Security MCP servers

3,378 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. CO CodeInspectus io.github.Synvoya/codeinspectus

   Local-first MCP security scanner and CLI for AI-generated applications.

   Version check not run yet

   Security Official MCP Registry · npm Local 99 a week APACHE-2.0

2. MD MCP Dataverse io.github.codeurali/dataverse

   Microsoft Dataverse MCP server: CRUD, FetchXML, metadata, schema, audit, batch and security roles.

   Version check not run yet

   Security Official MCP Registry · npm Local 99 a week MIT

3. DD Dd dev.cz-agents/dd

   Czech & EU due diligence in one call — facts, insolvency, sanctions, VAT, risk score, UBO chain.

   100% up · 30 days

   Security Official MCP Registry · npm Local Remote 98 a week MIT

4. ST Super Trouper io.github.crissyfield/super-trouper

   MCP server for the Frida reverse engineering toolkit.

   Version check not run yet

   Security Official MCP Registry · npm · Go modules Local 98 a week MIT

5. SA Sanctions dev.cz-agents/sanctions

   Sanctions screening for KYC/AML — EU FSF + OFAC SDN checks for Czech companies & individuals.

   100% up · 30 days

   Security Official MCP Registry · npm Local Remote 96 a week MIT

6. AG Agentscore io.github.Thezenmonster/agentscore

   MCP security trust layer: scan packages, inspect repos, check exposure, monitor changes.

   Version check not run yet

   Git and code hosting Official MCP Registry · npm Local 26 a week MIT

7. RE Reverse Engineering io.github.daedalus/mcp_reverse_engineering

   A sandboxed MCP tool for reverse engineering with multiple tool integrations

   Version check not run yet

   Security Official MCP Registry Local

8. OS Owasp Scan io.github.GuardBee/owasp-scan

   Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF

   Version check not run yet

   Security Official MCP Registry · npm Local 95 a week MIT

9. TB toolprint by JEStats io.github.jestatsio/toolprint

   package-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.

   Version check not run yet

   Security Official MCP Registry · npm Local 94 a week APACHE-2.0

10. DN Dnstwist io.github.w0h1v/dnstwist

    MCP server for dnstwist: detect typosquatting, phishing and brand impersonation domains.

    Version check not run yet

    Security Official MCP Registry · npm Local 93 a week MIT

11. MI Mindforge io.github.sairam0424/mindforge

    Read the MindForge engine over MCP: knowledge graph, project health, and audit log.

    Version check not run yet

    Security Official MCP Registry · npm Local 92 a week MIT

12. CC Cisa Cybersecurity io.github.cyanheads/cisa-cybersecurity-mcp-server

    CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 91 a week APACHE-2.0

13. MS MCP Security Guard io.github.petrovicistefan/mcp-security-guard

    Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).

    Version check not run yet

    Security Official MCP Registry · npm Local 91 a week MIT

14. CY Cyberark io.github.mrfentmen/cyberark-mcp

    Password breach checks and identity security audits - no API key.

    Version check not run yet

    Security Official MCP Registry · npm Local 89 a week MIT

15. EM Electron MCP Server io.github.YawLabs/electron-mcp

    Electron.js MCP server — IPC scaffolding, security auditing, build tooling for AI assistants

    Version check not run yet

    Security Official MCP Registry · npm Local 87 a week MIT

16. CI Cinema4d io.github.kumoproductions/mcp-cinema4d

    MCP server for Cinema 4D — entity CRUD, parameter-level access, batched undo, security controls.

    Version check not run yet

    Security Official MCP Registry · npm Local 86 a week MIT

17. DM Didit MCP Server me.didit/mcp

    KYC, KYB, AML, wallet screening, transaction monitoring, and fraud workflows for AI agents.

    100% up · 30 days

    Security Official MCP Registry · npm Remote 86 a week MIT

18. 3I 3ilm io.github.holistis/3ilm-mcp

    Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.

    Version check not run yet

    Security Official MCP Registry · npm Local 23 a week MIT

19. CG Code Guard io.github.mlawsonking/code-guard-mcp

    Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.

    Version check not run yet

    Security Official MCP Registry · npm Local 23 a week MIT

20. ES Env Secret Exposure Analyzer io.github.vola-trebla/env-secret-exposure-analyzer-mcp

    Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.

    Version check not run yet

    Files and storage Official MCP Registry · npm Local 23 a week MIT

21. OA Oversharing Auditor io.github.GuardBee/context-oversharing-auditor

    OWASP MCP10 context oversharing: session dumps, unscoped memory, shared context, prompt leaks

    Version check not run yet

    Security Official MCP Registry · npm Local 80 a week MIT

22. SN S2 Netbox io.github.J-MaFf/s2-netbox-mcp

    MCP server for LenelS2 S2 NetBox access control via the NBAPI. Read-only by default.

    Version check not run yet

    Security Official MCP Registry · npm Local 80 a week MIT

23. PR Prodcheck io.github.FarzamHabibi/prodcheck

    4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.

    Version check not run yet

    Security Official MCP Registry · npm Local 79 a week MIT

24. AS AIShield Security Scanner io.github.lm203688/aishield

    Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

    Version check not run yet

    Security Official MCP Registry · npm Local 78 a week MIT

25. MC mcpcut io.github.RostislavMatov/mcpcut

    Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval

    Version check not run yet

    Security Official MCP Registry · npm Local 76 a week APACHE-2.0

26. CA Config Auditor io.github.GuardBee/mcp-config-auditor

    Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

    Version check not run yet

    Developer tools Official MCP Registry · npm Local 74 a week MIT

27. KA Kastell io.github.kastelldev/kastell

    Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.

    Version check not run yet

    Security Official MCP Registry · npm Local 73 a week APACHE-2.0

28. AG Audit Gap Auditor io.github.GuardBee/audit-gap-auditor

    OWASP MCP08 audit/telemetry gaps: missing tool-call logs, raw args in logs, disabled audit

    Version check not run yet

    Monitoring and observability Official MCP Registry · npm Local 72 a week MIT

29. NR npm Registry MCP Server io.github.YawLabs/npmjs-mcp

    npm registry MCP server — package intelligence, security audits, dependency analysis

    Version check not run yet

    Developer tools Official MCP Registry · npm Local 71 a week MIT

30. AU Auditor io.github.GuardBee/mcp-server-auditor

    Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

    Version check not run yet

    Security Official MCP Registry · npm Local 70 a week MIT

31. BL blitzstrike io.github.shinthink/blitzstrike

    Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data la

    Version check not run yet

    Security npm Local 7k a week MIT

32. IS Iso27001 io.github.Sushegaad/iso27001-mcp

    ISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows.

    Version check not run yet

    Security Official MCP Registry · npm Local 69 a week MIT

33. PU Publicaml io.github.publicaml/mcp-server

    AML screening for crypto addresses: risk, sanctions, fund tracing and counterparties.

    Version check not run yet

    Security Official MCP Registry · npm Local 18 a week MIT

34. AM AgentSecurityLens MCP Security Trust Check io.github.professor2k8/agent-security-lens

    MCP security trust-check for agents before installing MCPs, Skills or tools.

    Version check not run yet

    Security Official MCP Registry · npm Local 66 a week APACHE-2.0

35. MA Maskbreak com.maskbreak/mcp

    Public IP signals (cloud hosting, Tor exits) and Maskbreak API status for fraud checks.

    Version check not run yet

    Security Official MCP Registry · npm Local 65 a week MIT

36. AG agentguard io.github.agentwares/agentguard

    MCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.

    Version check not run yet

    Security Official MCP Registry · npm Local 63 a week MIT

37. XA X402 Api io.github.fernsugi/x402-api

    Eight paid DeFi tools: prices, gas, swaps, token security, holders, yields, funding and wallets

    Version check not run yet

    Finance and payments Official MCP Registry · npm Local 63 a week MIT

38. SD security-detections-mcp io.github.mhaggis/security-detections-mcp

    Advanced MCP server for security detections with Detection Engineering Intelligence, Knowledge Graph (Tribal Knowledge), Elicitation, and Resource Subscriptions

    Version check not run yet

    Security npm Local 137 a week APACHE-2.0

39. MH MCP Health Monitor io.github.oaslananka/health-monitor-mcp

    Monitor MCP, CI, and HTTP targets with health history, TLS expiry, assertions, and diagnostics

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · npm Local 61 a week MIT

40. VS Vulnerability Scanner io.github.GuardBee/vulnerability-scanner

    Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

    Version check not run yet

    Security Official MCP Registry · npm Local 60 a week MIT

41. GI Global Intel Exchange io.github.Joseph-CEO/global-intel-exchange

    Real-time sanctions screening, CVE, and company registry checks for agents.

    Version check not run yet

    Security Official MCP Registry · npm Local 60 a week MIT

42. CT Crypto Tools io.github.mrfentmen/crypto-tools-mcp

    Hash, sign, and encrypt text locally with standard algorithms. No network and no key.

    Version check not run yet

    Finance and payments Official MCP Registry · npm Local 60 a week MIT

43. IB Ibanforge io.github.cammac-creator/ibanforge

    Check the bank behind an IBAN before you pay: bank-code check, BIC with source, bank-level sanctions

    100% up · 30 days

    Utilities Official MCP Registry · npm Local Remote 59 a week MIT

44. KA Kaidn io.kaidn/kaidn-mcp

    Explain fraud verdicts with evidence, surface account rings, and see who has burned other operators.

    Version check not run yet

    Security Official MCP Registry · npm Local 59 a week MIT

45. PC PentaTrail CTEM co.pentatrail/ctem

    PentaTrail ASM/CTEM: attack surface discovery, asset inventory, findings by threat level

    100% up · 30 days

    Security Official MCP Registry · npm Remote

46. AA Ai Agent Firewall com.fidacy/ai-agent-firewall

    Every agent action watched, every money-moving one gated, every verdict independently verifiable.

    Version check not run yet

    Security Official MCP Registry Local

47. FI Fidacy com.fidacy/mcp

    Payment firewall for AI agents: a signed, verifiable verdict on every money-moving action.

    Version check not run yet

    Security Official MCP Registry Local

48. NN Nigeria Nigsac Sanctions io.github.Braynexservices/nigeria-nigsac-sanctions

    Screen a name vs Nigeria's NIGSAC sanctions register. Best-effort signal, not compliance-grade.

    Version check not run yet

    Security Official MCP Registry Local