Security MCP servers

3,576 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

1. FL FlawPilot com.flawpilot/mcp 0.7 · 14/100

   Scan websites and code for security, performance and SEO issues from your AI assistant.

   100% up · 30 days

   Security Official MCP Registry Remote

2. SS Security Startups com.securitystartups/catalog 0.7 · 14/100

   Search a curated directory of young security companies and its CC BY 4.0 stats. Read-only, no key.

   100% up · 30 days

   Security Official MCP Registry Remote

3. RT Rösti Threat Intel dev.rosti/rosti 0.7 · 14/100

   Look up IOCs and search threat-intel reports, YARA rules, MITRE ATT&CK ids and CVEs from rosti.dev

   100% up · 30 days

   Security Official MCP Registry Remote

4. RS RealMarket Site Check com.realmarketlabs.tools/site-check 0.7 · 14/100

   Passive checks of a public website: email authentication (SPF, DKIM, DMARC) and basic security.

   100% up · 30 days

   Security Official MCP Registry Remote

5. AC API Change Feed dev.workers.anthonyzilar.changefeed/api-change-feed 0.7 · 14/100

   Breaking changes, deprecations and security fixes for 38 popular APIs/SDKs. Paid per call via x402.

   100% up · 30 days

   Security Official MCP Registry Remote

6. EC Eclipse Codex MCP io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/codex 0.7 · 14/100

   Banking regulation as data: a citation-exact library, a deadline engine, sanctions screening, and

   Not checked yet

   Security Official MCP Registry

7. EH Eclipse Health Check MCP io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/health-check 0.7 · 14/100

   Scan an MCP server or agent configuration for security posture — evidence-bound findings

   Not checked yet

   Monitoring and observability Official MCP Registry

8. EM Eclipse Mail MCP io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/mail 0.7 · 14/100

   Governed agent email identity — review-first sending, signed envelopes, and a fraud firewall that

   Not checked yet

   Email Official MCP Registry

9. AU Agent University Empresas io.github.Mila-Pirate/agent-university-empresas 0.7 · 14/100

   Brazilian company data & sanctions screening for AI agents. Certified. Pay-per-call x402.

   100% up · 30 days

   Education Official MCP Registry Remote

10. SL Signal Lab: free data for trading and AI agents io.github.QDThead/signal-lab 0.7 · 14/100

    Search and export free market, macro, weather, news and OSINT data sources, with terms and skills.

    100% up · 30 days

    Finance and payments Official MCP Registry Remote

11. DA DATA/AGENT FOUNDRY io.github.Reztek-creator/data-agent-foundry 0.7 · 14/100

    Free catalogue; paid historical software/security evidence. No current-risk assessment.

    100% up · 30 days

    Security Official MCP Registry Remote

12. LD Lilambd Data for Agents io.github.Veniwol-Li-Lambd/lilambd-data 0.7 · 14/100

    21 world data tools: airports, units, markets, security, travel meds, pet entry. x402 per call.

    100% up · 30 days

    Maps and location Official MCP Registry Remote

13. CE CVE Exploit Priority (CISA KEV + EPSS) io.github.brunckel/cve-exploit-priority 0.7 · 14/100

    CISA KEV status and EPSS scores for CVE IDs, ranked P1/P2/P3 for patching, via Apify.

    100% up · 30 days

    Security Official MCP Registry Remote

14. DV Dependency Vulnerability Check (OSV) io.github.brunckel/dependency-vuln-check 0.7 · 14/100

    Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

    100% up · 30 days

    Security Official MCP Registry Remote

15. XP X402 Paid Checks io.github.dario933/x402-paid-checks 0.7 · 14/100

    Domain, email, vendor and ransomware checks paid per call in USDC via x402 from your wallet.

    Version check not run yet

    Security Official MCP Registry Local

16. RE Reverse Engineer Anything Supermarioworld io.github.ethanhunt1981/reverse-engineer-anything_supermarioworld 0.7 · 14/100

    Byte-exact reverse engineering of Super Mario World (SNES).

    100% up · 30 days

    Security Official MCP Registry Remote

17. SR Smw Reverse Engineering Kb io.github.ethanhunt1981/smw-reverse-engineering-kb 0.7 · 14/100

    GitMCP-ready KB for SMW (SNES) reverse engineering.

    100% up · 30 days

    Security Official MCP Registry Remote

18. PW Pasportoo Website Audit io.github.galeaxe5/pasportoo-website-audit 0.7 · 14/100

    Human-reviewed audit of a public website: bugs, passive security checks, UX. Order link for owners.

    100% up · 30 days

    Security Official MCP Registry Remote

19. CO CompanyVerify io.github.greg-wilko/companyverify 0.7 · 14/100

    UK company lookup, LEIs and sanctions name matching for agents, with source provenance.

    100% up · 30 days

    Security Official MCP Registry Remote

20. CV CVE Vulnerability Lookup — CVSS Scores & NVD Status io.github.kriton-dev/cve-risk-metrics 0.7 · 14/100

    Look up NVD CVE dates, status, numeric CVSS scores and severity

    100% up · 30 days

    Security Official MCP Registry Remote

21. SN SniffPup io.github.sniffpup/sniffpup 0.7 · 14/100

    Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase

    100% up · 30 days

    Databases Official MCP Registry Remote

22. BI Burs-IA Tools io.github.soyeladice-svg/bursia-tools 0.7 · 14/100

    Free read-only tools for agents: agent-readiness audit, TLS/DNS/header checks, MCP search, utils.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

23. PU Pugi io.pugi/pugi 0.7 · 14/100

    AI product team: builds and publishes websites from a brief, logos, security checks.

    100% up · 30 days

    Security Official MCP Registry Remote

24. RA Radar Agent Tools io.sslip.2-29-135-242/radar-agent-tools 0.7 · 14/100

    8 no-key agent tools: web to Markdown, domain+email DNS, papers, US rules, trials, odds, CVEs

    100% up · 30 days

    Security Official MCP Registry Remote

25. AI Agent Index io.theagentindex/agent-index 0.7 · 14/100

    Free open dataset of compliance, security and risk AI agents and audit firms, by Heritage Services.

    100% up · 30 days

    Security Official MCP Registry Remote

26. ? ドメイン番人 jp.domain-bannin/domain-bannin 0.7 · 14/100

    ドメインの設定を調べる MCP サーバー。SPF / DKIM / DMARC・DNS・SSL 証明書・セキュリティヘッダ・サブドメイン・類似ドメインを、公開情報だけで確認します。登録不要・無料。

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

27. FF FFxF net.ffxf/cloud 0.7 · 14/100

    Create and manage VMs, managed databases, firewalls and load balancers in Montréal, Canada.

    100% up · 30 days

    Databases Official MCP Registry Remote

28. ST StableDomains net.stabledomains/registrar 0.7 · 14/100

    USDC/USDT domain registrar on 7 chains, card checkout for people, expiring drops, WHOIS/DNS tools.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

29. DO DomChecker ru.domchecker/domain-checker 0.7 · 14/100

    Domain availability, WHOIS and DNS for any TLD (.ru, .рф, .com…), straight from registries.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

30. TR Traceproof run.raised.traceproof/traceproof 0.7 · 14/100

    Search security findings and contribute versioned, evidence-backed reproduction reports.

    100% up · 30 days

    Security Official MCP Registry Remote

31. AR Aigine Redact se.aigine/redact 0.7 · 14/100

    Descriptive AI redaction for any file. GDPR + confidentiality. EU, zero retention, review optional.

    100% up · 30 days

    Files and storage Official MCP Registry Remote

32. SA Safeguard sh.safeguard/safeguard 0.7 · 14/100

    Software supply chain security: SBOMs, vulnerabilities, fixes, policies and compliance data.

    100% up · 30 days

    Security Official MCP Registry Remote

33. GI Golem Intel team.golem/intel 0.7 · 14/100

    Threat-intelligence verdicts on a URL, domain or IP before a coding agent connects to it.

    100% up · 30 days

    Security Official MCP Registry Remote

34. LB Lukka Blockchain Analytics & Compliance MCP tech.lukka/aml 0.7 · 14/100

    Blockchain address risk scoring, AML reports, sanctions screening and counterparty exposure.

    100% up · 30 days

    Security Official MCP Registry Remote

35. GS GCC Sanctions & Terror-List Screener tech.noahsarch/sanctions-screener 0.7 · 14/100

    Screen names vs OFAC, UN, EU, UK and UAE terrorist lists with Arabic-aware matching.

    100% up · 30 days

    Security Official MCP Registry Remote

36. DI DirFast tech.rovy/dirfast 0.7 · 14/100

    DNS, TLS, HTTP and SEO checks, plus stateful change watches that diff a page over time.

    100% up · 30 days

    DevOps and infrastructure Official MCP Registry Remote

37. UD UK Data: Software packages and vulnerabilities uk.co.reliness/software-supply-chain 0.7 · 14/100

    Package versions, licences and known vulnerabilities for npm, PyPI, crates, Go, Maven, NuGet

    0% up · 30 days

    Security Official MCP Registry Remote

38. PR Prescan xyz.canisell/prescan 0.7 · 14/100

    Agent security pre-checks: prompt-injection scan, MCP tool-poisoning scan, x402 endpoint check.

    100% up · 30 days

    Security Official MCP Registry Remote

39. DD decoy.day honeypot day.decoy/honeypot 0.7 · 14/100

    A public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day.

    100% up · 30 days

    Security Official MCP Registry Remote

40. LO LogTriage io.github.logtriage-cyber/logtriage 0.7 · 14/100

    Security log tools: Windows/Entra error codes, log explainer, IP blocklists, attack scans

    100% up · 30 days

    Security Official MCP Registry Remote

41. AA AgentStall: Africa and global data for agents com.padawanconsulting/agentstall 0.7 · 14/100

    Holidays and business days (220+ countries), WHOIS, FX, phishing and DMARC checks, SA tenders. x402.

    100% up · 30 days

    Security Official MCP Registry Remote

42. OX Omega x402 Security, Biomed & Escrow Intelligence MCP io.github.chusmias258-dev/omega-x402-mcp 0.7 · 14/100

    7 x402 v2 pay-per-call MCP tools for FDA/ChEMBL, token rug scan, Base escrow & wallet forensics.

    100% up · 30 days

    Science and research Official MCP Registry Remote

43. CC Consentio cookie consent com.getconsentio/consentio 0.7 · 14/100

    GDPR cookie banner with Consent Mode v2: install snippet, cookie scan and site management.

    100% up · 30 days

    Security Official MCP Registry Remote

44. CD CEA Digital B2A Fulfillment Factory io.ceadigital/b2a-fulfillment-factory 0.7 · 14/100

    High-speed institutional API data gateway for SEC EDGAR, OSV CVE, FDIC, USGS, NPI, and GCP Catalog.

    100% up · 30 days

    E-commerce Official MCP Registry Remote

45. CS crt.sh SSL Certificate Transparency & Subdomain Recon io.ceadigital/crtsh-cert-transparency 0.7 · 14/100

    Query crt.sh SSL/TLS Certificate Transparency logs for subdomain discovery and certificate audits.

    100% up · 30 days

    Security Official MCP Registry Remote

46. FE FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit io.ceadigital/epss-cve-exploit-score 0.7 · 14/100

    Real-time FIRST.org EPSS 30-day CVE exploit probability scoring and OSV package security audit.

    100% up · 30 days

    Security Official MCP Registry Remote

47. HA Hackaiz io.github.Hacktualiz/hackaiz 0.7 · 14/100

    Analyze authorized assets and read security findings through your Hackaiz account.

    100% up · 30 days

    Security Official MCP Registry Remote

48. UC US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit io.ceadigital/cisa-kev-exploited-vulns 0.7 · 14/100

    US CISA Known Exploited Vulnerabilities (KEV) catalog & active ransomware campaign check.

    100% up · 30 days

    Security Official MCP Registry Remote