Security MCP servers

3,562 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. CT Cybersec Toolkit io.github.26zl/cybersec-toolkit 1.2 · 23/100

   Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

   Version check not run yet

   Security Official MCP Registry Local

2. CI CTlogs.io io.github.ABTdomain/ctlogs 1.2 · 23/100

   Certificate Transparency search: subdomains, certificate history and hostname keyword search.

   100% up · 30 days

   Security Official MCP Registry Remote

3. PF Paladin Front PHP Rescue & Zero-PHP Migration MCP io.github.AGI-CEO/paladin-php-rescue-mcp 1.2 · 23/100

   PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

   100% up · 30 days

   Security Official MCP Registry Remote

4. IH Infra Health & SSL Monitor MCP io.github.Ansarii/infra-health-mcp 1.2 · 23/100

   Monitors TLS/SSL certificate expiry, DNS resolution, and TCP port status for AI agents.

   100% up · 30 days

   Security Official MCP Registry Remote

5. AA AI API Cost Firewall & Rate Limiter io.github.Ansarii/mcp-rate-limiter 1.2 · 23/100

   Token guard and rate limiter preventing runaway API cost spikes for OpenAI and Anthropic.

   Address set by you

   Security Official MCP Registry Remote

6. MS MCP Security & Vulnerability Auditor io.github.Ansarii/mcp-security-auditor 1.2 · 23/100

   Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

   0% up · 30 days

   Security Official MCP Registry Remote

7. NZ Neon Zero-Trust Gateway io.github.Ansarii/zero-trust-gateway 1.2 · 23/100

   Zero-Trust MCP gateway securing internal database tools behind an API key firewall.

   0% up · 30 days

   Security Official MCP Registry Remote

8. NZ Neon Zero-Trust MCP Gateway io.github.Ansarii/zero-trust-mcp-gateway 1.2 · 23/100

   AI security firewall & DLP proxy protecting API keys and blocking destructive commands.

   70.22% up · 30 days

   Security Official MCP Registry Remote

9. BB Bug Bounty Finder - HackerOne + Bugcrowd + security.txt io.github.AnshumanAtrey/bug-bounty-finder 1.2 · 23/100

   Bug Bounty Programs - HackerOne + Bugcrowd Lookup | Bulk

   100% up · 30 days

   Security Official MCP Registry Remote

10. DH Domain History Contact OSINT - Previous Owner + WHOIS History io.github.AnshumanAtrey/domain-history-contact-osint 1.2 · 23/100

    Domain History Lookup - WHOIS History + Past Owner Contacts

    100% up · 30 days

    Security Official MCP Registry Remote

11. HE Holehe Email OSINT - Find Registered Accounts io.github.AnshumanAtrey/holehe-email-osint 1.2 · 23/100

    Email OSINT Tool - Find Registered Accounts on 120+ Sites

    100% up · 30 days

    Security Official MCP Registry Remote

12. US Username Search & OSINT - Maigret Profile Finder, 5,000+ Sites io.github.AnshumanAtrey/maigret-username-search 1.2 · 23/100

    Username Search & Lookup - Maigret OSINT Tool

    100% up · 30 days

    Security Official MCP Registry Remote

13. NI NetIntel - IP + Domain Intelligence | WHOIS DNS Geo Port io.github.AnshumanAtrey/netintel 1.2 · 23/100

    NetIntel - IP & Domain Intelligence | WHOIS DNS Geo Bulk

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

14. NC Nmap Cloud Scanner - Port Scanner + Service Detection | Bulk io.github.AnshumanAtrey/nmap-scanner 1.2 · 23/100

    Nmap Cloud - Port Scanner & Service Detection | Free Trial

    100% up · 30 days

    Security Official MCP Registry Remote

15. PC PhoneInfoga Cloud - International Phone Number OSINT | Bulk io.github.AnshumanAtrey/phoneinfoga-phone-osint 1.2 · 23/100

    Phone Number OSINT - International Lookup + Reverse | Bulk

    100% up · 30 days

    Security Official MCP Registry Remote

16. ES Email & Subdomain Finder - theHarvester OSINT | 54 Sources io.github.AnshumanAtrey/theharvester-osint 1.2 · 23/100

    Email & Subdomain Finder - theHarvester OSINT Cloud | Bulk

    100% up · 30 days

    Email Official MCP Registry Remote

17. UI UPI ID OSINT - Phone to UPI VPAs + Bank Names (India) io.github.AnshumanAtrey/upi-id-osint 1.2 · 23/100

    UPI ID OSINT - Phone to VPAs + Bank Names India | Bulk

    100% up · 30 days

    Security Official MCP Registry Remote

18. YD yt-dlp Video Link Extractor - Any URL to Links, 1000+ Sites io.github.AnshumanAtrey/yt-dlp-video-link-extractor 1.2 · 23/100

    yt-dlp Link Extractor - Any Video URL to Direct Links

    100% up · 30 days

    Security Official MCP Registry Remote

19. VB ViewportWitness by Apex Labs io.github.Baffles78/viewport-witness 1.2 · 23/100

    Agent website testing: browser QA, visual regression, Markdown extraction, and security checks.

    100% up · 30 days

    Developer tools Official MCP Registry Remote

20. CS Ci Sentinel io.github.Baneado98/ci-sentinel 1.2 · 23/100

    Multi-CI security scanner with a live threat-intel feed of compromised CI components

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

21. DI Domain Intelligence API io.github.Br0ski777/domain-intelligence 1.2 · 23/100

    WHOIS, DNS records, SSL certificate data for any domain in one call. x402.

    0% up · 30 days

    Security Official MCP Registry Remote

22. GS GDPR Scanner API io.github.Br0ski777/gdpr-scanner 1.2 · 23/100

    Scan website GDPR compliance: consent, privacy policy, trackers. Score 0-100. x402.

    0% up · 30 days

    Security Official MCP Registry Remote

23. HH HTTP Headers Analyzer API io.github.Br0ski777/http-headers 1.2 · 23/100

    HTTP header analysis — security headers, cache, server detection. x402 micropayment.

    0% up · 30 days

    Security Official MCP Registry Remote

24. PD PII Detector API io.github.Br0ski777/pii-detector 1.2 · 23/100

    Detect PII in text: emails, phones, SSNs, credit cards, IPs. Regex + Luhn. x402.

    0% up · 30 days

    Security Official MCP Registry Remote

25. SC SSL Checker API io.github.Br0ski777/ssl-checker 1.2 · 23/100

    SSL certificate check — validity, expiry, issuer, chain, grade. x402 micropayment.

    0% up · 30 days

    Security Official MCP Registry Remote

26. TS Trust Score API io.github.Br0ski777/trust-score 1.2 · 23/100

    Trust scoring for domains, wallets, APIs. SSL+DNS+WHOIS+headers. Score 0-100.

    0% up · 30 days

    Security Official MCP Registry Remote

27. CM Compuute MCP Security Scanner io.github.Compuute/compuute-scan-api 1.2 · 23/100

    Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.

    100% up · 30 days

    Security Official MCP Registry Remote

28. PK Polish KYB io.github.ContentWriterco/polish-kyb 1.2 · 23/100

    Know-your-business checks for Polish companies: KRS, owners, insolvency, sanctions, gazette notices.

    100% up · 30 days

    Security Official MCP Registry Remote

29. CD CyberMax Data io.github.CyberMax-tools/cybermax-data 1.2 · 23/100

    Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

    100% up · 30 days

    Files and storage Official MCP Registry Remote

30. DT DomainDNA: Tech Stack Detector, WHOIS & Domain Age API io.github.CyberMax-tools/domain-intel 1.2 · 23/100

    DomainDNA: a domain's tech stack, email security (MX/SPF/DMARC), TLS expiry and age in one record.

    100% up · 30 days

    Security Official MCP Registry Remote

31. AN Agentdata Nl io.github.DarthSander/agentdata-nl 1.2 · 23/100

    x402-paid tools: EU company & sanctions data, web search, LLM chat, crypto intel, x402 monitoring.

    100% up · 30 days

    Web search and scraping Official MCP Registry Remote

32. DI Domain Intelligence io.github.DataLeadsPRO/domain-intelligence 1.2 · 23/100

    Domain overviews for security and sales: registration, infrastructure, and risk signals.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

33. CH ChronoKey io.github.Dyln01/chronokey 1.2 · 23/100

    MCP tools: timestamps, UUID v4, gas prices, domain WHOIS, text extraction, and persistent memory.

    100% up · 30 days

    Memory and context Official MCP Registry Remote

34. EM Eterna MCP io.github.EternaHybridExchange/eterna-mcp 1.2 · 23/100

    No-KYC managed MCP for AI agents: sandboxed TypeScript trading SDK, isolated sub-accounts, futures.

    100% up · 30 days

    Security Official MCP Registry Remote

35. CT Cybersecurity Threat Intelligence MCP io.github.FoundryNet/cyber-intel-mcp 1.2 · 23/100

    CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.

    0% up · 30 days

    Security Official MCP Registry Remote

36. GS Gorgon Scout io.github.Gorgon-Cyber/gorgon-scout 1.2 · 23/100

    Run AI-driven web-app and API security scans (DAST) from Claude or any MCP agent. Windows.

    Version check not run yet

    Security Official MCP Registry Local

37. VC Vett Compliance MCP Server io.github.Gorp405/vett-compliance 1.2 · 23/100

    Sanctions, PEP, watchlist, recall, business, and contract screening. Free tier, no auth required.

    0% up · 30 days

    Legal and compliance Official MCP Registry Remote

38. OU Ox402 Utils io.github.Hasned-spec/ox402-utils 1.2 · 23/100

    47 micro-priced utilities: search, screenshots, OCR, whois, prices, video downloads. x402 USDC.

    0% up · 30 days

    Browser automation Official MCP Registry Remote

39. AM ACMP MCP Server io.github.Herzog-GmbH/acmp-mcp 1.2 · 23/100

    Community MCP server for Aagon ACMP: clients, inventory, CVEs, jobs, tickets, activity log

    Version check not run yet

    Project management Official MCP Registry Local

40. HP HubVibe: Pay-per-Call Agent Tools: Web Search, Email Verify, Contact Screening, Stocks, Crypto, News io.github.Its-fortunatefolly/hubvibe 1.2 · 23/100

    75 paid agent tools: website audits and research; BM25, MiniLM vector and hybrid discovery are free.

    100% up · 30 days

    Web search and scraping Official MCP Registry Remote

41. AV Agent Venue Radar io.github.ItzxFin2323/agent-venue-radar 1.2 · 23/100

    Screen AI-work venues for inventory, funding, payouts, withdrawal, economics, and security risk.

    Version check not run yet

    Security Official MCP Registry Local

42. RQ Rqwstr io.github.Kjopstad-IT/rqwstr 1.2 · 23/100

    AI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control

    Version check not run yet

    Developer tools Official MCP Registry Local

43. BA BankWeave io.github.LSUDOKO/bankweave 1.2 · 23/100

    Read-only FalkorDB tools for cross-bank AML investigations: rings, money paths, echo-proof claims.

    0% up · 30 days

    Security Official MCP Registry Local Remote

44. DA Data247 io.github.LogicTreeInc/data247 1.2 · 23/100

    Phone carrier lookup, append, verification, DNC, and fraud data services.

    100% up · 30 days

    Security Official MCP Registry Remote

45. SL Snow Leo Risk & Compliance io.github.MagzhanSan/snowleo-risk 1.2 · 23/100

    Screen names against OFAC, EU and UN lists; check CVEs, domain DNS and WHOIS, and public tenders

    100% up · 30 days

    Security Official MCP Registry Remote

46. OD Open Data Actors io.github.Mamoo85/open-data-actors-mcp 1.2 · 23/100

    24 public-data Apify actors (sanctions, SEC Form D, WARN, FMCSA, SEO, jobs) as MCP tools.

    Version check not run yet

    Science and research Official MCP Registry Local

47. NA nexus0-agent-rail io.github.MikeHunt69702/agent-gateway 1.2 · 23/100

    Pay-per-call DNS/TLS truth and npm/PyPI breakage checks via x402. No account or API key.

    0% up · 30 days

    Maps and location Official MCP Registry Remote

48. 40 402shield io.github.MitchSingh/402shield 1.2 · 23/100

    x402 payment security and pre-execution transaction risk screening for autonomous AI agents.

    48.15% up · 30 days

    Security Official MCP Registry Remote