Security MCP servers

3,385 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

  1. Virustotal io.github.pipeworx-io/virustotal

    VirusTotal MCP — file / URL / domain / IP reputation (BYO key)

    100% up · 30 days

    Security Official MCP Registry · npm Remote 22 a week MIT

  2. Arcwall Security io.github.rom-baro/arcwall-security

    Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.

    Version check not run yet

    Security Official MCP Registry · npm Local 22 a week MIT

  3. Zactonz io.github.zactonz/zactonz-mcp

    Screenshots, page to Markdown, link previews, DNS, SSL, WHOIS, QR codes and more for AI agents.

    Version check not run yet

    Security Official MCP Registry · npm Local 22 a week MIT

  4. @egchq/egc io.github.fmarzochi/egc

    EGC is a local-first MCP runtime that gives every AI agent the same brain: persistent shared memory, security guardrails, and up to 90% token savings across 20 AI coding tools.

    Version check not run yet

    Memory and context npm Local 48 a week APACHE-2.0

  5. Touchstone cv.touchstone/touchstone

    Bitcoin-anchored, tamper-evident audit log for AI agents — record, disclose and verify actions.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote 21 a week APACHE-2.0

  6. Vanmoose io.github.codevanmoose/vanmoose-mcp-server

    197 MCP tools from 74 developer APIs — screenshots, email, NLP, WHOIS, QR, PDF, and more.

    Version check not run yet

    Browser automation Official MCP Registry · npm Local 21 a week MIT

  7. Sslwebsites io.github.jyswee/sslwebsites

    SSL certificate management for coding agents. Issue, renew, monitor certs. 10 tools stdio.

    Version check not run yet

    Coding agent tools Official MCP Registry · npm Local 21 a week SEE-LICENSE-IN

  8. DugganUSA CLI — Local STDIO MCP io.github.pduggusa/dugganusa-cli

    Local STDIO MCP for DugganUSA threat intel. 1.13M IOCs. Read-only. npm: dugganusa-cli.

    Version check not run yet

    Security Official MCP Registry · npm Local 21 a week MIT

  9. Wisewall io.github.ti-ab/wisewall-mcp

    Manage WiseWall sites from an AI coding assistant — deploy, configure DNS, secrets, and plans.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · npm Local 21 a week MIT

  10. Jikida io.jikida/mcp

    Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.

    Version check not run yet

    Security Official MCP Registry · npm Local 21 a week MIT

  11. Sanctions & PEP Screening com.macaroonnetwork/sanctions-pep-screening-v1

    Screen a name in one call against US OFAC SDN, the EU Consolidated Financial Sanctions List, UK…

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

  12. Box com.mcparmory/box

    Manage files, folders, and team collaboration with access controls

    Version check not run yet

    Files and storage Official MCP Registry · PyPI Local MIT

  13. Codacy com.mcparmory/codacy

    Analyze code quality, security issues, and coverage across repositories

    Version check not run yet

    Developer tools Official MCP Registry · PyPI Local MIT

  14. WP HealthKit com.wphealthkit/mcp-server

    Security audits for WordPress plugins and themes — 62 verification layers, fix plans and SBOMs.

    100% up · 30 days

    Security Official MCP Registry · npm Local Remote MIT

  15. Draugr dev.draugr/draugr

    Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

    Version check not run yet

    Security Official MCP Registry · Go modules Local APACHE-2.0

  16. AI Firewall MCP io.github.Akhilucky/ai-firewall-mcp

    Multi-agent LLM security layer detecting prompt injection and jailbreaks.

    Version check not run yet

    Model and agent tools Official MCP Registry · PyPI Local MIT

  17. Scopeguard io.github.Alex-Dev-Web-C-DE/scopeguard

    Sanctions scope monitoring. Track entities for changes in OFAC/UK/EU/UN lists.

    Version check not run yet

    Monitoring and observability Official MCP Registry · npm Local MIT

  18. Acord Bridge io.github.CSOAI-ORG/acord-bridge-mcp

    Bridge ACORD insurance messages to ONE OS — parse, validate, map, govern (Solvency II / GDPR /

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

  19. As400 Bridge io.github.CSOAI-ORG/as400-bridge-mcp

    IBM i / RPG / DB2 bridge — parse, map, govern (IBM i security / SOX).

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

  20. Iso20022 Bridge io.github.CSOAI-ORG/iso20022-bridge-mcp

    ISO 20022 / SWIFT finance bridge — parse, validate, modernise, govern (DORA/NIS2/AML).

    Version check not run yet

    Legal and compliance Official MCP Registry · PyPI Local MIT

  21. Meok Cra Art14 Reporter io.github.CSOAI-ORG/meok-cra-art14-reporter-mcp

    MEOK CRA Article 14 Reporter MCP — actively-exploited-vulnerability notification with 24h/72h/14d

    0% up · 30 days

    Security Official MCP Registry · PyPI Local Remote MIT

  22. Meok Hardening io.github.CSOAI-ORG/meok-mcp-hardening-mcp

    MEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 10

    0% up · 30 days

    Security Official MCP Registry · PyPI Local Remote MIT

  23. Tremelay io.github.CharitonMedia/tremelay

    Local MCP broker: agents call credentials through a daemon without seeing secrets.

    Version check not run yet

    Security Official MCP Registry · Go modules Local APACHE-2.0

  24. SendGrid Secure io.github.Choppaaahh/sendgrid-mcp-secure

    Security-first SendGrid MCP server: dry-run default, recipient allowlists, rate caps, audit log.

    Version check not run yet

    Email Official MCP Registry · PyPI Local MIT

  25. Gocreative Wedge io.github.ColinHughes2121/gocreative-wedge-mcp

    OFAC/PEP sanctions screening, KYB, company & people enrichment tools for AI agents. Free demos.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

  26. TridentChain Security io.github.DevInder1/tridentchain-security

    Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

  27. Checkmcp io.github.H129hj/checkmcp

    Audit any MCP server's security & quality — OWASP MCP Top 10 + explainable 0-100 MCP Score

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

  28. Sanctions, PEP, KYB, and competitive intelligence on any company. Panama Papers cross-check.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

  29. WHOIS io.github.KincaidYang/whois

    Query WHOIS/RDAP information for domains, IP addresses, CIDR prefixes and ASNs. Self-hostable.

    100% up · 30 days

    Security Official MCP Registry · Go modules Remote MIT

  30. MySQL (security-first) io.github.Kurok1/mcp-server-mysql

    Security-first MySQL MCP server with AST validation, table whitelist, schema resources, and audit.

    Version check not run yet

    Databases Official MCP Registry · Go modules Local APACHE-2.0

  31. GoSQLX io.github.ajitpratap0/gosqlx

    SQL validation, formatting, parsing, metadata extraction, linting, and security analysis.

    100% up · 30 days

    Databases Official MCP Registry · Go modules Remote APACHE-2.0

  32. Bawbel Scanner io.github.bawbel/bawbel-mcp

    Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.

    Version check not run yet

    Security Official MCP Registry · PyPI Local APACHE-2.0

  33. Go Unifi io.github.claytono/go-unifi-mcp

    Manage UniFi sites, devices, clients, networks, port forwarding, DNS, and firewall

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · Go modules Local MPL-2.0

  34. Bigdatacorp io.github.codespar/mcp-bigdatacorp

    MCP server for BigDataCorp — Brazilian data enrichment + KYC (CPF/CNPJ/vehicle/property/antifraud)

    Version check not run yet

    Government and public records Official MCP Registry · npm Local MIT

  35. Clearsale io.github.codespar/mcp-clearsale

    MCP server for ClearSale — Brazilian fraud prevention, order risk scoring, device fingerprinting

    Version check not run yet

    Security Official MCP Registry · npm Local MIT

  36. Jumio io.github.codespar/mcp-jumio

    MCP server for Jumio — global identity verification + KYX: documents, liveness, AML screening

    Version check not run yet

    Security Official MCP Registry · npm Local MIT

  37. Konduto io.github.codespar/mcp-konduto

    MCP server for Konduto — Brazilian fraud prevention: order risk scoring, device intel, lists

    Version check not run yet

    Security Official MCP Registry · npm Local MIT

  38. Niubiz io.github.codespar/mcp-niubiz

    MCP server for Niubiz — Peru card acquirer: security token, session, authorize, reverse

    Version check not run yet

    Security Official MCP Registry · npm Local MIT

  39. Onfido io.github.codespar/mcp-onfido

    MCP server for Onfido — global identity verification + KYC: applicants, documents, checks, workflows

    Version check not run yet

    Security Official MCP Registry · npm Local MIT

  40. Persona io.github.codespar/mcp-persona

    MCP server for Persona — developer-first identity verification + KYC (inquiries, accounts, reports)

    Version check not run yet

    Security Official MCP Registry · npm Local MIT

  41. Sift io.github.codespar/mcp-sift

    MCP server for Sift — global ML fraud detection: real-time risk scoring, decisions, event ingestion

    Version check not run yet

    Security Official MCP Registry · npm Local MIT

  42. Dapr MCP Server io.github.dapr/dapr-mcp-server

    Dapr state, pub/sub, bindings, secrets, locks, crypto, conversation, actors, invocation as MCP tools

    Version check not run yet

    Security Official MCP Registry · Go modules Local APACHE-2.0

  43. MCP Server for OSCAL io.github.dfkunstler/mcp-server-for-oscal

    AI agent tools for Open Security Controls Assessment Language (OSCAL)

    Version check not run yet

    Security Official MCP Registry · PyPI Local APACHE-2.0

  44. Fraudlabspro io.github.fraudlabspro/mcp-fraudlabspro

    Fraud Prevention MCP server using FraudLabs Pro API.

    Version check not run yet

    Security Official MCP Registry · PyPI Local MIT

  45. MCP Modal Server io.github.george-bobby/mcp-modal

    MCP server for managing Modal apps, containers, volumes, and secrets.

    Version check not run yet

    DevOps and infrastructure Official MCP Registry · PyPI Local MIT

  46. Ghidra BizHawk MCP io.github.getanirao/ghidra-bizhawk-mcp

    Unified Ghidra + BizHawk MCP server for static analysis, P-code emulation, and retro ROM triage.

    Version check not run yet

    Security Official MCP Registry · PyPI Local APACHE-2.0

  47. Ghidra Retro io.github.getanirao/ghidra-retro-mcp

    Headless Ghidra MCP server with P-code emulation and multi-console ROM triage.

    Version check not run yet

    Security Official MCP Registry · PyPI Local APACHE-2.0

  48. Sandbox Env MCP io.github.hs3434/sandbox-env-mcp

    Persistent Docker/SSH sandbox for AI agents: shell exec, file ops, audit log.

    Version check not run yet

    Operating system and shell Official MCP Registry · PyPI Local AGPL-3.0-ONLY-OR-COMMERCIAL-LICENSE