTInstaller registry of OSINT tools and guides, with consent classes.

    100% up · 30 days

    Security Official MCP Registry Remote

14. PF Paladin Front PHP Rescue & Zero-PHP Migration MCP com.paladinfront.www/php-rescue-mcp 1.2 · 23/100

    PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

    100% up · 30 days

    Security Official MCP Registry Remote

15. SC SSL Certificate Check com.powmcp/ssl-certificate-check 1.2 · 23/100

    Inspect one endpoint's served certificate, expiry, hostname coverage, and accepted TLS versions.

    100% up · 30 days

    Security Official MCP Registry Remote

16. FF Feldspar free repository security scan com.project-feldspar/scan 1.2 · 23/100

    Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

    100% up · 30 days

    Git and code hosting Official MCP Registry Remote

17. PY Pyxmark com.pyxmark/pyxmark 1.2 · 23/100

    Vendor checks: sanctions lists, SEC filings, domain age and a due-diligence report with sources.

    100% up · 30 days

    Security Official MCP Registry Remote

18. RO Royal com.royalplugins/royal-mcp 1.2 · 23/100

    Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org.

    100% up · 30 days

    Security Official MCP Registry Remote

19. SE Secdim com.secdim/mcp 1.2 · 23/100

    Personalised developer security learning pathways from SecDim's challenges and courses.

    100% up · 30 days

    Education Official MCP Registry Remote

20. SQ squirrelscan com.squirrelscan/squirrelscan 1.2 · 23/100

    Website QA for your coding agent: audit SEO, performance, security, accessibility over MCP.

    100% up · 30 days

    Developer tools Official MCP Registry Remote

21. TR Tektolo Rental Property com.tektolo/rental-property 1.2 · 23/100

    Rental property tools for agents: turnover cost estimates and security deposit rules by US state.

    100% up · 30 days

    Security Official MCP Registry Remote

22. DR Draco com.thetempleofdoom.draco/draco 1.2 · 23/100

    Coding & security oracle grounded in 1855 real books. Cited answers via MCP.

    0% up · 30 days

    Security Official MCP Registry Remote

23. TR TLS Radar com.tlsradar/tlsradar 1.2 · 23/100

    SSL/TLS scanning, free Let's Encrypt issuance, and certificate-expiry monitoring.

    100% up · 30 days

    Security Official MCP Registry Remote

24. TO ToolYour com.toolyour/mcp 1.2 · 23/100

    Remote MCP: plan, run, verify for SEO/security/ship-gate. Same REST API key; 500 free credits/month.

    100% up · 30 days

    Security Official MCP Registry Remote

25. TT Truss Threat Intelligence com.truss-security/truss-mcp 1.2 · 23/100

    Query Truss threat intelligence via hosted MCP (OAuth). Growth+ plans.

    100% up · 30 days

    Security Official MCP Registry Remote

26. SS Sanctions Screening com.watchtower-api/sanctions-screening 1.2 · 23/100

    Sanctions screening, KYB, identifier validation, jurisdiction risk & secret scanning for AI agents

    0% up · 30 days

    Security Official MCP Registry Remote

27. WS Website Search com.zeltser/website-search 1.2 · 23/100

    Improve security writing, score it against rubrics, plan IR, CTI, vuln, and product strategy.

    100% up · 30 days

    Security Official MCP Registry Remote

28. AR AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) dev.agentdiet/cve-intel 1.2 · 23/100

    Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.

    100% up · 30 days

    Security Official MCP Registry Remote

29. AD AgentDiet Domain OSINT, TLS Certificate & Security Headers Recon dev.agentdiet/domain-osint 1.2 · 23/100

    Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.

    100% up · 30 days

    Security Official MCP Registry Remote

30. IM Imperium MCP Security — Prompt-Injection, Jailbreak & Tool Poisoning Firewall dev.agentdiet/mcp-security 1.2 · 23/100

    Real-time MCP & A2A prompt-injection, jailbreak, and tool-schema poisoning firewall for AI agents.

    100% up · 30 days

    Security Official MCP Registry Remote

31. CL Clearparty dev.clearparty/clearparty 1.2 · 23/100

    KYB for AI agents: GLEIF entity, parent chain, sanctions and EU VAT checks. Data lookup only.

    100% up · 30 days

    Security Official MCP Registry Remote

32. EC Ecoa dev.ecoa/ecoa 1.2 · 23/100

    Verificação de segurança e conformidade de sites: cabeçalhos, TLS, DNS, e-mail, LGPD e pentest.

    100% up · 30 days

    Security Official MCP Registry Remote

33. VA Verify a Company dev.hatchloop/company-verification 1.2 · 23/100

    Verify a company on GLEIF LEI and SEC EDGAR, screen sanctions. No key; quota-free data.

    100% up · 30 days

    Security Official MCP Registry Remote

34. CC Compliance Check dev.hatchloop/compliance-check 1.2 · 23/100

    Preview a TCPA/GDPR/CASL/10DLC gate result before spending a paid send. No key needed.

    100% up · 30 days

    Legal and compliance Official MCP Registry Remote

35. SS Sanctions Screening dev.hatchloop/sanctions-screening 1.2 · 23/100

    Screen a name or entity against OFAC SDN, the EU Consolidated list and the UK list.

    100% up · 30 days

    Security Official MCP Registry Remote

36. EB EMPORION — business facts from public registers dev.modelmarket/emporion 1.2 · 23/100

    EU VAT and EORI checks, sanctions screening, company and LEI lookup, ECB rates. Free, no key.

    100% up · 30 days

    Security Official MCP Registry Remote

37. SS seekrit — secrets for agents dev.seekrit/remote-mcp 1.2 · 23/100

    Encrypted store for API keys and database URLs your code needs. Use them without reading them.

    100% up · 30 days

    Security Official MCP Registry Remote

38. CD CyberMax Data dev.workers.cybermax-tools.cybermax/cybermax-data 1.2 · 23/100

    Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

    100% up · 30 days

    Files and storage Official MCP Registry Remote

39. DO DomainDNA dev.workers.cybermax-tools.cybermax/domaindna-api 1.2 · 23/100

    Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.

    100% up · 30 days

    Security Official MCP Registry Remote

40. KE Kevscope dev.workers.cybermax-tools.cybermax/kevscope-api 1.2 · 23/100

    CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

    100% up · 30 days

    Security Official MCP Registry Remote

41. KC Kevscope CVE Check dev.workers.cybermax-tools.cybermax/kevscope-chatgpt 1.2 · 23/100

    Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.

    100% up · 30 days

    Security Official MCP Registry Remote

42. AT Ansvar: Threat Intelligence eu.ansvar/threat-intel 1.2 · 23/100

    CVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway. Cited, OAuth + paid.

    100% up · 30 days

    Security Official MCP Registry Remote

43. SU Skavio USDC Payment Verification & Proof MCP eu.skavio/paid-micro-apis 1.2 · 23/100

    18 tools: USDC verification, matching, evidence PDFs, DNS/TLS and authenticated company processing.

    100% up · 30 days

    Finance and payments Official MCP Registry Remote

44. HO HumanMirror Outcome fr.humanmirror/outcome 1.2 · 23/100

    Verified AI-agent outcomes: secret scanning, JSON cleanup, dedupe, anomaly and schema checks.

    100% up · 30 days

    Security Official MCP Registry Remote

45. MA Maritime global.rootz.ship/maritime 1.2 · 23/100

    Signed global shipping & commodity data: oil, LNG, grain, sanctions, fleet, emissions.

    100% up · 30 days

    Security Official MCP Registry Remote

46. EI Enterno.io Site Diagnostics io.enterno/site-diagnostics 1.2 · 23/100

    HTTP, DNS, SSL, WHOIS, ping, security-header, SEO and AI-readiness checks for any website.

    100% up · 30 days

    Security Official MCP Registry Remote

47. KL Klarion io.github.0x1Adi/klarion 1.2 · 23/100

    Secret scanning for AI agents: rules and entropy find candidates, a model decides which are real.

    Version check not run yet

    Security Official MCP Registry Local

48. PH Phishunt io.github.0xDanielLopez/phishunt 1.2 · 23/100

    Public phishing feed: suspicious/confirmed phishing URLs detected hourly. No auth, CC0.

    100% up · 30 days

    Security Official MCP Registry Remote