Security MCP servers

3,379 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. NS Npm Sentinel io.github.Nekzus/npm-sentinel-mcp

   Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

   Version check not run yet

   Security Official MCP Registry Local

2. AR Arcnautical io.github.SaltyTaro/arcnautical

   Screen any vessel by IMO for sanctions, ownership opacity and vetting grade. Keyless check included.

   Version check not run yet

   Security Official MCP Registry Local

3. JR JS Reverse MCP io.github.YuanHuakk/js-reverse-mcp

   MCP server for JavaScript reverse engineering and browser debugging.

   Version check not run yet

   Developer tools Official MCP Registry Local

4. SO Sourcery io.github.abyssbugg/sourcery

   Sourcery security findings: MCP server, CLI, and fix-prompt builder over the Sourcery API.

   Version check not run yet

   Security Official MCP Registry Local

5. CE Certindex io.github.certindex/certindex-mcp

   Certificate Transparency search for AI agents: certs, subdomains, issuance history, expiry.

   Version check not run yet

   Security Official MCP Registry · PyPI Local

6. DA DDG Agent Services io.github.daedalusdevelopmentgroup/ddg-agent-services-mcp

   Pay-per-call x402 gateway: agent tools, OpenAI-compatible LLM, market data, RPC, security audits.

   100% up · 30 days

   Model and agent tools Official MCP Registry Local Remote

7. FA Fairquery Agent Trust & Data Safety io.github.fairquery/fairquery-agent-trust-mcp

   PII/secret redaction, email checks, sanctions screening and OSV vulnerability lookups for AI agents.

   Version check not run yet

   Security Official MCP Registry Local

8. NL NSW Licences io.github.fisher98kim/nsw-licences

   Check licences on 15 NSW public registers: trades, property, security, liquor, WHS and more.

   Version check not run yet

   Security Official MCP Registry Local

9. SA SanctionsAI io.github.kindrat86/sanctionsai

   OFAC sanctions screening for AI agents: 1,050 wallets, 19,389 SDN names, <100ms. Free tier, no key.

   100% up · 30 days

   Security Official MCP Registry · PyPI Remote

10. PM Palveron MCP Server io.github.palveron/mcp-server

    Early access - AI governance gateway for MCP tool calls (policies, PII masking, audit).

    Version check not run yet

    Security Official MCP Registry Local

11. FA Falcon io.github.rijul170/falcon-mcp

    Community extension of CrowdStrike falcon-mcp with near-complete Falcon API coverage

    Version check not run yet

    Security Official MCP Registry Local

12. AG Agent Guardrail io.github.rudimentall1/agent-guardrail

    Deterministic policy firewall for AI agent tool calls - YAML rules, not a fuzzy risk score.

    Version check not run yet

    Security Official MCP Registry · PyPI Local

13. WO Weavatrix Online io.github.sergii-ziborov/weavatrix-online

    Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.

    Version check not run yet

    Security Official MCP Registry Local

14. CS Create Starter io.github.starter-series/create-starter

    Scaffold Starter Series projects and check release, deployment, security, and agent instructions.

    Version check not run yet

    Developer tools Official MCP Registry Local

15. IN Intelthreadlinqs io.github.threadlinqs-cmd/intelthreadlinqs-mcp

    Threadlinqs threat-intelligence MCP — 49 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs

    Version check not run yet

    Security Official MCP Registry Local

16. RA Raziel io.github.tide-foundation/raziel

    MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 58 a week SEE-LICENSE-IN

17. SP SPARDA io.github.zakariagharzouli/sparda-mcp

    AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.

    Version check not run yet

    Security Official MCP Registry Local

18. GH Ghidralens io.github.hellosverre/ghidralens

    Interactive Ghidra views in your AI client: decompile, rename, and navigate a binary.

    Version check not run yet

    Security Official MCP Registry · npm Local 57 a week MIT

19. BI Bitwarden io.github.mrfentmen/bitwarden-mcp

    Bitwarden public API: members, collections, groups, event logs.

    Version check not run yet

    Security Official MCP Registry · npm Local 57 a week MIT

20. FI Firewall io.github.Alepha188838884/context-firewall

    Local MCP proxy: collapses N servers' tools into 4 meta-tools and compresses large tool outputs.

    Version check not run yet

    Security Official MCP Registry · npm Local 56 a week MIT

21. HU hush io.github.omarei-omoto/hush

    Team secrets your AI agent can use but never read: encrypted in the repo, value-blind tools.

    Version check not run yet

    Git and code hosting Official MCP Registry · npm Local 56 a week MIT

22. CE Certspotter io.github.mrfentmen/certspotter-mcp

    Certificate transparency lookups from Cert Spotter. No key required.

    Version check not run yet

    Security Official MCP Registry · npm Local 55 a week MIT

23. UP Uptime io.github.mrfentmen/uptime-mcp

    Check website availability, latency, and TLS certificate expiry locally. No key required.

    Version check not run yet

    Monitoring and observability Official MCP Registry · npm Local 55 a week MIT

24. GA Gatus io.github.mrfentmen/gatus-mcp

    Endpoint conditions, latency and TLS checks - no API key.

    Version check not run yet

    Security Official MCP Registry · npm Local 54 a week MIT

25. IN Infisical io.github.mrfentmen/infisical-mcp

    Infisical API: manage secrets via universal auth.

    Version check not run yet

    Security Official MCP Registry · npm Local 54 a week MIT

26. MA Mitre Attack io.github.mrfentmen/mitre-attack-mcp

    Search the MITRE ATT&CK enterprise knowledge base for adversary techniques and tactics.

    Version check not run yet

    Security Official MCP Registry · npm Local 54 a week MIT

27. VD Vaultwarden Drop Slot io.github.ip2k/vaultwarden-drop-slot-mcp

    Create-only, age-encrypted deposits of new logins and notes into Vaultwarden, without vault reads.

    Version check not run yet

    Security Official MCP Registry · npm Local 53 a week APACHE-2.0

28. SS Secret Safe Env io.github.irrenwill/secret-safe-env

    Write secrets into .env without the agent ever seeing the value - Windows masked dialog (繁中 UI)

    Version check not run yet

    Security Official MCP Registry · npm Local 53 a week MIT

29. NC Nvd Cve io.github.mrfentmen/nvd-cve-mcp

    Search CVE vulnerability records from the NIST NVD database. No key required.

    Version check not run yet

    Security Official MCP Registry · npm Local 53 a week MIT

30. PR prodlint io.github.prodlint/prodlint

    Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.

    Version check not run yet

    Security Official MCP Registry · npm Local 14 a week MIT

31. VI Visus io.github.visus-mcp/visus-mcp

    Security-first web access. Sanitizes pages, blocks injection, redacts PII. Now with PDF/JSON/SVG.

    Version check not run yet

    Security Official MCP Registry · npm Local 58 a week MIT

32. GB Genesis402 by UnyKorn (x402 pay-per-call) io.github.FTHTrading/genesis402-mcp

    Counterparty checks, sanctions screening, company lookup and 360+ pay-per-call APIs over x402.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 52 a week MIT

33. PA PayPerScreen io.github.TonytheTiger22/payperscreen

    Sanctions, crypto wallet, email and IP screening for agents. Pay per check in USDC via x402.

    Version check not run yet

    Finance and payments Official MCP Registry · npm Local 52 a week MIT

34. OS Osv io.github.mrfentmen/osv-mcp

    Use this MCP server to OSV open source vulnerability data and package security checks. Tools...

    Version check not run yet

    Security Official MCP Registry · npm Local 52 a week MIT

35. YV Yotta Verify io.github.YottaMeta/yotta-verify-mcp

    Pre-install security scanner for AI agent skills (local stdio MCP). Offline static scan; no upload.

    Version check not run yet

    Security Official MCP Registry · npm Local 51 a week MIT

36. PK pkgxray io.github.adamsjack711-ux/pkgxray

    Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

    Version check not run yet

    Developer tools Official MCP Registry · npm Local 51 a week MIT

37. CO Cortex402 io.github.Ooak21/cortex402

    Pay-per-call x402 data products on Base mainnet — sanctions, aviation weather, US property.

    Version check not run yet

    Maps and location Official MCP Registry · npm Local 50 a week MIT

38. MC mcp/ccapi-mcp-server io.github.awslabs/mcp-ccapi-mcp-server

    Direct resource management with security scanning.

    Version check not run yet

    Security Docker Hub · Docker MCP Catalog · Docker MCP Registry Local APACHE-2.0

39. 4D 4da io.github.runyourempire/4da-mcp-server

    Dependency intelligence for AI agents. CVE scanning, health checks, upgrade planning.

    Version check not run yet

    Developer tools Official MCP Registry Local

40. CK Cisa Kev io.github.mrfentmen/cisa-kev-mcp

    Use this MCP server to CISA Known Exploited Vulnerabilities catalog search. Tools include search...

    Version check not run yet

    Security Official MCP Registry · npm Local 49 a week MIT

41. EN Enigmagent io.github.Agnuxo1/enigmagent-mcp

    Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.

    Version check not run yet

    Security Official MCP Registry · npm Local 58 a week MIT

42. SC Ssl Cert io.github.mrfentmen/ssl-cert-mcp

    Inspect TLS certificates of a host: issuer, expiry, and SAN. No key required.

    Version check not run yet

    Security Official MCP Registry · npm Local 48 a week MIT

43. SW Switchboard io.github.wkoverfield/switchboard

    One firewall and password manager for all your AI coding agents' MCP servers and secrets.

    Version check not run yet

    Security Official MCP Registry · npm Local 48 a week MIT

44. MI mcp/iam-mcp-server io.github.awslabs/mcp-iam-mcp-server

    IAM user, role, group, and policy management.

    Version check not run yet

    Security Docker Hub · Docker MCP Catalog · Docker MCP Registry Local APACHE-2.0

45. ZT Ztds io.github.moxno/ztds

    Open standard MCP server for Zero-Trust Data Sanitization (ZTDS RFC v1.0). In-memory PII masking.

    Version check not run yet

    Security Official MCP Registry · npm Local 47 a week APACHE-2.0

46. SL Ssl Labs io.github.mrfentmen/ssl-labs-mcp

    TLS security grades from SSL Labs. No key required.

    Version check not run yet

    Security Official MCP Registry · npm Local 47 a week MIT

47. DE Delinea io.github.mrfentmen/delinea-mcp

    Delinea Secret Server API: secrets search and retrieval.

    Version check not run yet

    Security Official MCP Registry · npm Local 46 a week MIT

48. SO Sourcery io.github.abyssbugg-labs/sourcery

    Sourcery security findings: MCP server, CLI, and fix-prompt builder over the Sourcery API.

    Version check not run yet

    Security Official MCP Registry · npm Local 45 a week MIT