Security MCP servers

3,576 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

  1. ZEN SecDB cloud.nttzen.secdb/zen-secdb

    ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.

    100% up · 30 days

    Security Official MCP Registry Remote

  2. Pilotex KYC club.pilotex/kyc

    KYC verification on autopilot for Bybit, MEXC and Bitget. 150 countries, pay per result.

    100% up · 30 days

    Security Official MCP Registry Remote

  3. Auditon security assessments co.auditon/assessments

    Read-only access to your Auditon vulnerability scans: findings, endpoints, reports and changes.

    100% up · 30 days

    Security Official MCP Registry Remote

  4. PayGuard co.youraitools/payguard

    OFAC SDN sanctions screen for crypto addresses, for agents that send payments. By Crypto Money Maker

    100% up · 30 days

    Finance and payments Official MCP Registry Remote

  5. AcidPeak com.acidpeak/acidpeak

    Read-only vulnerability intelligence: CVEs, exploitation evidence, fixes and product matches.

    100% up · 30 days

    Security Official MCP Registry Remote

  6. AEO Inspector com.aeoinspector/aeo-inspector

    AEO scan, 16-engine AI report and one-domain security + AEO report with fixes (x402 USDC).

    100% up · 30 days

    Security Official MCP Registry Remote

  7. AgentBrink com.agentbrink.www/mcp

    Give your AI agent an identity: its own email, webhook, repo, secrets vault, memory and skills.

    100% up · 30 days

    Git and code hosting Official MCP Registry Remote

  8. 33 official datasets: tenders, sanctions, recalls, CVE, law, tariffs, rates, yields, energy prices

    100% up · 30 days

    Security Official MCP Registry Remote

  9. AgenTrux com.agentrux/agentrux

    Authenticated event topics for agent-to-agent messaging with per-agent credentials and audit logs.

    100% up · 30 days

    Monitoring and observability Official MCP Registry Remote

  10. AGORA Omega com.agoraverify/agora-omega

    Pay-per-call checks for AI agents: sanctions, MiCA, French KYB, AI Act. USDC via x402.

    100% up · 30 days

    Security Official MCP Registry Remote

  11. AI Agents Pitstop com.ai-agents-pitstop/pitstop

    Human approvals, autonomy limits and a chained audit log for the AI agents of service firms.

    100% up · 30 days

    Security Official MCP Registry Remote

  12. AI Website Security com.aiwebsitesecurity/ai-website-security

    Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.

    100% up · 30 days

    Security Official MCP Registry Remote

  13. Preflight com.allthepossibles/preflight

    Scans an MCP server for security gaps before your agent connects. Free tier, no signup.

    100% up · 30 days

    Security Official MCP Registry Remote

  14. Vigil com.appnary/vigil

    Shopify store security: find risky scripts and apps, and turn them off from your AI agent.

    100% up · 30 days

    Security Official MCP Registry Remote

  15. ApyHub Utility Tools (EU) com.apyhub/mcp-server-eu

    GDPR-compliant ApyHub utility APIs hosted in the EU. Requires an EU-generated ApyHub API key.

    100% up · 30 days

    Security Official MCP Registry Remote

  16. Arbiter com.arbiterscan/arbiter

    Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix.

    100% up · 30 days

    Databases Official MCP Registry Remote

  17. AstraNL Dutch counterparty check com.astranl/counterparty-nl

    Check a Dutch supplier before you pay: KvK register, name match, VIES VAT, EU sanctions. No key.

    100% up · 30 days

    Security Official MCP Registry Remote

  18. AstraVerify Domain Trust Check com.astraverify/domain-trust

    Email security and AI discoverability scores for any domain, with the exact record or tag to fix.

    100% up · 30 days

    Security Official MCP Registry Remote

  19. ATK Security Checks com.atkvn/security-checks

    PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps

    100% up · 30 days

    Security Official MCP Registry Remote

  20. AxioRank: Zero-Trust for AI Agents com.axiorank/axiorank

    Zero-trust gateway for AI agents: score tool calls, verify agent cards, enforce policy, audit.

    100% up · 30 days

    Security Official MCP Registry Remote

  21. Aribot com.ayurak/aribot-mcp

    Threat modeling, code, API & cloud security, shadow-AI & compliance governance.

    100% up · 30 days

    Security Official MCP Registry Remote

  22. Cloud for Bots com.botrecipe/cloudforbots

    Sandboxes, storage, secrets, queues, timers, locks, inboxes and run ledger for AI bots. One MCP.

    100% up · 30 days

    Files and storage Official MCP Registry Remote

  23. Brainiall NLP com.brainiall/nlp

    Sentiment, toxicity, entity extraction, PII, translation, summary, QA, fraud scoring, safety audit.

    0% up · 30 days

    Utilities Official MCP Registry Remote

  24. Buyukesim com.buyukesim/mcp

    No-logs VPN, real UK +44 number eSIMs and travel-data eSIMs, bought with crypto. No KYC, no account.

    100% up · 30 days

    Monitoring and observability Official MCP Registry Remote

  25. Californiacarquotes com.californiacarquotes/quote-exchange

    Indicative US auto insurance prices for agents: rating facts only, no PII, consented path to agents.

    100% up · 30 days

    Security Official MCP Registry Remote

  26. Scam Detection com.cautellus/scam-detection

    Scam and phishing detection for AI agents: safe/warn/danger verdicts for URLs and messages.

    100% up · 30 days

    Security Official MCP Registry Remote

  27. Certopolis com.certopolis/certopolis

    Certification exam practice as a town-building game: AWS, Security+, PMP, CFA, Claude and more.

    100% up · 30 days

    Cloud platforms Official MCP Registry Remote

  28. Screening com.compliapi/screening

    OFAC and global sanctions screening: crypto addresses, emails, websites, IDs, countries, VPN, geo

    100% up · 30 days

    Security Official MCP Registry Remote

  29. ConsentLayer com.consentlayer/mcp

    Cookie consent for GDPR/CCPA: scan sites for trackers, configure consent banners, get install code.

    100% up · 30 days

    Security Official MCP Registry Remote

  30. Crimson Crawler com.crimsoncrawler/mcp-server

    Enrich, search, assess, and manage threat intelligence through 80+ typed MCP tools.

    100% up · 30 days

    Security Official MCP Registry Remote

  31. CronPulser com.cronpulser/cronpulser

    Manage CronPulser from an AI agent: HTTP, Runner and TLS jobs, alerts, Runners and run history.

    100% up · 30 days

    Monitoring and observability Official MCP Registry Remote

  32. Site com.cryptoamlpolicy/site

    Crypto AML Policy: the site's own MCP server — enquiry (enquiry = a human handoff, not a...

    100% up · 30 days

    Security Official MCP Registry Remote

  33. Cve Intelligence com.cve-security/cve-intelligence

    CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.

    100% up · 30 days

    Security Official MCP Registry Remote

  34. CVElens Vulnerability Intelligence com.cvelens/cvelens

    CVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.

    0% up · 30 days

    Security Official MCP Registry Remote

  35. Cyber Library com.cyberlibrary/library

    Search and read Cyber Library, a free structured cybersecurity knowledge base. Read-only, no auth.

    100% up · 30 days

    Security Official MCP Registry Remote

  36. Cypher eSIM com.cypheresim/esim

    Buy no-KYC travel eSIMs and eSIMs with a real phone number in 180+ countries, paid in crypto.

    100% up · 30 days

    Security Official MCP Registry Remote

  37. disclosedby, the subprocessor record com.disclosedby/record

    Dated quotes of GDPR art. 28 subprocessor lists: who lists whom, fourth parties, what changed, when.

    100% up · 30 days

    Security Official MCP Registry Remote

  38. Domainposture com.domainposture/mcp

    Remote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

  39. Domduck com.domduck/domduck

    Domain reputation over time: Domain Rating, Tranco rank, TLS, and AI crawler policy.

    100% up · 30 days

    Web search and scraping Official MCP Registry Remote

  40. Go-Live Check com.dontdeployonfriday/golive-check

    Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.

    0% up · 30 days

    Security Official MCP Registry Remote

  41. Is This Site Down? com.downforjustmeoreveryone/is-it-down

    Check if any website is down, from two continents, with uptime history and TLS expiry

    100% up · 30 days

    Monitoring and observability Official MCP Registry Remote

  42. Entity Screen com.dropwatchhq/entity-screen

    Screen a business or person for exclusions, debarment, and sanctions (SAM.gov, OFAC).

    100% up · 30 days

    Government and public records Official MCP Registry Remote

  43. Exploitwatch com.edgethirteen.www/exploitwatch

    Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.

    0% up · 30 days

    Developer tools Official MCP Registry Remote

  44. Sanctions com.edgethirteen.www/sanctions

    Screen a name against OFAC's SDN and Consolidated Sanctions lists before a transaction.

    0% up · 30 days

    Security Official MCP Registry Remote

  45. Us Diligence com.edgethirteen.www/us-diligence

    Screen a US company against SEC EDGAR, OFAC sanctions, federal awards and federal court dockets.

    0% up · 30 days

    Security Official MCP Registry Remote

  46. Redact com.eleyed/redact

    Redact PII from text before it reaches a model. Nothing stored, no third-party AI.

    100% up · 30 days

    Security Official MCP Registry Remote

  47. ElysianPrimus com.elysianintelligence/elysianprimus

    Public data for agents: CVEs, SEC filings, housing, wildfire, contractor licenses, EPA labels.

    100% up · 30 days

    Security Official MCP Registry Remote

  48. Ec360 com.encompassconfirm/ec360

    KYC automation from authoritative public sources. Requires an Encompass licence.

    100% up · 30 days

    Security Official MCP Registry Remote