CY
Cyberark io.github.mrfentmen/cyberark-mcp Password breach checks and identity security audits - no API key.
Version check not run yet
Security Official MCP Registry · npm Local 89 a week MIT
-
Electron.js MCP server — IPC scaffolding, security auditing, build tooling for AI assistants
Version check not run yet
Security Official MCP Registry · npm Local 87 a week MIT
CI
Cinema4d io.github.kumoproductions/mcp-cinema4d MCP server for Cinema 4D — entity CRUD, parameter-level access, batched undo, security controls.
Version check not run yet
Security Official MCP Registry · npm Local 86 a week MIT
3I
3ilm io.github.holistis/3ilm-mcp Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
Version check not run yet
Security Official MCP Registry · npm Local 23 a week MIT
CG
Code Guard io.github.mlawsonking/code-guard-mcp Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.
Version check not run yet
Security Official MCP Registry · npm Local 23 a week MIT
-
Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.
Version check not run yet
Files and storage Official MCP Registry · npm Local 23 a week MIT
-
OWASP MCP10 context oversharing: session dumps, unscoped memory, shared context, prompt leaks
Version check not run yet
Security Official MCP Registry · npm Local 80 a week MIT
-
MCP server for LenelS2 S2 NetBox access control via the NBAPI. Read-only by default.
Version check not run yet
Security Official MCP Registry · npm Local 80 a week MIT
PR
Prodcheck io.github.FarzamHabibi/prodcheck 4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.
Version check not run yet
Security Official MCP Registry · npm Local 79 a week MIT
-
Scans MCP servers for tool poisoning, prompt injection and supply chain risks.
Version check not run yet
Security Official MCP Registry · npm Local 78 a week MIT
MC
mcpcut io.github.RostislavMatov/mcpcut Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval
Version check not run yet
Security Official MCP Registry · npm Local 76 a week APACHE-2.0
-
Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats
Version check not run yet
Developer tools Official MCP Registry · npm Local 74 a week MIT
KA
Kastell io.github.kastelldev/kastell Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.
Version check not run yet
Security Official MCP Registry · npm Local 73 a week APACHE-2.0
-
OWASP MCP08 audit/telemetry gaps: missing tool-call logs, raw args in logs, disabled audit
Version check not run yet
Monitoring and observability Official MCP Registry · npm Local 72 a week MIT
-
npm registry MCP server — package intelligence, security audits, dependency analysis
Version check not run yet
Developer tools Official MCP Registry · npm Local 71 a week MIT
AU
Auditor io.github.GuardBee/mcp-server-auditor Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
Version check not run yet
Security Official MCP Registry · npm Local 70 a week MIT
-
Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data la
Version check not run yet
Security npm Local 7k a week MIT
IS
Iso27001 io.github.Sushegaad/iso27001-mcp ISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows.
Version check not run yet
Security Official MCP Registry · npm Local 69 a week MIT
-
AML screening for crypto addresses: risk, sanctions, fund tracing and counterparties.
Version check not run yet
Security Official MCP Registry · npm Local 18 a week MIT
-
MCP security trust-check for agents before installing MCPs, Skills or tools.
Version check not run yet
Security Official MCP Registry · npm Local 66 a week APACHE-2.0