Security MCP servers

3,564 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

  1. Dockerfile Security Audit io.github.tylerscomic-lab/dockerfile-audit-mcp

    Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

    0% up · 30 days

    Security Official MCP Registry Remote

  2. GitHub Actions Security Audit io.github.tylerscomic-lab/github-actions-audit-mcp

    Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

    0% up · 30 days

    Git and code hosting Official MCP Registry Remote

  3. PII & Secret Redactor io.github.tylerscomic-lab/pii-redactor-mcp

    Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.

    0% up · 30 days

    Security Official MCP Registry Remote

  4. Secrets Leak Audit io.github.tylerscomic-lab/secrets-leak-audit-mcp

    Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

    100% up · 30 days

    Security Official MCP Registry Remote

  5. Security Mcp io.github.varvararatta/security_mcp

    MCP server for Security

    100% up · 30 days

    Security Official MCP Registry Remote

  6. FlowSentry io.github.vasilicasijarvis/flowsentry

    Security scanner for n8n workflows + live MCP Trust-Check. 18 rules, OWASP mapped. Paid x402 API.

    0% up · 30 days

    Workflow automation Official MCP Registry Remote

  7. Cookie Consent Compliance Scanner io.github.vincentn-waivern/cookie-checker-gdpr-ccpa-gcmv2

    Cookie consent scanner: GDPR, CCPA, GCMv2. PASS/FAIL compliance checklists with fix recommendations.

    0% up · 30 days

    Security Official MCP Registry Remote

  8. Secretguard io.github.vladimirbakalov/secretguard-mcp

    Scans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.

    Not checked: registry not supported yet

    Git and code hosting Official MCP Registry Local

  9. VulnCheck io.github.vulncheck-oss/mcp

    VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  10. ScreenSeal io.github.wthall05/screenseal-mcp

    Sanctions screening for AI agents: check a name against OFAC and EU lists. Free during launch.

    100% up · 30 days

    Security Official MCP Registry Remote

  11. SAP SuccessFactors io.github.wudaoyou/successfactors-toolkit

    SAP SuccessFactors OData and Compound Employee queries with PII tokenization for AI agents.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  12. Abnormal Security io.github.wyre-technology/abnormal-mcp

    MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  13. Avanan io.github.wyre-technology/avanan-mcp

    MCP server for Check Point Harmony Email & Collaboration (Avanan) email security.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  14. Blackpoint Cyber io.github.wyre-technology/blackpoint-mcp

    MCP server for Blackpoint Cyber MDR — alerts, threats, and operations.

    Not checked: registry not supported yet

    Monitoring and observability Official MCP Registry Local

  15. Blumira io.github.wyre-technology/blumira-mcp

    MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  16. Ironscales io.github.wyre-technology/ironscales-mcp

    MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.

    Not checked: registry not supported yet

    Monitoring and observability Official MCP Registry Local

  17. Keeper Secrets Manager io.github.wyre-technology/keeper-mcp

    Read-only multitenant Streamable HTTP bridge over Keeper Secrets Manager's MCP server.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  18. KnowBe4 io.github.wyre-technology/knowbe4-mcp

    MCP server for KnowBe4 security awareness training — users, groups, training, phishing campaigns.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  19. Mimecast io.github.wyre-technology/mimecast-mcp

    MCP server for Mimecast email security: message queue, held messages, domains, and threats.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  20. Proofpoint io.github.wyre-technology/proofpoint-mcp

    MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  21. SpamTitan io.github.wyre-technology/spamtitan-mcp

    MCP server for SpamTitan email security — quarantine, allow/block lists, and policy management.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  22. ThreatLocker io.github.wyre-technology/threatlocker-mcp

    MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

  23. lavela io.github.ym2629/lavela

    Deploy a repo to a live app from chat: servers, Postgres, domain, email, Stripe, security scan.

    100% up · 30 days

    Git and code hosting Official MCP Registry Remote

  24. Seraph io.kondux/seraph

    Crypto transaction firewall and risk tools for MCP agents.

    100% up · 30 days

    Security Official MCP Registry Remote

  25. Sentinel io.rootstuff/sentinel

    Uptime, SSL, DNS and domain monitoring you can talk to from Claude or any MCP client.

    100% up · 30 days

    Monitoring and observability Official MCP Registry Remote

  26. Mocap, rehab biomechanics, threat intel, fleet vision. 21 MCP tools, 10 free. x402/USDC paid.

    100% up · 30 days

    Security Official MCP Registry Remote

  27. Accessoracle io.tooloracle/accessoracle

    AccessOracle - 10 access control tools: IAM, PAM, recertification, segregation of duties.

    100% up · 30 days

    Security Official MCP Registry Remote

  28. Aml io.tooloracle/aml

    AMLOracle — 12-tool AML/CFT MCP: 87k sanctions names, PEP screening, adverse media, SAR/STR.

    100% up · 30 days

    Security Official MCP Registry Remote

  29. Ampel io.tooloracle/ampel

    AmpelOracle — 50-tool compliance traffic-light: Go/Caution/Stop signals for ESG, MiCA, AML.

    100% up · 30 days

    Security Official MCP Registry Remote

  30. Cybershield io.tooloracle/cybershield

    CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.

    100% up · 30 days

    Security Official MCP Registry Remote

  31. Dependencyoracle io.tooloracle/dependencyoracle

    DependencyOracle - 10 ICT dependency tools: SBOM, supply chain, third-party graph.

    100% up · 30 days

    Developer tools Official MCP Registry Remote

  32. Healthguard io.tooloracle/healthguard

    HealthGuard - 12-tool health/medical AI safety MCP: PII redaction, HIPAA, GDPR Art.9.

    100% up · 30 days

    Security Official MCP Registry Remote

  33. Tlpt io.tooloracle/tlpt

    TLPTOracle — 17-tool TIBER-EU TLPT framework: scope, threat intel, scenarios, reports.

    100% up · 30 days

    Security Official MCP Registry Remote

  34. Basis Theory MCP by usefulapi io.usefulapi/basis-theory

    Read token metadata, applications, audit logs, proxies and usage in the PCI vault.

    100% up · 30 days

    Monitoring and observability Official MCP Registry Remote

  35. Castle MCP by usefulapi io.usefulapi/castle

    Investigate security events and manage the allow/deny lists an analyst acts on.

    100% up · 30 days

    Security Official MCP Registry Remote

  36. Hetzner Cloud MCP by usefulapi io.usefulapi/hetzner-cloud

    Servers, volumes, networks, firewalls, load balancers, pricing and safe power operations.

    100% up · 30 days

    Cloud platforms Official MCP Registry Remote

  37. Lambda Labs MCP by usefulapi io.usefulapi/lambda-labs

    Read GPU instances, types, images, filesystems and firewall rules; launch and terminate instances.

    100% up · 30 days

    Cloud platforms Official MCP Registry Remote

  38. MaxMind minFraud MCP by usefulapi io.usefulapi/maxmind-minfraud

    MCP server for MaxMind minFraud — score transactions for fraud risk from your AI assistant.

    100% up · 30 days

    Security Official MCP Registry Remote

  39. RunCloud MCP by usefulapi io.usefulapi/runcloud

    Read RunCloud servers, web apps, databases and logs; deploy, restart services, renew SSL.

    100% up · 30 days

    Databases Official MCP Registry Remote

  40. Security Intel it.elsas/security-intel

    Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.

    0% up · 30 days

    Security Official MCP Registry Remote

  41. skilllint — vet an agent skill before you install it lat.rta/skilllint

    Vet an agent skill before you install it: structure, triggers, secrets.

    100% up · 30 days

    Security Official MCP Registry Remote

  42. drwho.me network and developer tools me.drwho/tools

    29 free tools: DNS, email auth (SPF, DKIM, DMARC), TLS, headers, WHOIS, dev utils.

    100% up · 30 days

    Security Official MCP Registry Remote

  43. HoneyLabs net.honeylabs/mcp

    Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.

    100% up · 30 days

    Security Official MCP Registry Remote

  44. UmbHost Knowledgebase net.umbhost/umbhost-kb-mcp

    Search and read UmbHost help articles: GreenStack, Umbraco hosting, DNS, email, SSL and more.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  45. Stigmer network.stigmer/stigmer-mcp

    Execution graph of AWS: verified contracts, least-privilege IAM policies, pre-flight authorization.

    100% up · 30 days

    Cloud platforms Official MCP Registry Remote

  46. Numertel pl.numertel/numertel

    Polish phone number lookup: who called, spam and scam checks, UKE DNO registry, CERT phishing stats

    100% up · 30 days

    Security Official MCP Registry Remote

  47. RunStack Checks pro.runstack/checks

    External checks of TLS, HTTP, email domain, DNS, ports, blocklists and domain expiry

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  48. RU INN/OGRN, banks, geo, WHOIS. Agent self-registers via register_agent. 20 free/day.

    100% up · 30 days

    Security Official MCP Registry Remote