Security MCP servers

3,564 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

  1. AgentPay (all tools) io.github.noah-silver/agentpay-bundle

    Pay-per-call web extract, DNS/WHOIS/IP lookup, PDF/RSS/sitemap tools. x402 USDC on Base/Algorand.

    100% up · 30 days

    Web search and scraping Official MCP Registry Remote

  2. AgentPay Domain & Network Lookup io.github.noah-silver/agentpay-lookup

    Pay-per-call DNS, WHOIS/RDAP, IP and domain reports for agents. x402 USDC on Base or Algorand.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  3. Vouch io.github.notifuturo/vouch

    Check if a counterparty is safe to pay: trust/risk score for AI agents. Scam/phishing screen.

    100% up · 30 days

    Security Official MCP Registry Remote

  4. PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder io.github.nouchix/pqc-khepra-mcp

    Post-quantum CMMC compliance scanner & AI agent attestation. FIPS 140-3, ML-DSA-65, 36K+ mappings.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  5. Alphapipeline io.github.parkyucheol-del/alphapipeline

    Pay-per-call x402 API for AI trading agents: pre-trade security checks, Polymarket & HIP-4 odds.

    100% up · 30 days

    Finance and payments Official MCP Registry Remote

  6. Domain Trust Check (DNS, Email Auth, TLS, Headers) io.github.pcp183/domain-check

    Check a domain's DNS, SPF/DMARC and TLS before trusting it. $0.003/call via x402.

    0% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  7. Counterparty Due Diligence io.github.pcp183/due-diligence

    One-call counterparty screen: sanctions, export, PEP, registry. $0.10/call via x402.

    0% up · 30 days

    Security Official MCP Registry Remote

  8. PEP Screening (Politically Exposed Persons) io.github.pcp183/pep-screen

    Check if a person is a PEP (Wikidata public offices) during KYC. $0.02/call via x402.

    0% up · 30 days

    Security Official MCP Registry Remote

  9. Batch Sanctions Screening io.github.pcp183/sanctions-batch

    Screen up to 100 names vs sanctions and US export lists. $0.50/batch via x402.

    0% up · 30 days

    Security Official MCP Registry Remote

  10. Sanctions Screen (OFAC, EU, UK, UN) io.github.pcp183/sanctions-screen

    Screen a party vs OFAC, EU and UK sanctions lists before paying. $0.02/call via x402.

    0% up · 30 days

    Security Official MCP Registry Remote

  11. Supplier Check (VAT, EORI, Company, Sanctions, Export) io.github.pcp183/supplier-check

    Check a supplier in one call: VAT, EORI, registry, sanctions, export lists. $0.25/call via x402.

    0% up · 30 days

    Security Official MCP Registry Remote

  12. Dredd MCP io.github.pduggusa/dredd-mcp

    Pre-flight verdict on MCP servers: known-bad identity, CVEs, dependency tree, tool drift. Signed.

    100% up · 30 days

    Developer tools Official MCP Registry Remote

  13. Jeevesus — DugganUSA threat-intel MCP io.github.pduggusa/dugganusa-threat-intel

    Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.

    100% up · 30 days

    Security Official MCP Registry Remote

  14. Osv Dev io.github.pipeworx-io/osv-dev

    OSV.dev — Google's open-source vulnerability database

    0% up · 30 days

    Databases Official MCP Registry Remote

  15. Presend MCP Server io.github.presendapp/presend-mcp

    Before an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.

    100% up · 30 days

    Security Official MCP Registry Remote

  16. Web & Developer Data Tools io.github.projectworks007/web-and-dev-tools

    Website tech stacks, domain WHOIS/DNS/SSL, sitemaps, PDF text, GitHub trending and more.

    100% up · 30 days

    Security Official MCP Registry Remote

  17. Argus io.github.r0ptik/argus

    Reverse-engineering evidence from a running Windows process, not the binary on disk.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  18. Agent Kiosk — 23-in-1 B2A Intelligence, Action & x402 API io.github.ralf9090/agent-kiosk

    23-in-1 MCP server: EVM tx simulator, funding rate arb, macro radar, swap calldata & security.

    100% up · 30 days

    Security Official MCP Registry Remote

  19. IntentFence Agent Action Firewall io.github.razel369/intentfence

    Fail-closed action authorization, MCP risk scanning, x402 checks, and signed receipts.

    100% up · 30 days

    Security Official MCP Registry Remote

  20. PYRESEC - AI Code Security Auditing io.github.renaat-s/pyresec-agent

    AI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.

    0% up · 30 days

    Security Official MCP Registry Remote

  21. Tech Risk io.github.rezearcher/tech-risk

    MCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/LLM08), x402-payable

    100% up · 30 days

    Security Official MCP Registry Local Remote

  22. IDA Pro MCP Fusion io.github.rison1337/ida-pro-mcp-fusion

    IDA Pro MCP fusion with cache queries and multi-binary headless analysis.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  23. vuln-intel io.github.rozetyp/vuln-intel

    Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports

    100% up · 30 days

    Security Official MCP Registry Remote

  24. Publicaml io.github.saloprj/publicaml

    Free crypto AML/KYT screening for BTC/ETH/BSC/TRON — risk score, sanctions, source of funds.

    100% up · 30 days

    Security Official MCP Registry Remote

  25. MCP Security Sanitizer io.github.saurabhdrh/mcp-security-sanitizer

    Redacts common secrets, email addresses, and phone numbers.

    100% up · 30 days

    Security Official MCP Registry Remote

  26. AgentFeed io.github.seekdaseek/agentfeed

    Crypto briefs and data, Solana pre-trade checks, sanctions, papers, NLP. 102 tools, USDC, 20 chains.

    100% up · 30 days

    Finance and payments Official MCP Registry Remote

  27. Security Intel MCP io.github.selflabbs/security-intel-mcp

    CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

    0% up · 30 days

    Security Official MCP Registry Remote

  28. Sentrysurface io.github.sentrysurface/sentrysurface

    Cybersecurity MCP server for URL scanning, threat intelligence, and domain reputation.

    0% up · 30 days

    Security Official MCP Registry Remote

  29. Sanctions Screening io.github.sercanmetalore/sanctions-screening-mcp

    MASAK + OFAC/UN/EU yaptırım ve PEP tarama MCP sunucusu — Türkçe transliterasyon, fuzzy matching,…

    0% up · 30 days

    Security Official MCP Registry Remote

  30. Hostwatch io.github.sergii-ziborov/hostwatch

    Find services by server; explicitly build, publish and update components or source with Hostwatch.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  31. Nerai io.github.serkvay13/nerai-mcp

    Geopolitical grounding for AI agents: country risk, forecasts, chokepoints, sanctions. Free tier.

    100% up · 30 days

    Security Official MCP Registry Remote

  32. CyberMax Data io.github.shawmena-dotcom/cybermax-data

    Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

    100% up · 30 days

    Files and storage Official MCP Registry Remote

  33. DomainDNA: Tech Stack Detector, WHOIS & Domain Age API io.github.shawmena-dotcom/domain-intel

    DomainDNA: a domain's tech stack, email security (MX/SPF/DMARC), TLS expiry and age in one record.

    100% up · 30 days

    Security Official MCP Registry Remote

  34. AgentGuard — security checks for AI agents io.github.shuaicongxiaomai/agentguard

    Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  35. Unchore Defend io.github.smilemino/unchore-defend

    Grade a site's security headers with fixes and a badge; read logs or code for the defender.

    Not checked: registry not supported yet

    Monitoring and observability Official MCP Registry Local

  36. Sigma Gate io.github.spektre-labs/sigma-gate

    Deterministic trust gate for AI output: leaked-secret, prompt-injection & PII in one call.

    0% up · 30 days

    Security Official MCP Registry Remote

  37. OpenWrt MCP io.github.stanislav-testhub/openwrt-mcp

    MCP server that runs on an OpenWrt router: deny-by-default policy, audit log, rollback-armed changes

    Not checked yet

    Security Official MCP Registry

  38. Agent-Shield io.github.startekenterprises-ai/agent-shield

    Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection.

    100% up · 30 days

    Security Official MCP Registry Remote

  39. Security Recipes io.github.stevologic/security-recipes

    Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.

    100% up · 30 days

    Security Official MCP Registry Remote

  40. Eidolon io.github.sudohnim/eidolon

    Privacy-first OSINT scanner: breaches, credentials, Shodan, username sweep. Scored PDF report.

    Not checked yet

    Security Official MCP Registry

  41. VeraData io.github.teodorofodocrispin-cmyk/veradata

    Verified LATAM data for AI agents: sanctions, entity, rates, KYB. Pay via x402.

    0% up · 30 days

    Security Official MCP Registry Remote

  42. McpStamp Deposits io.github.theluckystrike/deposits

    Track client security and retainer deposits: hold, apply to an invoice, refund, statements.

    100% up · 30 days

    Security Official MCP Registry Local Remote

  43. JFSecure io.github.theone55/jfs

    Let AI agents use secrets without seeing them: masked output, every use approved in JFSecure.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  44. Raven Nest io.github.tidynest/raven-nest-mcp

    AI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  45. Arcstone Sidecar io.github.trencinodin-stack/arcstone-mcp-sidecar

    Deterministic execution boundary and reference MCP sidecar for Arcstone Security Stack

    Not checked yet

    Security Official MCP Registry

  46. Trusteed io.github.trusteed-io/trusteed-mcp

    CTEM for your Trusteed tenant: security summary, findings, compliance gaps, and scans via OAuth.

    100% up · 30 days

    Security Official MCP Registry Remote

  47. MailHunterPro io.github.twojlogin/mailhunter-pro

    Read-only queries on local phishing scan results: findings, IOCs, SPF/DKIM/DMARC.

    Not checked yet

    Security Official MCP Registry

  48. Agent Skill & Config Security Audit io.github.tylerscomic-lab/agent-skill-audit-mcp

    Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.

    100% up · 30 days

    Model and agent tools Official MCP Registry Remote