Security MCP servers

3,564 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. TU Tuqo ru.tuqo/mcp 1.2 · 23/100

   Static hosting in Russia: sites, deploys, domains with SSL, forms, gated access, analytics via MCP.

   100% up · 30 days

   Data warehouses and analytics Official MCP Registry Remote

2. WR wwhois.ru domain tools ru.wwhois/whois-mcp 1.2 · 23/100

   WHOIS/RDAP lookup, IP geolocation and Punycode conversion. 1400+ TLDs incl. IDN. No API key.

   100% up · 30 days

   Security Official MCP Registry Remote

3. MS mlab.sh sh.mlab/mcp 1.2 · 23/100

   Threat intel and DFIR: IOCs, CVEs, actors, SBOMs, domain scans, cases, memory, Kubernetes, Proxmox.

   100% up · 30 days

   Security Official MCP Registry Remote

4. DR Drawbridge sh.xorfox.drawbridge/server 1.2 · 23/100

   Identity, secrets, and passwordless SSH provisioning for AI agents — Keycloak, vault, MCP tools.

   100% up · 30 days

   Security Official MCP Registry Remote

5. GM Grokzilla micro pay shop.grokzilla/micro-pay 1.2 · 23/100

   32 x402 pay-per-call tools: SEO, agent audits, JSON/text utils, OSINT. USDC on Base; $1=300 calls

   100% up · 30 days

   Security Official MCP Registry Remote

6. TA TAP tech.human/tap 1.2 · 23/100

   Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval.

   100% up · 30 days

   Security Official MCP Registry Remote

7. XF Xfa tech.xfa/xfa 1.2 · 23/100

   XFA's remote MCP server — query device posture, compliance, policies & CVEs. Read-only.

   100% up · 30 days

   Security Official MCP Registry Remote

8. E8 ERC-8126 Scan uk.co.cybercentry/erc-8126-scan 1.2 · 23/100

   378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402.

   100% up · 30 days

   Security Official MCP Registry Remote

9. CV Cybercentry Verification uk.co.cybercentry/verification 1.2 · 23/100

   Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.

   100% up · 30 days

   Security Official MCP Registry Remote

10. SW Swamp world.swampai/swamp 1.2 · 23/100

    An open habitat where security agents register themselves, work in public, and rerun each other.

    0% up · 30 days

    Security Official MCP Registry Remote

11. SU SecureLend Underwriting ai.securelend/lender 1.2 · 23/100

    Open a credit file, chase gaps, screen sanctions, draft a cited memo. Person decides.

    100% up · 30 days

    Files and storage Official MCP Registry Remote

12. SP Spotafraud ai.spotafraud/spotafraud 1.2 · 23/100

    Check Australian (.au) domains for fraud and age — cert history, lookalikes, and an AI verdict.

    100% up · 30 days

    Security Official MCP Registry Remote

13. HA HighLevel Agency & Builder MCP app.ghlmcp/highlevel-agency-mcp 1.2 · 23/100

    Full-stack GoHighLevel (GHL) MCP for funnels, client DNS/SSL, LeadShield spam blockers & snapshots.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

14. PO Porticol app.porticol/porticol-mcp 1.2 · 23/100

    Search, read, send and run API collections over MCP. Secrets masked; protected envs gated.

    Not checked yet

    Security Official MCP Registry

15. HA HighLevel Agency & Builder MCP com.ghlagencymcp/highlevel-agency-mcp 1.2 · 23/100

    Full-stack GoHighLevel (GHL) MCP for funnels, client DNS/SSL, LeadShield spam blockers & snapshots.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

16. DE Depsonar com.soflution/depsonar 1.2 · 23/100

    Dependency audits, live CVE scans, migration detection and stack health across 9 languages.

    Not checked: registry not supported yet

    Developer tools Official MCP Registry Local

17. MC McpHub com.soflution/mcphub 1.2 · 23/100

    One MCP endpoint for all your servers: a few meta-tools, Keychain secrets, sandbox, audit, OAuth.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

18. HA HighLevel Agency & Builder MCP dev.ghlmcp/highlevel-agency-mcp 1.2 · 23/100

    Full-stack GoHighLevel (GHL) MCP for funnels, client DNS/SSL, LeadShield spam blockers & snapshots.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

19. FC Fin Codes API com.fincodesapi/fincodesapi 1.2 · 23/100

    Validate IBANs and bank codes, verify payee names, and screen names against sanctions lists.

    100% up · 30 days

    Security Official MCP Registry Remote

20. CO Context ai.everydaysecurity/context 1.2 · 23/100

    OSINT investigations with traceable evidence: domains, URLs, IPs, scams and business records.

    100% up · 30 days

    Security Official MCP Registry Remote

21. RE RenewRoster com.renewroster/renewroster 1.2 · 23/100

    Track domain and SSL certificate expiry for your agency clients from any MCP client.

    100% up · 30 days

    Security Official MCP Registry Remote

22. WI Willder ai.willder/willder 1.2 · 23/100

    One memory for your AI agents: scoped, expiring, revocable per-agent tokens and an audit log.

    100% up · 30 days

    Security Official MCP Registry Remote

23. PD Prax Data Services com.orabrain/prax-data-services 1.2 · 23/100

    Screen EVM wallets, contracts and transactions against sanctions, exploit, phishing and scam intel.

    100% up · 30 days

    Security Official MCP Registry Remote

24. VE vetkit dev.vetkit/mcp 1.2 · 23/100

    Audit repos for security, code quality and AI code risks; read findings and open fix PRs.

    Check queued

    Developer tools Official MCP Registry Local

25. ST Stackurity dev.stackurity/stackurity 1.2 · 23/100

    Installed software, vulnerabilities and end-of-life components across your servers, apps and repos

    100% up · 30 days

    Git and code hosting Official MCP Registry Remote

26. FX facts402: x402 API finder + fact checks com.facts402/facts402-mcp 1.2 · 23/100

    Find the right paid x402 API, plus fact checks: IBAN, EU VAT, OFAC sanctions, LEI, FX

    Check queued

    Security Official MCP Registry Local

27. OO Opsis OSINT com.useopsis/opsis 1.2 · 23/100

    OSINT search: find the accounts behind an email, username or domain across 1,000+ sources.

    100% up · 30 days

    Security Official MCP Registry Remote

28. VU vulntel com.vulntel/mcp 1.2 · 23/100

    Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports

    100% up · 30 days

    Security Official MCP Registry Remote

29. VO Vongola ai.qompass/vongola 1.2 · 23/100

    Read-only operator instrumentation for the vongola TLS gateway.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

30. PM Prembly MCP Server com.prembly/mcp-server 1.2 · 23/100

    Identity verification, compliance and fraud detection checks from Prembly, for LLM clients.

    100% up · 30 days

    Security Official MCP Registry Remote

31. OH Ohey ca.ohey/ohey 1.2 · 23/100

    Look up hosts in the Ohey web malware feed, read CVEs and scan URLs with Ohey's scanner.

    100% up · 30 days

    Security Official MCP Registry Remote

32. OR Ohey research ca.ohey/research 1.2 · 23/100

    Web malware techniques, kits and EtherHiding contracts from Ohey's website scans. No sign-in.

    100% up · 30 days

    Science and research Official MCP Registry Remote

33. PS Power Strip Security io.github.AlbertBalestrini/power-strip-security 1.2 · 23/100

    Prompt-injection shield for agents: read pages, scan content, audit MCP servers and skills. x402.

    100% up · 30 days

    Security Official MCP Registry Local Remote

34. AT Agent Trust Firewall io.github.Benji18sport/agent-trust-firewall 1.2 · 23/100

    Free pre-action policy checks and data cleaning for autonomous AI agents.

    100% up · 30 days

    Security Official MCP Registry Remote

35. EA Eclipse Archivist io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-archivist-mcp 1.2 · 23/100

    Capture witness: content, headers + TLS cert sealed as one signed bundle; fixture captures only.

    Not checked yet

    Security Official MCP Registry

36. EM Eclipse Muzzle io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-muzzle-mcp 1.2 · 23/100

    Secrets + PII scanner. A PASS verdict is scan evidence, not a guarantee of safety or non-defamation.

    Not checked yet

    Security Official MCP Registry

37. IQ IA-QA Security — 30 tools io.github.JcJamet/ia-qa-security 1.2 · 23/100

    Agent security: prompt injection, PII & secret scans, TLS/header/CORS audits, MCP checks. Free.

    100% up · 30 days

    Security Official MCP Registry Remote

38. IS IDigiTrust SSL Toolkit io.github.Mintreetech/ssl-toolkit-mcp 1.2 · 23/100

    Free SSL/PKI tools: HTTPS audit incl. GM SM2/TLCP, DCV pre-check, CSR, cert decode, P12/JKS.

    100% up · 30 days

    Security Official MCP Registry Remote

39. SC Scovant Core io.github.Scovant/scovant-core 1.2 · 23/100

    Passive AI-agent readiness scan of a website: robots, llms.txt, JSON-LD, MCP discovery, security.

    Check queued

    Security Official MCP Registry Local

40. DE Depsonar io.github.Soflutionltd/depsonar 1.2 · 23/100

    Dependency audits, live CVE scans, migration detection and stack health across 9 languages.

    Not checked: registry not supported yet

    Developer tools Official MCP Registry Local

41. MC McpHub io.github.Soflutionltd/mcphub 1.2 · 23/100

    One MCP endpoint for all your servers: a few meta-tools, Keychain secrets, sandbox, audit, OAuth.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

42. NM NullWire-MCP io.github.VoxNode-ux/nullwire-mcp 1.2 · 23/100

    RAM-only HTTP debugging proxy and MCP server in Go. AI agents see salted tags, never secrets.

    Not checked yet

    Developer tools Official MCP Registry

43. PS Petra Security io.github.WYRE-AI/petra-mcp 1.2 · 23/100

    Read-only Petra Security MCP: M365 compromise incidents, failed attacks, posture, tenants, usage.

    Not checked: registry not supported yet

    Security Official MCP Registry Local

44. AT afro.tools io.github.afrotools/afrotools 1.2 · 23/100

    Open-source API specs for African providers (payments, SMS, KYC, delivery) for AI agents.

    100% up · 30 days

    Security Official MCP Registry Remote

45. PO Pulse402 Oracle io.github.ak10082247-max/pulse402-oracle 1.2 · 23/100

    Real-time Base & Solana liquidity, Polymarket orderflow, and pre-trade security via x402 V2.

    0% up · 30 days

    Finance and payments Official MCP Registry Remote

46. A6 ACM-68000 signals for listed issuers io.github.allooloo/acm-signals 1.2 · 23/100

    The ACM-68000 signal of a listed security in its home market: trading, not listed, read the filing.

    100% up · 30 days

    Security Official MCP Registry Remote

47. TM theHarvester MCP io.github.devkindhq/theharvester-mcp 1.2 · 23/100

    OSINT email and subdomain discovery for AI agents, powered by theHarvester. Multi-arch Docker.

    Not checked: registry not supported yet

    DevOps and infrastructure Official MCP Registry Local

48. AS Australia Sanctions Screening MCP io.github.donniertf-hub/au-sanctions-screen-mcp 1.2 · 23/100

    Screen names against Australia DFAT consolidated sanctions targets.

    100% up · 30 days

    Security Official MCP Registry Remote