- Conduid
- Categories
- Security
Security MCP servers
Security MCP servers indexed by Conduid, ranked by trust score. 4.9K live listings from GitHub, npm, PyPI and the official registry, each with a 0–100 score, security checks, and install commands.
io.github.mrfentmen/fema-mcp
Federal disaster declarations and emergency data from FEMA. No key required.
io.github.mrfentmen/incident-timeline-mcp
Summarize local log timeline gaps and severity counts without returning messages, IDs, paths, or...
io.github.mrfentmen/openalex-mcp
Use this MCP server to OpenAlex scholarly works, authors, institutions, and citations. Tools...
io.github.mrfentmen/osv-mcp
Use this MCP server to OSV open source vulnerability data and package security checks. Tools...
io.github.mrfentmen/repo-forensics-mcp
Local read-only MCP tools for Git repository archaeology, churn, hotspots, and hygiene. Tools...
io.github.mrfentmen/ssl-cert-mcp
Inspect TLS certificates of a host: issuer, expiry, and SAN. No key required.
io.github.mrfentmen/ssl-labs-mcp
TLS security grades from SSL Labs. No key required.
io.github.mrfentmen/unicode-security-mcp
Local first MCP checks for Unicode confusables, mixed scripts, invisible controls, and...
io.github.mrfentmen/uptime-mcp
Check website availability, latency, and TLS certificate expiry locally. No key required.
io.github.zerohourzulu/continuity-evidence
A bounded local evidence tool with current agent permission checks and durable retry handling.
io.jikida/mcp
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
Opencode MCP Java Lsp
MCP server exposing jdtls (Java LSP) code-intelligence tools - see README.md for design and the config.json-driven config
figma-vault
Figma designs pulled once into a local vault; AI agents read them offline with no rate limits
EverThread
Plain-English website security check for agents: certificate, headers, scripts, forms, spam.
AtlaSent MCP Server
Authorize-before-execute for AI agents: evaluate an action, get a permit, verify it before running.
Anwani
Anwani digital addresses: create/list/patch/share/delete after OAuth. Real map pins only.
io.github.mlugo-apx/detectzestack-mcp
Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.
io.github.moxno/ztds
Open standard MCP server for Zero-Trust Data Sanitization (ZTDS RFC v1.0). In-memory PII masking.
io.github.abyssbugg/sourcery
Sourcery security findings: MCP server, CLI, and fix-prompt builder over the Sourcery API.
Echelongraph
EchelonGraph CVE and internet-exposure data as an MCP server: CVEs with EchelonGraph multi-source scores, CISA-KEV and EPSS, plus a per-CVE internet-exposure footprint derived fro…
io.github.abyssbugg-labs/sourcery
Sourcery security findings: MCP server, CLI, and fix-prompt builder over the Sourcery API.
API Key Case
Local MCP tools for secret status and guarded deployment. Values never reach the agent.
Keelgrc
Model Context Protocol server for the Keel GRC API: drive your compliance program from Claude, Cursor, or any MCP client.
isMalicious threat intelligence for AI agents
Indicator reputation verdicts, CVE lookups (CVSS, EPSS, KEV) and prompt-injection scans for agents
LinkPilot
Send a password or API key as a link that opens once. Encrypted client-side, so we cannot read it.
Garry Codes
The Principal Garry's Mod Model Context Protocol (MCP) Server
Server Bangladesh
MCP server with Bangladesh reference data (divisions, districts) for BanglaClaw and any MCP client
io.github.Projetxana/gate-authority-network
Live authority-state verification for agent actions at effect time.
SutramX
SutramX uptime monitoring: monitors, check results, incidents, status pages and uptime/SLO reports.
io.github.WSattazahn/caveat-lang
Authoring bridge for Caveat: validate, check and test programs; explain decisions; find dependents.
io.github.subhajitlucky/codebase-doctor
Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.
Verified by NPC
Check products, credentials, claims, and agents against NPC Labs verification records.
MCP Security Guard
Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).
Valca
Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.
Armadoc
Send and read end-to-end encrypted documents. Your private key never leaves your machine.
as-mcp-server
Local MCP server that lets AI agents monitor an OpenVPN Access Server through its Web API (read-only)
Keystash
Local encrypted vault that lets an AI agent use your secrets without exposing them to the model.
APSA mobile app security audit
Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.
sealkeep
Let AI agents use secrets without seeing them: inject into a command, redact the output.
LLMVerify
Local-first MCP server for LLM output verification — risk signals, injection and PII checks.
RegiaBI charts
MCP (Model Context Protocol) stdio server for BIC AI charts: profile a dataset locally, then generate chart code that has passed the BIC backend's render gates. Works with any MCP…
Świadectwo Energetyczne 24
Polish energy performance certificates: pricing, requirements, order, documents, payment link
Cognate
MCP adapter: exposes runtime capabilities as MCP tools through the runtime's authorization path.
Pca
Model Context Protocol adapter for Proof-Carrying Authority: wrap an MCP tool handler so every call emits a PCActn (and attaches the proof) before the handler runs.
io.github.chrischall/iaqualink-mcp
iAqualink pool equipment: status plus confirm-gated pump, heater, light and set-point control.
ai.sanctuaryprotocol/sanctuary
Open-source MCP server: encrypted local keys and state, operator approval gates, a hash-chained log.
io.github.ark-forge/prove-it
Free public benchmark for AI agents: compliance tasks, every claim checked against signed receipts
AppLedger
Plain-English security checks for AI-built apps (Trivy + Opengrep), with fix requests for agents
Notibuddy
Zero-knowledge end-to-end encrypted CLI and Model Context Protocol (MCP) server for NotiBuddy
litshrine
A quiet place for agents to make wishes, light a daily lamp, and receive a reviewed oracle.