Security MCP servers

3,571 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

pkgguard-mcp com.npmjs/pkgguard-mcp

MCP server: check any npm package for malware, typosquats and supply-chain risk before an AI coding agent installs it.

Version check not run yet

Coding agent tools npm Local 6 a week MIT
selfhosted-doctor com.npmjs/selfhosted-doctor

AI-ready security checks for self-hosted homelabs, starting with Docker Compose.

Version check not run yet

DevOps and infrastructure npm Local 6 a week MIT
SecurityScan net.apisecurityscan/securityscan

Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.

100% up · 30 days

Security Official MCP Registry Remote
tanuki-mcp io.github.tarfu/tanuki-mcp

A GitLab MCP server with fine-grained access control

Version check not run yet

Git and code hosting crates.io Local
mcp-npm-registry com.npmjs/mcp-npm-registry

MCP server for the npm registry — search packages, check versions, vulnerabilities, download stats and more

Version check not run yet

Security npm Local 11 a week MIT
vuln-mcp-example-indirect-prompt-injection io.github.appsecco/pentesting-mcp-servers-j2fn8w

A vulnerable MCP server demonstrating indirect prompt injection through document retrieval

Version check not run yet

Model and agent tools npm Local 5 a week MIT
mcplint io.github.quanticsoul4772/mcplint

MCP Server Testing, Fuzzing, and Security Scanning Platform

Version check not run yet

Developer tools crates.io Local
@ebowwa/mcp-nm com.npmjs.ebowwa/mcp-nm

Comprehensive binary analysis MCP server - symbols (nm), hex dumps (xxd), strings, disassembly, security audit, entropy analysis, ELF/Mach-O inspection, binary patching, macOS code signing, and persis

Version check not run yet

Security npm Local MIT
@mosamircs/security-mcp com.npmjs.mosamircs/security-mcp

Production-grade Security Model Context Protocol (MCP) platform for static, dependency, secret, configuration, mobile, and live security audits.

Version check not run yet

Security npm Local 5 a week APACHE-2.0
kollguard-mcp com.npmjs/kollguard-mcp

MCP server for KollGuard — read your SOC 2 / HIPAA security findings & posture from any MCP client (Claude Code, Cursor, VS Code, Windsurf, Zed).

Version check not run yet

Developer tools npm Local 5 a week MIT
mcp-server-privacy com.npmjs/mcp-server-privacy

Model Context Protocol (MCP) server for automated PII sanitization, confidential compute boundaries, and prompt privacy budgeting.

Version check not run yet

Security npm Local 5 a week MIT
prest-code com.npmjs/prest-code

AI-powered security scanner, web crawler, and Playwright test generator for GitHub PRs

Version check not run yet

Git and code hosting npm Local 5 a week MIT
qualys-mcp-server com.npmjs/qualys-mcp-server

MCP server for Qualys vulnerability management and compliance platform

Version check not run yet

Security npm Local 5 a week MIT
rls-guard-mcp com.npmjs/rls-guard-mcp

Ship-readiness check for your Supabase backend. Point it at your OWN project and it flags every table the public anon key can read or insert into, plus any anon-callable RPC functions — and returns th

Version check not run yet

Databases npm Local 5 a week MIT
testraptor-x402-mcp com.npmjs/testraptor-x402-mcp

Serveur MCP exposant les API payantes TestRaptor (vérification TLS, monitoring, captures d'écran) en paiement à l'unité x402 (USDC/Solana, gas sponsorisé).

Version check not run yet

Monitoring and observability npm Local 5 a week MIT
Idig Dns net.softricks/idig-dns

Professional DNS diagnostics: 14 tools for DNS, DNSSEC, email security, SSL, and propagation.

100% up · 30 days

DevOps and infrastructure Official MCP Registry Remote
@catafal/mcp com.npmjs.catafal/mcp

CAUL adapter for MCP servers — wraps tool handlers with security checks and injects canary honeypots

Version check not run yet

Security npm Local ELASTIC-2.0
@sparrowai/sparrow-mcp com.npmjs.sparrowai/sparrow-mcp

A Model Context Protocol (MCP) server that automatically analyzes security vulnerabilities in your code and generates secure code alternatives. This server integrates with Cursor IDE to provide real-t

Version check not run yet

Developer tools npm Local 56 a week
Aguara MCP io.github.garagon/aguara-mcp

Security scanner for AI agent skills and MCP servers

Version check not run yet

Security Official MCP Registry Local
SBOMApp - SBOM Generator & Vulnerability Scanner io.github.mcpsbom/sbom-mcp

Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.

100% up · 30 days

Security Official MCP Registry Remote
@toknbase/mcp-server com.npmjs.toknbase/mcp-server

MCP server for Toknbase -- zero-knowledge secrets management for AI agents

Version check not run yet

Security npm Local 10 a week MIT
@astracipher/mcp-server com.npmjs.astracipher/mcp-server

AstraCipher as an MCP Server - identity verification tools for AI agents

Version check not run yet

Security npm Local APACHE-2.0
campus-security-mcp com.npmjs/campus-security-mcp

校园安防助手 MCP 服务器

Version check not run yet

Security npm Local 6 a week MIT
@wefi-ai/ekyc-suite-media-labeling-mcp com.npmjs.wefi-ai/ekyc-suite-media-labeling-mcp

KYC media labeling MCP, KYC image labeling MCP, and media review MCP under eKYC Suite for selected portrait, scene, and media-risk labels during KYC onboarding.

Version check not run yet

Security npm Local 4 a week MIT
aegis-dlp com.npmjs/aegis-dlp

Zero-Trust Security Proxy & In-Stream DLP Firewall for Autonomous Tool Chains and APIs

Version check not run yet

Security npm Local 4 a week MIT
agentguard-gateway com.npmjs/agentguard-gateway

Self-hosted firewall for AI agents — a transparent MCP gateway that intercepts every tool call, applies an allow/deny/ask policy with human-in-the-loop approval, and streams an audit trail to your own

Version check not run yet

Model and agent tools npm Local 4 a week SEE-LICENSE-IN
knownfy-mcp com.npmjs/knownfy-mcp

MCP server for the Knownfy compliance intelligence API (KYC/KYB). Investigate entities, query relationship graphs, monitor watchlists and run bulk batches from Claude Desktop, Cursor or Claude Code.

Version check not run yet

Security npm Local 4 a week MIT
koi-mcp-server com.npmjs/koi-mcp-server

MCP Server for KOI Security Platform API

Version check not run yet

Security npm Local 4 a week ISC
mcp-cli-core com.npmjs/mcp-cli-core

Shared core library for AI CLI MCP servers — subprocess runner, security, types, and progress utilities

Version check not run yet

Security npm Local 4 a week MIT
mcp-rdap com.npmjs/mcp-rdap

Model Context Protocol (MCP) server for Registration Data Access Protocol (RDAP) lookups replacing legacy WHOIS under ICANN specifications.

Version check not run yet

Security npm Local 4 a week MIT
shipsafe-mcp com.npmjs/shipsafe-mcp

ShipSafe MCP server — run security scans locally inside Claude Code, Codex, and other MCP hosts.

Version check not run yet

Security npm Local 4 a week MIT
ss-api-mcp-server com.npmjs/ss-api-mcp-server

MCP server for the Sanction Scanner AML/sanctions screening API. Exposes the full Sanction Scanner API V2 as tools so AI clients can screen names, manage cases, customers, KYB, transactions and more r

Version check not run yet

Security npm Local 4 a week MIT
claimdesk-fraud-detector-mcp com.npmjs/claimdesk-fraud-detector-mcp

MCP server for insurance fraud detection — AI-powered claim fraud scoring, red flag analysis, SIU referral reports, and fraud pattern matching for insurance claims

Version check not run yet

Security npm Local 6 a week MIT
@iflow-mcp/rocklambros-nist-csf-2-mcp-server com.npmjs.iflow-mcp/rocklambros-nist-csf-2-mcp-server

MCP server implementation for NIST Cybersecurity Framework 2.0

Version check not run yet

Security npm Local MIT
apilocker-mcp com.npmjs/apilocker-mcp

MCP server for API key security guidance and management — powered by API Locker

Version check not run yet

Security npm Local 6 a week MIT
@integsec/agentic-pentest-proxy com.npmjs.integsec/agentic-pentest-proxy

IntegSec Agentic Pentest MCP Proxy — enforce penetration testing engagement scope for AI agents

Version check not run yet

Security npm Local 9 a week MIT
@iflow-mcp/jasperket-clanki com.npmjs.iflow-mcp/jasperket-clanki

[![MseeP.ai Security Assessment Badge](https://mseep.net/pr/jasperket-clanki-badge.png)](https://mseep.ai/app/jasperket-clanki) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](h

Version check not run yet

Security npm Local MIT
twittter-mcp io.github.appsecco/pentesting-mcp-servers

A simple MCP server to fake and demo Namespace Typosquatting

Version check not run yet

Security npm Local 3 a week MIT
@ebowwa/mcp-nmap com.npmjs.ebowwa/mcp-nmap

Nmap MCP server with 18 security tools for network scanning and reconnaissance

Version check not run yet

Security npm Local 17 a week MIT
@nano-rs/investigator-artifacts-mcp-server com.npmjs.nano-rs/investigator-artifacts-mcp-server

Local static-analysis MCP server for nano Artifacts — exiftool / YARA / olevba / PDF / PE triage run on the analyst's own machine, on a local specimen file

Version check not run yet

Developer tools npm Local 3 a week MIT
@wefi-ai/ekyc-suite-ai-guardian-mcp com.npmjs.wefi-ai/ekyc-suite-ai-guardian-mcp

Face liveness MCP, KYC face liveness MCP, KYC liveness detection MCP, replay detection MCP, and deepfake detection MCP under eKYC Suite for photo/video liveness and KYC onboarding anti-spoofing.

Version check not run yet

Design and media npm Local 3 a week MIT
frontend-security-audit com.npmjs/frontend-security-audit

MCP server for auditing frontend project npm dependencies (direct and transitive) and generating markdown security audit reports

Version check not run yet

Developer tools npm Local 3 a week MIT
mcp-whois com.npmjs/mcp-whois

Model Context Protocol (MCP) server providing authoritative Verisign & ICANN socket WHOIS queries and domain lifecycle analysis.

Version check not run yet

Security npm Local 3 a week MIT
nexus-intelligence-mcp com.npmjs/nexus-intelligence-mcp

58-endpoint utility hub via x402 - web scraping, DNS, CVE, translation, PII detection, company intel. Pay per call on Base.

Version check not run yet

Security npm Local 3 a week MIT
qualys-mcp com.npmjs/qualys-mcp

MCP server for the Qualys VMDR API (read-only) — hosts, vulnerability detections, KnowledgeBase, scans, reports and asset groups

Version check not run yet

Security npm Local 3 a week MIT
security-headers-mcp com.npmjs/security-headers-mcp

Security auditing MCP server: checks SSL/TLS certificates, security headers (HSTS, CSP, CORS, etc.), and generates vulnerability reports with severity scoring.

Version check not run yet

Security npm Local 3 a week MIT
sublime-mcp-server com.npmjs/sublime-mcp-server

Local (stdio) MCP server for the Sublime Security platform API — analyze email messages, validate detection rules, run threat hunts, and perform security analysis.

Version check not run yet

Security npm Local 3 a week MIT
vuln-mcp-example-local-code-exec-qotd io.github.appsecco/pentesting-mcp-servers-0zysed

A simple MCP server with a get_qotd tool that fetches quotes from a free API

Version check not run yet

Security npm Local 2 a week MIT