Security MCP servers

3,564 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

  1. Canada Sanctions Screening MCP io.github.donniertf-hub/ca-sanctions-screen-mcp

    Screen customers, suppliers and vessels against Canada's autonomous sanctions list (SEMA).

    100% up · 30 days

    Security Official MCP Registry Remote

  2. UK Sanctions Screening MCP io.github.donniertf-hub/uk-sanctions-screen-mcp

    Screen names vs the UK Sanctions List (FCDO/OFSI) plus OFAC crypto address checks.

    100% up · 30 days

    Security Official MCP Registry Remote

  3. US OFAC Sanctions Screening MCP io.github.donniertf-hub/us-sanctions-screen-mcp

    Screen customers, vendors and counterparties against the OFAC SDN list from your AI agent.

    100% up · 30 days

    Security Official MCP Registry Remote

  4. Dotmoose Tools io.github.dotmoosehosting/dotmoose-tools

    Public DNS, mail, TLS, and web diagnostics plus Looking Glass probes via remote MCP.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  5. VulKill Security io.github.dytredline/vulkill-security

    Autonomous AppSec & DAST scanner across 12 security domains (260+ controls) with 3-Layer Triage.

    100% up · 30 days

    Security Official MCP Registry Remote

  6. uta-shield Remote (Barter-enabled) io.github.eddyflores100-lang/uta-shield-remote

    Remote MCP firewall with barter protocol: identity, threat-intel, IoC lookup.

    0% up · 30 days

    Security Official MCP Registry Remote

  7. Store Canary io.github.erikras/store-canary

    Free read-only WooCommerce checks: store, SSL, exposure, SEO, speed, products, policies + 3 prompts

    100% up · 30 days

    Model and agent tools Official MCP Registry Remote

  8. REA + Ghidra Toolkit io.github.ethanhunt1981/rea-ghidra-toolkit

    Evidence-oriented REA + Ghidra static-analysis workflows, read-only PE32 and Delphi VMT tools.

    100% up · 30 days

    Security Official MCP Registry Remote

  9. Cra Check io.github.holistis/cra-check

    Free read-only check of a public GitHub repo for eight security signals related to the EU CRA.

    100% up · 30 days

    Git and code hosting Official MCP Registry Remote

  10. Honestkit io.github.honestkit/honestkit-mcp

    18 web-data tools (WHOIS/DNS/SSL, SEO, Wayback, App Store ranks, BR/FR company data) via Apify.

    Version check not run yet

    Security Official MCP Registry Local

  11. B2B Compliance, KYB, Cyber & GovCon Suite (31 Tools) io.github.jesleytassili-glitch/b2b-compliance-quant-mcp

    31 stateless B2B tools for KYB, OFAC sanctions, SEC EDGAR, CISA CVEs, FDA, tenders & tax audits.

    100% up · 30 days

    Security Official MCP Registry Remote

  12. CISA KEV Ransomware CVE, SSL CT Logs & Domain Recon io.github.jesleytassili-glitch/cybersecurity-cve-ssl-mcp

    Audit active CISA KEV ransomware CVEs, SSL/TLS CT log subdomains, SPF/DMARC security & ICANN RDAP.

    100% up · 30 days

    Security Official MCP Registry Remote

  13. Global KYB, OFAC Sanctions, GLEIF LEI & EU VAT Auditor io.github.jesleytassili-glitch/kyb-sanctions-aml-mcp

    Screen OFAC/UN/EU sanctions, verify GLEIF LEI ownership, UK Companies House/FCA & EU VIES VAT IDs.

    100% up · 30 days

    Security Official MCP Registry Remote

  14. MCP Security Sanitizer io.github.kansal-mukul/mcp-security-sanitizer

    Redacts common secrets, email addresses, and phone numbers.

    0% up · 30 days

    Security Official MCP Registry Remote

  15. Ofac Match io.github.krunalsolanki/ofac-match

    Explainable OFAC sanctions name screening against the SDN list. Runs locally, no API key.

    Version check not run yet

    Security Official MCP Registry Local

  16. Frame io.github.lambdasec/frame-mcp

    MCP server for the Frame security scanner: scan, verify, fix, exploit, packs and separation logic.

    Version check not run yet

    Security Official MCP Registry Local

  17. 72hours security check io.github.maebsy/72hours

    Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.

    100% up · 30 days

    Git and code hosting Official MCP Registry Remote

  18. AdminKit io.github.netbasecorp/adminkit-mcp

    Network, DNS, mail-auth and MCP endpoint security checks for AI agents, backed by adminkit.net.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry Local

  19. Offense io.github.offense-research/offense

    Security tools for coding agents: dependency advisory audits and evidence for remediation.

    100% up · 30 days

    Coding agent tools Official MCP Registry Remote

  20. GSC Scanner io.github.poliakarmai/gsc-scanner

    Local security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.

    Version check not run yet

    Security Official MCP Registry Local

  21. PressBridge io.github.pressbridgesupport/pressbridge

    Read-only Claude access to WordPress over MCP: secrets hidden, sandboxed, works on broken sites.

    Version check not run yet

    Files and storage Official MCP Registry Local

  22. QNSQY io.github.quantumsequrity/qnsqy

    Linux only, local: post-quantum CBOM scan, encrypt to public keys, verify. Takes no secrets

    Version check not run yet

    Security Official MCP Registry Local

  23. PandaWard io.github.ratomirjovanovic/pandaward

    Local, evidence-based application security assessment with an evidence ledger and retests.

    Version check not run yet

    Security Official MCP Registry Local

  24. Kestrova: Solidity Vulnerability Scan io.github.som2026-commits/kestrova

    Solidity vulnerability scan (Slither) for AI agents. Free preview; full report 1 USDC on Solana x402

    100% up · 30 days

    Finance and payments Official MCP Registry Remote

  25. The Agent Commons io.github.startekenterprises-ai/agent-commons

    Read-only MCP access to The Agent Commons: shared security findings for AI agents and their tools.

    Version check not run yet

    Security Official MCP Registry Local

  26. Retirement Contribution Limits 2027 io.github.theluckystrike/retirement-contribution-limits-2027-mcp

    401(k), IRA, HSA limits, age 60-63 catch-up, Roth catch-up rule, Social Security COLA, 2025-2027.

    100% up · 30 days

    Security Official MCP Registry Remote

  27. Subdomain Finder MCP io.github.theluckystrike/subdomain-finder-mcp

    Passive subdomain enumeration from certificate transparency (certspotter, crt.sh) with DNS checks.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  28. EU e-invoicing and business checks (EN 16931, Peppol, VAT, sanctions) io.github.wsystemdev/eu-business-data-mcp

    EN 16931/XRechnung e-invoice validate+create, Peppol routing, EU VAT/EORI, sanctions, KYB. Free tier

    0% up · 30 days

    Finance and payments Official MCP Registry Remote

  29. InfraNest io.infranest/infranest

    Monitor websites, servers, domains and SSL with InfraNest, and ask your AI assistant what is down.

    100% up · 30 days

    Security Official MCP Registry Remote

  30. ipdata MCP by usefulapi io.usefulapi/ipdata

    Look up location, network, company and threat data for IP addresses and ASNs in ipdata.

    100% up · 30 days

    Security Official MCP Registry Remote

  31. VerifyGrid B2B Compliance & Entity Verification io.verifygrid/b2b-compliance-verifier

    Sub-50ms verification for FMCSA USDOT/MC, CMS NPI, OFAC/OIG/SAM sanctions, and TCPA phone risk.

    100% up · 30 days

    Legal and compliance Official MCP Registry Remote

  32. Vibescan net.bigfloppy.vibescan/vibescan

    Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.

    100% up · 30 days

    Git and code hosting Official MCP Registry Remote

  33. SecLens.ONE Email Security one.seclens/seclens

    Assess any domain's email security across SPF, DMARC, DKIM, MTA-STS, DNSSEC, DANE, and TLS-RPT.

    100% up · 30 days

    Security Official MCP Registry Remote

  34. PatrolTech online.patroltech/patroltech

    Security patrol management: missed rounds, suspicious scans, incidents and checkpoint setup.

    100% up · 30 days

    Monitoring and observability Official MCP Registry Remote

  35. mcpprobe tech.mcpprobe/scanner

    Read-only MCP security data: check catalogue, public scan status and your own scan reports.

    100% up · 30 days

    Security Official MCP Registry Remote

  36. Blackpoint Cyber CompassOne MCP io.github.Servosity/blackpoint-mcp

    Blackpoint Cyber CompassOne: tenants, detections, assets, vulnerabilities and a cross-tenant view.

    Version check not run yet

    Security Official MCP Registry Local

  37. Harbor io.github.oreondev/harbor-mcp

    Read-only access to a Harbor registry: projects, artifacts, vulnerabilities, robots and replication.

    Version check not run yet

    Security Official MCP Registry Local

  38. Agentum Entity Resolver io.github.Algiras/agentum-entity-resolver

    Corporate entity resolution, VAT verification and sanctions screening via Agentum.

    100% up · 30 days

    Security Official MCP Registry Remote

  39. Dependency check io.github.ladanyin/dependency-check

    Check a package version for known vulnerabilities and Packagist release facts.

    100% up · 30 days

    Developer tools Official MCP Registry Remote

  40. Coin Scout io.github.dennisyilmaz/coin-scout

    Read-only Solana MCP server for on-chain analysis and fraud investigation, backed by Helius

    Version check not run yet

    Finance and payments Official MCP Registry Local

  41. VaultCord com.vaultcord/vaultcord

    Manage VaultCord-protected Discord servers: members, verification, backups and security.

    100% up · 30 days

    Files and storage Official MCP Registry Remote

  42. Social Security COLA 2027 MCP io.github.theluckystrike/social-security-cola-2027-mcp

    Social Security COLA 2027, full retirement age, earnings test and 2027 limits from SSA notices.

    100% up · 30 days

    Security Official MCP Registry Remote

  43. Keeper Security MCP io.github.Servosity/keeper-mcp

    Read-only Keeper MSP posture across every client, with history, a change feed and no path to a

    Version check not run yet

    Security Official MCP Registry Local

  44. Symantec Cloud DLP AIops io.github.AIops-tools/symantec-clouddlp-aiops

    Governed Symantec Cloud DLP — 14 MCP tools, read-only with audit.

    Version check not run yet

    Security Official MCP Registry Local

  45. Symantec Data Center Security AIops io.github.AIops-tools/symantec-dcs-aiops

    Governed Symantec DCS operations — 35 MCP tools, read-only with audit.

    Version check not run yet

    Security Official MCP Registry Local

  46. APC Security Reference Server io.github.Aleph-Lab-s/apc-security-reference-server

    Reference MCP server for synthetic APC action-security evaluation and local SQLite sandbox testin...

    Version check not run yet

    Security Official MCP Registry Local

  47. US Business Verification MCP Server ai.greyridgesignals/business-verification-mcp

    KYB / know your business: verify US firms vs state registries + OFAC sanctions screen. Keyless.

    100% up · 30 days

    Security Official MCP Registry Remote

  48. mcp-web-ui io.github.drakosfire/mcp-web-ui-standalone

    Ultra-lightweight vanilla JavaScript framework for MCP servers - Zero dependencies, perfect security, 2-3KB bundle size

    Version check not run yet

    Developer tools npm Local 3 a week MIT