plug.directory
Add my server

Security MCP servers

3,379 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

  1. Seatbelt io.github.KryptosAI/mcp-seatbelt

    MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.

    Version check not run yet

    Security Official MCP Registry · npm Local 44 a week MIT

  2. Unicode Security io.github.mrfentmen/unicode-security-mcp

    Local first MCP checks for Unicode confusables, mixed scripts, invisible controls, and...

    Version check not run yet

    Security Official MCP Registry · npm Local 44 a week MIT

  3. YTDL RMCP ai.dinglebear/rytdl

    yt-dlp search, download, metadata, delivery, and Plex workflows over MCP and CLI.

    Version check not run yet

    Security Official MCP Registry · npm Local 43 a week AGPL-3.0-ONLY

  4. SiteHealth MCP io.github.carsonroell-debug/sitehealth-mcp

    Full website health audit — SSL, DNS, DMARC/SPF/DKIM, performance, uptime, links

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · npm Local 43 a week MIT

  5. Threatcluster io.github.Jam0k/threatcluster

    Live threat intel for agents: incidents, actors, CVEs with KEV/EPSS, ransomware leak-site victims.

    100% up · 30 days

    Security Official MCP Registry · npm · PyPI Local Remote 42 a week GPL-3.0-OR-LATER

  6. Weavatrix Online io.github.Weavatrix/weavatrix-online

    Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.

    Version check not run yet

    Security Official MCP Registry · npm Local 42 a week MIT

  7. OpsecForge io.github.cyberdroid2077/opsecforge

    Local MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.

    Version check not run yet

    Git and code hosting Official MCP Registry · npm Local 41 a week MIT

  8. Statuscake io.github.mrfentmen/statuscake-mcp

    Uptime, TCP port, SSL chain and DNS propagation checks - no API key.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · npm Local 41 a week MIT

  9. Unbounded Consumption Auditor io.github.GuardBee/unbounded-consumption-auditor

    Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)

    Version check not run yet

    Security Official MCP Registry · npm Local 40 a week MIT

  10. Voyager Browser io.github.dir-ai/voyager-browser

    Voyager's web-page sense: safe read-only observation of one live URL (structure, security, a11y).

    Version check not run yet

    Browser automation Official MCP Registry · npm Local 40 a week MIT

  11. L402 Search io.github.llmops-pro/l402-search-mcp

    No-KYC web search for AI agents, paid per query in Lightning sats (L402). Holds no keys.

    Version check not run yet

    Web search and scraping Official MCP Registry · npm Local 40 a week MIT

  12. Mastyf Ai io.github.mastyf-ai/mastyf.ai

    Runtime proxy for MCP security, cost governance & audit

    Version check not run yet

    Security Official MCP Registry · npm Local 40 a week AGPL-3.0

  13. Inkog io.github.inkog-io/inkog

    Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.

    Version check not run yet

    Security Official MCP Registry · npm Local 39 a week APACHE-2.0

  14. @vantasdk/vanta-mcp-server io.github.vantainc/vanta-mcp-server-1v5xck

    Model Context Protocol server for Vanta's security compliance platform

    Version check not run yet

    Security npm Local 17k a week MIT

  15. Voyager Net io.github.dir-ai/voyager-net

    A safe, read-only, authorized audit of one host you own: DNS, ports, TLS, HTTP hygiene.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · npm Local 38 a week MIT

  16. Husk io.github.husk-security/husk

    Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs

    Version check not run yet

    Developer tools Official MCP Registry · npm Local 38 a week MIT

  17. Nwc io.github.llmops-pro/nwc-mcp

    Lightning wallet for AI agents via Nostr Wallet Connect (NIP-47): budget caps, confirm, audit log.

    Version check not run yet

    Security Official MCP Registry · npm Local 38 a week MIT

  18. Satoshkin Aml io.github.satoshkin-dev/satoshkin-aml-mcp

    AML/KYT crypto wallet risk screening (BitOK data) for Claude, ChatGPT and any MCP client.

    Version check not run yet

    Security Official MCP Registry · npm Local 38 a week MIT

  19. Omnideck io.github.aapd-studio/omnideck

    Local privacy-first tools: redact secrets, decode JWTs, compare LLM costs. No network calls.

    Version check not run yet

    Security Official MCP Registry · npm Local 37 a week MIT

  20. Nemesis Shield io.github.eobi/nemesis-shield

    Positive-security for apps, APIs, LLMs and edge, plus fraud scoring and identity/AML screening.

    Version check not run yet

    Security Official MCP Registry · npm Local 37 a week MIT

  21. Leakferret io.github.leakferrethq/leakferret

    Context-aware secret scanner: lets an AI agent scan, verify, and rewrite secrets before committing.

    Version check not run yet

    Security Official MCP Registry · npm Local 37 a week MIT

  22. Wundervault io.github.wundervault/wundervault-mcp

    Zero-knowledge MCP secrets vault for AI agents: secrets injected at runtime, never seen by the model

    Version check not run yet

    Security Official MCP Registry · npm Local 37 a week AGPL-3.0-OR-LATER

  23. Argus io.github.ironclawdevs27/argus

    Automated web QA via Chrome DevTools MCP — a11y, security, visual, env diff, CI; Aegis redaction.

    Version check not run yet

    Developer tools Official MCP Registry · npm Local 36 a week MIT

  24. Pop Pay io.github.100xPercent/pop-pay

    Runtime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.

    Version check not run yet

    Security Official MCP Registry · npm Local 53 a week MIT

  25. Elicitation Auditor io.github.GuardBee/elicitation-auditor

    MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

    Version check not run yet

    Security Official MCP Registry · npm Local 35 a week MIT

  26. Attestd io.github.attestd-io/attestd-mcp

    CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm).

    Version check not run yet

    Security Official MCP Registry · npm Local 35 a week MIT

  27. Entyrix io.github.juliusgerman/entyrix-mcp

    KYB data from 23 European business registries — company briefs, financials, ownership, AML screening

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 35 a week MIT

  28. Guardian io.github.rudraneel93/mcp-guardian

    Security, cost, and health governance proxy for MCP infrastructure

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · npm Local 35 a week MIT

  29. Audit io.github.joepangallo/mcp-audit-server

    Thin MCP and CLI proxy for AI agent and MCP security auditing via a hosted backend

    Version check not run yet

    Security Official MCP Registry · npm Local 34 a week MIT

  30. Keyspoor io.github.majiayu000/keyspoor

    Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.

    Version check not run yet

    Files and storage Official MCP Registry · npm Local 33 a week APACHE-2.0

  31. Pulsedive io.github.pipeworx-io/pulsedive

    Pulsedive MCP — threat-intelligence IOC enrichment (pulsedive.com)

    100% up · 30 days

    Security Official MCP Registry · npm Remote 33 a week MIT

  32. cheap-eyes io.github.st412m/cheap-eyes

    Hands bulk reading to cheap OpenRouter models, masks secrets, checks each answer against the source

    Version check not run yet

    Security Official MCP Registry · npm Local 33 a week MIT

  33. Whoisxmlapi io.github.whois-api-llc/mcp-whoisxmlapi

    34 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API.

    Version check not run yet

    Security Official MCP Registry · npm Local 33 a week APACHE-2.0

  34. Hacktricks io.github.zebbern/hacktricks-mcp

    Offline full-text search over the HackTricks security wiki, synced every 3 days.

    Version check not run yet

    Security Official MCP Registry · npm Local 33 a week MIT

  35. firewalla-mcp-server io.github.amittell/firewalla-mcp-server-zttes6

    Model Context Protocol (MCP) server for Firewalla MSP API - Provides real-time network monitoring, security analysis, and firewall management through 28 read-only tools, plus 11 opt-in write tools, co

    Version check not run yet

    Security npm · Docker Hub · Docker MCP Catalog Local 72 a week MIT

  36. Webcheck io.github.yifanyifan897645/webcheck

    Website health analysis: SEO, accessibility, performance, security, and broken links

    Version check not run yet

    Developer tools Official MCP Registry · npm Local 41 a week MIT

  37. HTTP io.github.Abhishekkumar2021/http

    HTTP/REST client with saved collections, env secrets, and SSRF-safe host allowlisting.

    Version check not run yet

    Security Official MCP Registry · npm Local 31 a week MIT

  38. Matetools io.github.matetools/mcp-server

    35 utility tools for AI agents — mate.tools API. Hash, regex, SEO, random, DNS, SSL, JWT.

    Version check not run yet

    Utilities Official MCP Registry · npm Local 31 a week MIT

  39. Uptimerobot io.github.mrfentmen/uptimerobot-mcp

    Uptime, port, TLS and DNS checks for any site - no API key.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · npm Local 31 a week MIT

  40. Starlog io.github.starloghq/starlog

    Vet a package (CVEs, license, maintenance) before your AI agent uses it, plus capability discovery.

    Version check not run yet

    Security Official MCP Registry · npm Local 31 a week BUSL-1.1

  41. darknet-mcp-server io.github.badchars/darknet-mcp-server

    Dark web intelligence MCP server — HIBP, ThreatFox, ransomware tracking, Tor .onion access, blockchain intel, exploit search, stealer logs, malware analysis

    Version check not run yet

    Security npm Local 240 a week MIT

  42. Opzyai Security Check com.opzyai/mcp

    Local-first security check for AI coding agents: secrets, .env exposure, git-history leaks, CVEs.

    Version check not run yet

    Security Official MCP Registry · npm Local 30 a week MIT

  43. Vaast com.xtrinel/vaast

    Read-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents

    Version check not run yet

    Security Official MCP Registry · npm Local 30 a week APACHE-2.0

  44. grim-mcp io.github.AbduljabbarBXR/grim-mcp

    Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.

    Version check not run yet

    Security Official MCP Registry · npm · PyPI Local 30 a week MIT

  45. Declaw io.github.declaw-ai/mcp-server

    Secure Firecracker microVM sandboxes for AI agents: network policy, PII & injection guardrails.

    Version check not run yet

    Security Official MCP Registry · npm Local 30 a week APACHE-2.0

  46. Sanctionwise io.github.qinisolabs/sanctionwise

    Verified UK sanctions screening for AI agents — official FCDO UK Sanctions List, not guesses.

    Version check not run yet

    Security Official MCP Registry · npm Local 30 a week APACHE-2.0

  47. Rightos io.github.suomimasuda/rightos-mcp

    RightOS MCP: privacy-first QR queue/EV/pickup. 20 tools, no end-user PII.

    Version check not run yet

    Security Official MCP Registry · npm Local 30 a week MIT

  48. Apiempresas io.github.abasmartinc/apiempresas

    Spanish company data: CIF lookup, BORME, directors, KYB, sanctions and open public tenders.

    67.04% up · 30 days

    Government and public records Official MCP Registry · npm Local Remote 652 a week MIT