Security MCP servers

3,564 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

  1. Petty io.github.WawRepo/petty

    What you keep and where: money, things, notes. End-to-end encrypted; decrypts on your computer.

    Not checked: registry not supported yet

    Docs and knowledge bases Official MCP Registry Local

  2. Agent Tools io.github.WingedGuardian/agent-tools

    9 utility tools for agents: DNS, WHOIS, email, IP, URL, headers, QR, text, tech. x402 on Base.

    0% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  3. Postgres Secured (Aegis Zero-Trust) io.github.Yash-0620/postgres-mcp-secured

    Enterprise PostgreSQL MCP secured by Aegis Zero-Trust to block unauthorized SQL injections.

    Not checked yet

    Databases Official MCP Registry

  4. vaultgate io.github.adamrowles1996/vaultgate

    Self-hosted remote MCP server for Bitwarden and Vaultwarden with OAuth 2.1; agents hold tokens only

    Address set by you

    Security Official MCP Registry Remote

  5. MiniURL io.github.addychang/miniurl

    OAuth 2.1 short-link tools for AI agents with scoped tokens, approvals, audit logs, and revocation.

    100% up · 30 days

    Monitoring and observability Official MCP Registry Remote

  6. Waqi — AI Privacy Layer io.github.ajprolific/waqi

    Redacts PII from your business tools before the AI sees them — with a provable audit log.

    Address set by you

    Security Official MCP Registry Remote

  7. GenPark PII Redactor & Data Masker io.github.alphaparkinc/genpark-pii-redactor-and-data-masker-skill

    Regex and Luhn heuristic PII redaction and tokenization engine sanitizing sensitive emails, phones,

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  8. Web Scan io.github.ankitkumarjha515/web-scan

    Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.

    100% up · 30 days

    Security Official MCP Registry Remote

  9. gws-admin-mcp io.github.antct11/gws-admin-mcp

    Safe Google Workspace admin for AI agents: read-only by default, confirm-gated deletes, audit log.

    Not checked yet

    Security Official MCP Registry

  10. Robin: AI-Powered Dark Web OSINT io.github.apurvsinghgautam/robin

    Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  11. Aribot io.github.aristiun/aribot

    Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  12. KarmaDue io.github.ashadow07/karmadue

    Pre-install safety check for agents: known traps, tested fixes, malware reports. No account.

    100% up · 30 days

    Security Official MCP Registry Remote

  13. AgentAegis io.github.astafford8488/agentaegis

    Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

    0% up · 30 days

    Security Official MCP Registry Remote

  14. Stackhal io.github.bahdanhal/stackhal

    Outside-in DNS, email security, SEO, GEO and app-link checks plus developer utilities.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  15. OSV Advisories io.github.basitalisandhu/mcp-osv-advisories

    Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  16. Security Headers io.github.basitalisandhu/mcp-security-headers

    Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  17. Changegamer io.github.beneb89/changegamer

    Agent-first resource directory for AI agents: protocols, security, RAG, memory, evals, and more.

    100% up · 30 days

    Security Official MCP Registry Remote

  18. Hacker Bob public records io.github.bobnetsec/hacker-bob-public-records

    Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.

    100% up · 30 days

    Government and public records Official MCP Registry Remote

  19. Bounty Operator io.github.bountyoperator/bounty-operator

    Argues against a security finding or a draft bug bounty report before you submit it.

    100% up · 30 days

    Security Official MCP Registry Remote

  20. Readme Canary io.github.brkd-h1/readme-canary

    Security research canary remote MCP server for owned-account testing.

    0% up · 30 days

    Developer tools Official MCP Registry Remote

  21. Protectwith Kb io.github.burademirung/protectwith-kb

    AI-security knowledge as MCP: standards-mapped tools (OWASP, NIST, MITRE) for AI agents.

    0% up · 30 days

    Security Official MCP Registry Remote

  22. SQLGuard — Execution Certificate Firewall io.github.cabbageandtea/sqlguard

    Permission before writes. Gravity→DENYs→Session $0.25. Pilot $100; Gateway $299. Probe free.

    100% up · 30 days

    Security Official MCP Registry Remote

  23. Privi Quantum Ledger io.github.canoydario847-cloud/privi-ledger

    Quantum-sealed audit logs for AI agents (ML-DSA-87, SHA3-512), plus Privi Guard and trust passports.

    20% up · 30 days

    Finance and payments Official MCP Registry Remote

  24. FreeToolHub io.github.cavan1977/freetoolhub

    44 calculators for AI agents: US tax, finance, business + an MCP engineering & security suite.

    100% up · 30 days

    Finance and payments Official MCP Registry Remote

  25. Logicnodes io.github.cmdenney/logicnodes-mcp

    Remote MCP for LogicNodes: Signed PII-Shield flagship + payable x402 agent tools on Base.

    100% up · 30 days

    Security Official MCP Registry Remote

  26. Eu Verify io.github.contentfactory/eu-verify

    European business verification for AI agents: registry, VAT, sanctions, IBAN. Pay-per-call x402.

    100% up · 30 days

    Security Official MCP Registry Remote

  27. Dlp io.github.cx-anand-nandeshwar/dlp-mcp

    The DLP MCP provides the compliance violation in the one drive, google drive documents.

    Address set by you

    Security Official MCP Registry Remote

  28. Penniless Data Utilities io.github.danielarif26/penniless-data-utilities

    Ten x402-paid tools for JSON, YAML, cron, diff, text, DNS, WHOIS, GitHub, crypto, and email.

    100% up · 30 days

    Utilities Official MCP Registry Remote

  29. Leadgen MCP io.github.darksider4all/leadgen-mcp

    Romanian business-registry lookup, director search, contact extraction, and WHOIS/DNS audit.

    0% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  30. Canada Company Due Diligence Check io.github.domaranskyi/canada-due-diligence

    Due diligence on Canadian companies: registry status, sanctions and risk signals via Apify.

    100% up · 30 days

    Security Official MCP Registry Remote

  31. Ukraine Sanctions Screener (NSDC) io.github.domaranskyi/ukraine-sanctions-screener-nsdc

    Screen names/IDs against Ukraine's NSDC State Sanctions Register (snapshot) via Apify.

    100% up · 30 days

    Security Official MCP Registry Remote

  32. Vibes-Coded Agent Tools io.github.doteyeso-ops/mcp-server-vibes-coded

    Web search, page-to-markdown, memory, leases and proof for agents. x402, no signup.

    0% up · 30 days

    Security Official MCP Registry Remote

  33. MCP ZAP Server io.github.dtkmn/mcp-zap-server

    Safe, self-hosted ZAP operator for guided AI security scans and reports.

    Not checked: registry not supported yet

    Security Official MCP Registry Remote

  34. Purify Security Feeds io.github.eason4kim-rocket/purify-feeds-mcp

    Query CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions

    Not checked: registry not supported yet

    Web search and scraping Official MCP Registry Local

  35. Secrets Audit io.github.eltociear/secrets-audit-mcp

    Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  36. Skill Audit io.github.eltociear/skill-audit-mcp

    MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.

    100% up · 30 days

    Security Official MCP Registry Local Remote

  37. Paianjenul: Romanian company lookups io.github.emanueltns/paianjenul

    Romanian companies: ONRC registry, ANAF financials, VAT, EU/UN/US sanctions, administrator links.

    100% up · 30 days

    Finance and payments Official MCP Registry Remote

  38. endoflife.ai — Software Lifecycle Intelligence io.github.endoflife-ai/endoflife-mcp

    EOL dates, risk scores, CISA KEV exposure, SBOM audits and edge-device EOS for 700+ products.

    100% up · 30 days

    Security Official MCP Registry Remote

  39. MobiLoop io.github.enessubass/mobiloop-mcp

    Guarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.

    Not checked: registry not supported yet

    Developer tools Official MCP Registry Local

  40. TrustScan io.github.entradox/trust-scan

    Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

    100% up · 30 days

    Security Official MCP Registry Remote

  41. DomScan io.github.estevecastells/domscan

    Domain intelligence for DNS, WHOIS/RDAP, TLS, reputation, valuation, and brand protection.

    100% up · 30 days

    Security Official MCP Registry Remote

  42. LLM Data Guard: PII & Secrets Redaction io.github.fairquery/llm-data-guard-pii-secrets

    Detect and redact PII and secrets (API keys, tokens) in text, HTML or PDF before it reaches an LLM.

    100% up · 30 days

    Security Official MCP Registry Remote

  43. OSV Dependency Vulnerability Check io.github.fairquery/osv-dependency-vulnerability-check

    Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

    100% up · 30 days

    Security Official MCP Registry Remote

  44. Sanctions Screening (OFAC, EU, UK, UN) io.github.fairquery/sanctions-watchlist-screener

    Fuzzy-screen people and company names against OFAC SDN, EU, UK and UN sanctions lists.

    100% up · 30 days

    Security Official MCP Registry Remote

  45. MailFathom io.github.fathomise/mailfathom

    Security-first, self-hosted email archive with search, cited answers, and sending for AI agents.

    Address set by you

    Security Official MCP Registry Remote

  46. Bulk WHOIS Domain Lookup io.github.fernandoguiraud16-coder/bulk-whois-domain-lookup

    Bulk WHOIS/RDAP lookup: registrar, domain age, expiry date and availability.

    100% up · 30 days

    Security Official MCP Registry Remote

  47. Tech Stack Detector & WHOIS, SSL Checker io.github.fernandoguiraud16-coder/website-tech-dns-whois-ssl

    Tech stack, WHOIS, DNS, SSL, hosting and SEO checks for lists of domains.

    100% up · 30 days

    Security Official MCP Registry Remote

  48. Mcpcheckup io.github.fpetitit/mcpcheckup

    Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.

    0% up · 30 days

    Security Official MCP Registry Remote