Security MCP servers
3,385 servers
Scan code and dependencies, look up vulnerabilities and work with security tools.
- Virustotal
io.github.pipeworx-io/virustotalVirusTotal MCP — file / URL / domain / IP reputation (BYO key)
100% up · 30 days
Security Official MCP Registry · npm Remote 22 a week MIT
- Arcwall Security
io.github.rom-baro/arcwall-securitySecurity scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.
Version check not run yet
Security Official MCP Registry · npm Local 22 a week MIT
- Zactonz
io.github.zactonz/zactonz-mcpScreenshots, page to Markdown, link previews, DNS, SSL, WHOIS, QR codes and more for AI agents.
Version check not run yet
Security Official MCP Registry · npm Local 22 a week MIT
- @egchq/egc
io.github.fmarzochi/egcEGC is a local-first MCP runtime that gives every AI agent the same brain: persistent shared memory, security guardrails, and up to 90% token savings across 20 AI coding tools.
Version check not run yet
Memory and context npm Local 48 a week APACHE-2.0
- Touchstone
cv.touchstone/touchstoneBitcoin-anchored, tamper-evident audit log for AI agents — record, disclose and verify actions.
100% up · 30 days
Security Official MCP Registry · npm Local Remote 21 a week APACHE-2.0
- Vanmoose
io.github.codevanmoose/vanmoose-mcp-server197 MCP tools from 74 developer APIs — screenshots, email, NLP, WHOIS, QR, PDF, and more.
Version check not run yet
Browser automation Official MCP Registry · npm Local 21 a week MIT
- Sslwebsites
io.github.jyswee/sslwebsitesSSL certificate management for coding agents. Issue, renew, monitor certs. 10 tools stdio.
Version check not run yet
Coding agent tools Official MCP Registry · npm Local 21 a week SEE-LICENSE-IN
- DugganUSA CLI — Local STDIO MCP
io.github.pduggusa/dugganusa-cliLocal STDIO MCP for DugganUSA threat intel. 1.13M IOCs. Read-only. npm: dugganusa-cli.
Version check not run yet
Security Official MCP Registry · npm Local 21 a week MIT
- Wisewall
io.github.ti-ab/wisewall-mcpManage WiseWall sites from an AI coding assistant — deploy, configure DNS, secrets, and plans.
Version check not run yet
DevOps and infrastructure Official MCP Registry · npm Local 21 a week MIT
- Jikida
io.jikida/mcpSecurity tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
Version check not run yet
Security Official MCP Registry · npm Local 21 a week MIT
- Sanctions & PEP Screening
com.macaroonnetwork/sanctions-pep-screening-v1Screen a name in one call against US OFAC SDN, the EU Consolidated Financial Sanctions List, UK…
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- Box
com.mcparmory/boxManage files, folders, and team collaboration with access controls
Version check not run yet
Files and storage Official MCP Registry · PyPI Local MIT
- Codacy
com.mcparmory/codacyAnalyze code quality, security issues, and coverage across repositories
Version check not run yet
Developer tools Official MCP Registry · PyPI Local MIT
- WP HealthKit
com.wphealthkit/mcp-serverSecurity audits for WordPress plugins and themes — 62 verification layers, fix plans and SBOMs.
100% up · 30 days
Security Official MCP Registry · npm Local Remote MIT
- Draugr
dev.draugr/draugrSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
Version check not run yet
Security Official MCP Registry · Go modules Local APACHE-2.0
- AI Firewall MCP
io.github.Akhilucky/ai-firewall-mcpMulti-agent LLM security layer detecting prompt injection and jailbreaks.
Version check not run yet
Model and agent tools Official MCP Registry · PyPI Local MIT
- Scopeguard
io.github.Alex-Dev-Web-C-DE/scopeguardSanctions scope monitoring. Track entities for changes in OFAC/UK/EU/UN lists.
Version check not run yet
Monitoring and observability Official MCP Registry · npm Local MIT
- Acord Bridge
io.github.CSOAI-ORG/acord-bridge-mcpBridge ACORD insurance messages to ONE OS — parse, validate, map, govern (Solvency II / GDPR /
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- As400 Bridge
io.github.CSOAI-ORG/as400-bridge-mcpIBM i / RPG / DB2 bridge — parse, map, govern (IBM i security / SOX).
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- Iso20022 Bridge
io.github.CSOAI-ORG/iso20022-bridge-mcpISO 20022 / SWIFT finance bridge — parse, validate, modernise, govern (DORA/NIS2/AML).
Version check not run yet
Legal and compliance Official MCP Registry · PyPI Local MIT
- Meok Cra Art14 Reporter
io.github.CSOAI-ORG/meok-cra-art14-reporter-mcpMEOK CRA Article 14 Reporter MCP — actively-exploited-vulnerability notification with 24h/72h/14d
0% up · 30 days
Security Official MCP Registry · PyPI Local Remote MIT
- Meok Hardening
io.github.CSOAI-ORG/meok-mcp-hardening-mcpMEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 10
0% up · 30 days
Security Official MCP Registry · PyPI Local Remote MIT
- Tremelay
io.github.CharitonMedia/tremelayLocal MCP broker: agents call credentials through a daemon without seeing secrets.
Version check not run yet
Security Official MCP Registry · Go modules Local APACHE-2.0
- SendGrid Secure
io.github.Choppaaahh/sendgrid-mcp-secureSecurity-first SendGrid MCP server: dry-run default, recipient allowlists, rate caps, audit log.
Version check not run yet
Email Official MCP Registry · PyPI Local MIT
- Gocreative Wedge
io.github.ColinHughes2121/gocreative-wedge-mcpOFAC/PEP sanctions screening, KYB, company & people enrichment tools for AI agents. Free demos.
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- TridentChain Security
io.github.DevInder1/tridentchain-securityLocal supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- Checkmcp
io.github.H129hj/checkmcpAudit any MCP server's security & quality — OWASP MCP Top 10 + explainable 0-100 MCP Score
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- SONAR — KYB, sanctions screening & competitive intelligence
io.github.Ivanolegvak/sonar-mcpSanctions, PEP, KYB, and competitive intelligence on any company. Panama Papers cross-check.
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- WHOIS
io.github.KincaidYang/whoisQuery WHOIS/RDAP information for domains, IP addresses, CIDR prefixes and ASNs. Self-hostable.
100% up · 30 days
Security Official MCP Registry · Go modules Remote MIT
- MySQL (security-first)
io.github.Kurok1/mcp-server-mysqlSecurity-first MySQL MCP server with AST validation, table whitelist, schema resources, and audit.
Version check not run yet
Databases Official MCP Registry · Go modules Local APACHE-2.0
- GoSQLX
io.github.ajitpratap0/gosqlxSQL validation, formatting, parsing, metadata extraction, linting, and security analysis.
100% up · 30 days
Databases Official MCP Registry · Go modules Remote APACHE-2.0
- Bawbel Scanner
io.github.bawbel/bawbel-mcpScan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.
Version check not run yet
Security Official MCP Registry · PyPI Local APACHE-2.0
- Go Unifi
io.github.claytono/go-unifi-mcpManage UniFi sites, devices, clients, networks, port forwarding, DNS, and firewall
Version check not run yet
DevOps and infrastructure Official MCP Registry · Go modules Local MPL-2.0
- Bigdatacorp
io.github.codespar/mcp-bigdatacorpMCP server for BigDataCorp — Brazilian data enrichment + KYC (CPF/CNPJ/vehicle/property/antifraud)
Version check not run yet
Government and public records Official MCP Registry · npm Local MIT
- Clearsale
io.github.codespar/mcp-clearsaleMCP server for ClearSale — Brazilian fraud prevention, order risk scoring, device fingerprinting
Version check not run yet
Security Official MCP Registry · npm Local MIT
- Jumio
io.github.codespar/mcp-jumioMCP server for Jumio — global identity verification + KYX: documents, liveness, AML screening
Version check not run yet
Security Official MCP Registry · npm Local MIT
- Konduto
io.github.codespar/mcp-kondutoMCP server for Konduto — Brazilian fraud prevention: order risk scoring, device intel, lists
Version check not run yet
Security Official MCP Registry · npm Local MIT
- Niubiz
io.github.codespar/mcp-niubizMCP server for Niubiz — Peru card acquirer: security token, session, authorize, reverse
Version check not run yet
Security Official MCP Registry · npm Local MIT
- Onfido
io.github.codespar/mcp-onfidoMCP server for Onfido — global identity verification + KYC: applicants, documents, checks, workflows
Version check not run yet
Security Official MCP Registry · npm Local MIT
- Persona
io.github.codespar/mcp-personaMCP server for Persona — developer-first identity verification + KYC (inquiries, accounts, reports)
Version check not run yet
Security Official MCP Registry · npm Local MIT
- Sift
io.github.codespar/mcp-siftMCP server for Sift — global ML fraud detection: real-time risk scoring, decisions, event ingestion
Version check not run yet
Security Official MCP Registry · npm Local MIT
- Dapr MCP Server
io.github.dapr/dapr-mcp-serverDapr state, pub/sub, bindings, secrets, locks, crypto, conversation, actors, invocation as MCP tools
Version check not run yet
Security Official MCP Registry · Go modules Local APACHE-2.0
- MCP Server for OSCAL
io.github.dfkunstler/mcp-server-for-oscalAI agent tools for Open Security Controls Assessment Language (OSCAL)
Version check not run yet
Security Official MCP Registry · PyPI Local APACHE-2.0
- Fraudlabspro
io.github.fraudlabspro/mcp-fraudlabsproFraud Prevention MCP server using FraudLabs Pro API.
Version check not run yet
Security Official MCP Registry · PyPI Local MIT
- MCP Modal Server
io.github.george-bobby/mcp-modalMCP server for managing Modal apps, containers, volumes, and secrets.
Version check not run yet
DevOps and infrastructure Official MCP Registry · PyPI Local MIT
- Ghidra BizHawk MCP
io.github.getanirao/ghidra-bizhawk-mcpUnified Ghidra + BizHawk MCP server for static analysis, P-code emulation, and retro ROM triage.
Version check not run yet
Security Official MCP Registry · PyPI Local APACHE-2.0
- Ghidra Retro
io.github.getanirao/ghidra-retro-mcpHeadless Ghidra MCP server with P-code emulation and multi-console ROM triage.
Version check not run yet
Security Official MCP Registry · PyPI Local APACHE-2.0
- Sandbox Env MCP
io.github.hs3434/sandbox-env-mcpPersistent Docker/SSH sandbox for AI agents: shell exec, file ops, audit log.
Version check not run yet
Operating system and shell Official MCP Registry · PyPI Local AGPL-3.0-ONLY-OR-COMMERCIAL-LICENSE