Security MCP servers
3,564 servers
Scan code and dependencies, look up vulnerabilities and work with security tools.
- Petty
io.github.WawRepo/pettyWhat you keep and where: money, things, notes. End-to-end encrypted; decrypts on your computer.
Not checked: registry not supported yet
Docs and knowledge bases Official MCP Registry Local
- Agent Tools
io.github.WingedGuardian/agent-tools9 utility tools for agents: DNS, WHOIS, email, IP, URL, headers, QR, text, tech. x402 on Base.
0% up · 30 days
DevOps and infrastructure Official MCP Registry Remote
- Postgres Secured (Aegis Zero-Trust)
io.github.Yash-0620/postgres-mcp-securedEnterprise PostgreSQL MCP secured by Aegis Zero-Trust to block unauthorized SQL injections.
Not checked yet
Databases Official MCP Registry
- vaultgate
io.github.adamrowles1996/vaultgateSelf-hosted remote MCP server for Bitwarden and Vaultwarden with OAuth 2.1; agents hold tokens only
Address set by you
Security Official MCP Registry Remote
- MiniURL
io.github.addychang/miniurlOAuth 2.1 short-link tools for AI agents with scoped tokens, approvals, audit logs, and revocation.
100% up · 30 days
Monitoring and observability Official MCP Registry Remote
- Waqi — AI Privacy Layer
io.github.ajprolific/waqiRedacts PII from your business tools before the AI sees them — with a provable audit log.
Address set by you
Security Official MCP Registry Remote
- GenPark PII Redactor & Data Masker
io.github.alphaparkinc/genpark-pii-redactor-and-data-masker-skillRegex and Luhn heuristic PII redaction and tokenization engine sanitizing sensitive emails, phones,
Not checked: registry not supported yet
Security Official MCP Registry Local
- Web Scan
io.github.ankitkumarjha515/web-scanAudit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.
100% up · 30 days
Security Official MCP Registry Remote
- gws-admin-mcp
io.github.antct11/gws-admin-mcpSafe Google Workspace admin for AI agents: read-only by default, confirm-gated deletes, audit log.
Not checked yet
Security Official MCP Registry
- Robin: AI-Powered Dark Web OSINT
io.github.apurvsinghgautam/robinDark web OSINT over Tor: search onion engines, scrape pages, report with your own model.
Not checked: registry not supported yet
Security Official MCP Registry Local
- Aribot
io.github.aristiun/aribotThreat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
100% up · 30 days
DevOps and infrastructure Official MCP Registry Remote
- KarmaDue
io.github.ashadow07/karmaduePre-install safety check for agents: known traps, tested fixes, malware reports. No account.
100% up · 30 days
Security Official MCP Registry Remote
- AgentAegis
io.github.astafford8488/agentaegisPay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
0% up · 30 days
Security Official MCP Registry Remote
- Stackhal
io.github.bahdanhal/stackhalOutside-in DNS, email security, SEO, GEO and app-link checks plus developer utilities.
100% up · 30 days
DevOps and infrastructure Official MCP Registry Remote
- OSV Advisories
io.github.basitalisandhu/mcp-osv-advisoriesQuery OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.
Not checked: registry not supported yet
Security Official MCP Registry Local
- Security Headers
io.github.basitalisandhu/mcp-security-headersFetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.
Not checked: registry not supported yet
Security Official MCP Registry Local
- Changegamer
io.github.beneb89/changegamerAgent-first resource directory for AI agents: protocols, security, RAG, memory, evals, and more.
100% up · 30 days
Security Official MCP Registry Remote
- Hacker Bob public records
io.github.bobnetsec/hacker-bob-public-recordsRead-only public CVE records, capability metadata, and agent instructions from Hacker Bob.
100% up · 30 days
Government and public records Official MCP Registry Remote
- Bounty Operator
io.github.bountyoperator/bounty-operatorArgues against a security finding or a draft bug bounty report before you submit it.
100% up · 30 days
Security Official MCP Registry Remote
- Readme Canary
io.github.brkd-h1/readme-canarySecurity research canary remote MCP server for owned-account testing.
0% up · 30 days
Developer tools Official MCP Registry Remote
- Protectwith Kb
io.github.burademirung/protectwith-kbAI-security knowledge as MCP: standards-mapped tools (OWASP, NIST, MITRE) for AI agents.
0% up · 30 days
Security Official MCP Registry Remote
- SQLGuard — Execution Certificate Firewall
io.github.cabbageandtea/sqlguardPermission before writes. Gravity→DENYs→Session $0.25. Pilot $100; Gateway $299. Probe free.
100% up · 30 days
Security Official MCP Registry Remote
- Privi Quantum Ledger
io.github.canoydario847-cloud/privi-ledgerQuantum-sealed audit logs for AI agents (ML-DSA-87, SHA3-512), plus Privi Guard and trust passports.
20% up · 30 days
Finance and payments Official MCP Registry Remote
- FreeToolHub
io.github.cavan1977/freetoolhub44 calculators for AI agents: US tax, finance, business + an MCP engineering & security suite.
100% up · 30 days
Finance and payments Official MCP Registry Remote
- Logicnodes
io.github.cmdenney/logicnodes-mcpRemote MCP for LogicNodes: Signed PII-Shield flagship + payable x402 agent tools on Base.
100% up · 30 days
Security Official MCP Registry Remote
- Eu Verify
io.github.contentfactory/eu-verifyEuropean business verification for AI agents: registry, VAT, sanctions, IBAN. Pay-per-call x402.
100% up · 30 days
Security Official MCP Registry Remote
- Dlp
io.github.cx-anand-nandeshwar/dlp-mcpThe DLP MCP provides the compliance violation in the one drive, google drive documents.
Address set by you
Security Official MCP Registry Remote
- Penniless Data Utilities
io.github.danielarif26/penniless-data-utilitiesTen x402-paid tools for JSON, YAML, cron, diff, text, DNS, WHOIS, GitHub, crypto, and email.
100% up · 30 days
Utilities Official MCP Registry Remote
- Leadgen MCP
io.github.darksider4all/leadgen-mcpRomanian business-registry lookup, director search, contact extraction, and WHOIS/DNS audit.
0% up · 30 days
DevOps and infrastructure Official MCP Registry Remote
- Canada Company Due Diligence Check
io.github.domaranskyi/canada-due-diligenceDue diligence on Canadian companies: registry status, sanctions and risk signals via Apify.
100% up · 30 days
Security Official MCP Registry Remote
- Ukraine Sanctions Screener (NSDC)
io.github.domaranskyi/ukraine-sanctions-screener-nsdcScreen names/IDs against Ukraine's NSDC State Sanctions Register (snapshot) via Apify.
100% up · 30 days
Security Official MCP Registry Remote
- Vibes-Coded Agent Tools
io.github.doteyeso-ops/mcp-server-vibes-codedWeb search, page-to-markdown, memory, leases and proof for agents. x402, no signup.
0% up · 30 days
Security Official MCP Registry Remote
- MCP ZAP Server
io.github.dtkmn/mcp-zap-serverSafe, self-hosted ZAP operator for guided AI security scans and reports.
Not checked: registry not supported yet
Security Official MCP Registry Remote
- Purify Security Feeds
io.github.eason4kim-rocket/purify-feeds-mcpQuery CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions
Not checked: registry not supported yet
Web search and scraping Official MCP Registry Local
- Secrets Audit
io.github.eltociear/secrets-audit-mcpDetects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
Not checked: registry not supported yet
Security Official MCP Registry Local
- Skill Audit
io.github.eltociear/skill-audit-mcpMCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
100% up · 30 days
Security Official MCP Registry Local Remote
- Paianjenul: Romanian company lookups
io.github.emanueltns/paianjenulRomanian companies: ONRC registry, ANAF financials, VAT, EU/UN/US sanctions, administrator links.
100% up · 30 days
Finance and payments Official MCP Registry Remote
- endoflife.ai — Software Lifecycle Intelligence
io.github.endoflife-ai/endoflife-mcpEOL dates, risk scores, CISA KEV exposure, SBOM audits and edge-device EOS for 700+ products.
100% up · 30 days
Security Official MCP Registry Remote
- MobiLoop
io.github.enessubass/mobiloop-mcpGuarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.
Not checked: registry not supported yet
Developer tools Official MCP Registry Local
- TrustScan
io.github.entradox/trust-scanSecurity scanner for MCP servers and skills: Unicode injection, patterns, secrets.
100% up · 30 days
Security Official MCP Registry Remote
- DomScan
io.github.estevecastells/domscanDomain intelligence for DNS, WHOIS/RDAP, TLS, reputation, valuation, and brand protection.
100% up · 30 days
Security Official MCP Registry Remote
- LLM Data Guard: PII & Secrets Redaction
io.github.fairquery/llm-data-guard-pii-secretsDetect and redact PII and secrets (API keys, tokens) in text, HTML or PDF before it reaches an LLM.
100% up · 30 days
Security Official MCP Registry Remote
- OSV Dependency Vulnerability Check
io.github.fairquery/osv-dependency-vulnerability-checkCheck npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.
100% up · 30 days
Security Official MCP Registry Remote
- Sanctions Screening (OFAC, EU, UK, UN)
io.github.fairquery/sanctions-watchlist-screenerFuzzy-screen people and company names against OFAC SDN, EU, UK and UN sanctions lists.
100% up · 30 days
Security Official MCP Registry Remote
- MailFathom
io.github.fathomise/mailfathomSecurity-first, self-hosted email archive with search, cited answers, and sending for AI agents.
Address set by you
Security Official MCP Registry Remote
- Bulk WHOIS Domain Lookup
io.github.fernandoguiraud16-coder/bulk-whois-domain-lookupBulk WHOIS/RDAP lookup: registrar, domain age, expiry date and availability.
100% up · 30 days
Security Official MCP Registry Remote
- Tech Stack Detector & WHOIS, SSL Checker
io.github.fernandoguiraud16-coder/website-tech-dns-whois-sslTech stack, WHOIS, DNS, SSL, hosting and SEO checks for lists of domains.
100% up · 30 days
Security Official MCP Registry Remote
- Mcpcheckup
io.github.fpetitit/mcpcheckupScans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.
0% up · 30 days
Security Official MCP Registry Remote