Security MCP servers

3,573 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. SG security-guardian-pro com.npmjs/security-guardian-pro 0.9 · 17/100

   企业级全栈安全审计 MCP Server — 内置 OWASP Top 10 + CWE Top 25 检测引擎，覆盖注入/访问控制/加密/配置/敏感信息/供应链安全

   Version check not run yet

   Security npm Local 1 a week MIT

2. SC stell-code com.npmjs/stell-code 0.9 · 17/100

   AI-powered security scanner, web crawler, and Playwright test generator for GitHub PRs

   Version check not run yet

   Git and code hosting npm Local 1 a week MIT

3. SW superfast-watchguard-mcp com.npmjs/superfast-watchguard-mcp 0.9 · 17/100

   MCP server for the WatchGuard Cloud API (read-only) — Firebox inventory, licence health, security/executive reports and MSSP reconciliation for Service Provider (MSP) accounts

   Version check not run yet

   Security npm Local 1 a week ISC

4. TO toolfence com.npmjs/toolfence 0.9 · 17/100

   Security scanner for MCP servers. Point it at any Model Context Protocol server and get a severity-ranked security report.

   Version check not run yet

   Security npm Local 1 a week APACHE-2.0

5. WM wardloom-mcp com.npmjs/wardloom-mcp 0.9 · 17/100

   MCP server for Wardloom — trigger pre-deploy security scans, poll the ship-gate verdict, fetch remediation roadmaps and Dev/AI handoff prompts, and run zero-network local prechecks, all from your IDE'

   Version check not run yet

   Model and agent tools npm Local 1 a week MIT

6. XC xclaudeai com.npmjs/xclaudeai 0.9 · 17/100

   xCLAUDE — A receipt for your AI. Local audit log for every Claude tool call.

   Version check not run yet

   Security npm Local 1 a week MIT

7. @M @alluresecurity/mcp com.npmjs.alluresecurity/mcp 0.9 · 17/100

   MCP server for Allure Security platform API

   Version check not run yet

   Security npm Local

8. @S @coffeectx/secrets-mcp com.npmjs.coffeectx/secrets-mcp 0.9 · 17/100

   MCP server exposing coffeectx secret-scoped command execution

   Version check not run yet

   Security npm Local

9. @A @cyber-agents/mcp-server com.npmjs.cyber-agents/mcp-server 0.9 · 17/100

   MCP server for developer-friendly security scanning in Codex and AI coding tools

   Version check not run yet

   Security npm Local

10. @C @lumir-company/drm-mcp com.npmjs.lumir-company/drm-mcp 0.9 · 17/100

    Internal MCP server bridging DocuRay DRM sidecar (encrypt/decrypt/check-status)

    Version check not run yet

    Security npm Local

11. @S @securityreviewai/security-review-mcp com.npmjs.securityreviewai/security-review-mcp 0.9 · 17/100

    Security Review MCP server (pure Node/TypeScript, npx-ready)

    Version check not run yet

    Security npm Local

12. @M @seenty/mcp com.npmjs.seenty/mcp 0.9 · 17/100

    Seenty MCP server — query your monitors, uptime and security findings (secrets, cloud misconfigs, CVEs) from AI clients

    Version check not run yet

    Security npm Local

13. @S @slate-security/mcp-server com.npmjs.slate-security/mcp-server 0.9 · 17/100

    MCP server for orchestrating Slate security scans from Claude, Cursor, and other AI agents

    Version check not run yet

    Security npm Local

14. @M @thoute/mcp com.npmjs.thoute/mcp 0.9 · 17/100

    Local MCP server for a Thoute vault — pulls ciphertext over the Thoute API and decrypts client-side.

    Version check not run yet

    Security npm Local

15. @M @useoneid/mcp-server com.npmjs.useoneid/mcp-server 0.9 · 17/100

    Official Model Context Protocol (MCP) Server for UseOneID Sovereign KYC & Fraud Verification

    Version check not run yet

    Security npm Local

16. HB house-base-mcp com.npmjs/house-base-mcp 0.9 · 17/100

    House — Smart contract intelligence for AI agents on Base. MCP server exposing security attestations, safety checks, and scan requests.

    Version check not run yet

    Security npm Local 3 a week MIT

17. SM secrets-mcp com.npmjs/secrets-mcp 0.9 · 17/100

    MCP server for querying a Markdown secrets file from Claude Code

    Version check not run yet

    Security npm Local 4 a week MIT

18. @M @creditpullengine/mcp com.npmjs.creditpullengine/mcp 0.9 · 17/100

    MCP connector for the Credit Pull Engine API. PII (SSN/DOB) stays on the calling machine and the credit report response is decrypted locally — agents pass an applicant_id reference and receive only a

    Version check not run yet

    Security npm Local

19. @M @iflow-mcp/owasp-blt-blt-mcp com.npmjs.iflow-mcp/owasp-blt-blt-mcp 0.8 · 17/100

    MCP server providing AI agents structured access to the BLT ecosystem

    Version check not run yet

    Security npm Local 5 a week MIT

20. RM repograph-mcp com.npmjs/repograph-mcp 0.8 · 17/100

    RepoGraph MCP server — 35 tools for code graph queries, quality analysis, conventions, security, runtime debugging, and temporal history

    Version check not run yet

    Developer tools npm Local 4 a week MIT

21. @V @openclawdsolana/vault-mcp com.npmjs.openclawdsolana/vault-mcp 0.8 · 17/100

    ClawdVault MCP server for security scanning and vault operations

    Version check not run yet

    Security npm Local 1 a week MIT

22. @S @clawbow/synology-mcp-security com.npmjs.clawbow/synology-mcp-security 0.8 · 17/100

    MCP server for Synology Security - Security management via Model Context Protocol

    Version check not run yet

    Security npm Local 4 a week MIT

23. MJ mcp-jasypt-server com.npmjs/mcp-jasypt-server 0.8 · 17/100

    MCP stdio server for hnair-tools Jasypt encrypt/decrypt API

    Version check not run yet

    Security npm Local 3 a week ISC

24. TR token-revoke-mcp io.github.kukapay/token-revoke-mcp 0.8 · 17/100

    An MCP server for checking and revoking ERC-20 token allowances, enhancing security and control.

    Version check not run yet

    Security npm Local 4 a week MIT

25. @M @easysolutions906/mcp-cusip-isin com.npmjs.easysolutions906/mcp-cusip-isin 0.8 · 17/100

    CUSIP and ISIN security identifier validator - validate, parse, and batch-check financial instrument codes

    Version check not run yet

    Security npm Local 4 a week ISC

26. @S @szcn/sentinelreview com.npmjs.szcn/sentinelreview 0.8 · 17/100

    AI-powered code review — security (OWASP Top 10), code quality, standards enforcement, and custom rules. 6 providers (Ollama free/local, Gemini, Groq, DeepSeek, OpenAI, Anthropic). MCP server for Curs

    Version check not run yet

    Model and agent tools npm Local 6 a week MIT

27. @V @carely/vaultwarden-mcp com.npmjs.carely/vaultwarden-mcp 0.8 · 17/100

    MCP server for Vaultwarden.

    Version check not run yet

    Security npm Local

28. @A @trust-assurance-protocol/owaspscan com.npmjs.trust-assurance-protocol/owaspscan 0.8 · 17/100

    Professional OWASP Top 10 + LLM Top 10 security auditor for AI-generated and human-written code

    Version check not run yet

    Security npm Local 3 a week MIT

29. @M @baiby/mcp com.npmjs.baiby/mcp 0.8 · 17/100

    bAIbysitter MCP server — intent-based transaction security for vibecoding

    Version check not run yet

    Security npm Local 5 a week MIT

30. BM bob-mcp-vuln-intake com.npmjs/bob-mcp-vuln-intake 0.8 · 17/100

    MCP server for vulnerability intake - fetches and normalizes Jira/GitHub issues

    Version check not run yet

    Project management npm Local 2 a week APACHE-2.0

31. SC ScanMalware.com URL Scanner com.scanmalware.mcp/scanmalware-mcp 0.8 · 17/100

    MCP server for ScanMalware.com URL scanning, malware detection, and analysis.

    100% up · 30 days

    Security Official MCP Registry Remote

32. BS bob-sps-helper com.npmjs/bob-sps-helper 0.8 · 17/100

    MCP server with Bob Commands for IBM Verify SaaS SPS security issue management and migration helper

    Version check not run yet

    Security npm Local 1 a week MIT

33. @M @iflow-mcp/robertodure-mcp-vulnerability-scanner com.npmjs.iflow-mcp/robertodure-mcp-vulnerability-scanner 0.8 · 17/100

    An MCP server for scanning vulnerabilities on IP addresses

    Version check not run yet

    Security npm Local 5 a week MIT

34. @N @ringo380/namecheap-mcp com.npmjs.ringo380/namecheap-mcp 0.8 · 17/100

    MCP server for the Namecheap API — domains, DNS, SSL, and account management

    Version check not run yet

    DevOps and infrastructure npm Local

35. AM audited-mcp com.npmjs/audited-mcp 0.8 · 17/100

    MCP server for audited.xyz — AI-powered security audits

    Version check not run yet

    Security npm Local 2 a week MIT

36. SM siigo-mcp-secure com.npmjs/siigo-mcp-secure 0.8 · 16/100

    Model Context Protocol server for Siigo API with enterprise-grade security

    Version check not run yet

    Security npm Local 3 a week MIT

37. SM specforge-mcp com.npmjs/specforge-mcp 0.8 · 16/100

    SpecForge — MCP Server for Spec Driven Development. Manages specs, estimations, reverse engineering, and auto-learning across any language/framework.

    Version check not run yet

    Security npm Local 4 a week MIT

38. GA gjq-audit com.npmjs/gjq-audit 0.8 · 16/100

    Audit npm dependency vulnerabilities for local or remote projects.

    Version check not run yet

    Developer tools npm Local 1 a week MIT

39. DM dryhack-mcp io.github.afrizalfarhan/dryhack-mcp 0.8 · 16/100

    DryHack-MCP - an MCP server providing offensive-security tooling (curl, python, shell, Playwright browser) and a scope-gated authorize engine for authorized penetration testing.

    Version check not run yet

    Security PyPI Local

40. IM iflow-mcp_jiayuqi7813-misc-mcp io.github.iflow-mcp/jiayuqi7813-misc-mcp 0.8 · 16/100

    CTF Misc 方向 All-in-One MCP 工具集

    Version check not run yet

    Security PyPI Local

41. IM iflow-mcp_mcp-hydra io.github.iflow-mcp/mcp-hydra 0.8 · 16/100

    A lightweight, extensible cybersecurity toolkit that connects AI assistants to security tools through the Model Context Protocol (MCP), enabling AI-assisted security research, scanning, and analysis.

    Version check not run yet

    Security PyPI Local

42. MA mcp-atlassian-bitbucket io.github.voarsh2/mcp-atlassian 0.8 · 16/100

    The Model Context Protocol (MCP) Atlassian integration is an open-source implementation that bridges Atlassian products (Jira and Confluence) with AI language models following Anthropic's MCP specific

    Version check not run yet

    Git and code hosting PyPI Local

43. MB mcp-bastion-fastmcp io.github.vaquarkhan/mcp-bastion-64vh94 0.8 · 16/100

    MCP-Bastion security middleware for FastMCP servers. Prompt injection, PII, and rate-limit protection.

    Version check not run yet

    Security PyPI Local

44. MT mcp-transcoder io.github.post-class/mcp-transcoder 0.8 · 16/100

    Bridge STDIO-based MCP clients to StreamableHTTP MCP servers with header, TLS, and timeout options.

    Version check not run yet

    Security PyPI Local

45. MC mcpwn-core io.github.carlos-projects/mcpwn 0.8 · 16/100

    Offensive security testing framework for MCP (Model Context Protocol) protocols

    Version check not run yet

    Developer tools PyPI Local

46. RS robotmcp-server io.github.robotmcp/robotmcp_server 0.8 · 16/100

    Modular MCP server with Streamable HTTP, optional OAuth 2.1, Supabase auth, Cloudflare tunnel, and creator-only access control

    Version check not run yet

    Databases PyPI Local

47. SM sovereign-mcp io.github.mattijsmoens/sovereign-mcp 0.8 · 16/100

    Deterministic MCP Security Architecture. FrozenNamespace as Root of Trust for Model Context Protocol tool verification.

    Version check not run yet

    Security PyPI Local

48. @M @iflow-mcp/mcp-server-iplocate com.npmjs.iflow-mcp/mcp-server-iplocate 0.8 · 16/100

    MCP server for IPLocate.io - IP address geolocation, network information, and threat detection

    Version check not run yet

    Security npm Local MIT