- Conduid
- Marketplace
- #infosec
MCP servers tagged infosec
66 live MCP servers tagged "infosec", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with infosec.
User Scanner
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 465+ actively maintained scan vectors…
Cybermes
Zero-Go Model Context Protocol (MCP) Server for Cybermes Autonomous Security & Diagnostic Framework
Reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and re…
Opensquat
openSquat is an open-source tool that detects look-alike domains impersonating your brand, by scanning newly registered domains daily.
ARL Next
🚀 自动化资产侦察与漏洞监控平台 (ARL-Next)。重构自经典 ARL，全面升级 Puppeteer + Nuclei 引擎，打通「天眼查/ICP ➔ 资产发现 ➔ 漏洞扫描 ➔ 威胁情报追踪」安全闭环。支持 Docker 极简部署，AI 二开友好。
Aptl
SOC-in-a-Box for AI purple teaming
Tengu
AI-powered penetration testing MCP server
C2detect
C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel
Secure Sdlc Agents
A team of Claude Code sub-agents that enforce security across the full SDLC, from ASVS requirements and threat modelling to SAST triage, IaC review, compliance attestation and rel…
Fedramplens
FedRAMP boundary visualizer & OSCAL-format SSP/POAM generator
Blescope
Sniff and decode BLE GATT traffic, fingerprint device profiles, and assert on insecure pairing/characteristics in CI against a capture.
Fwxray
Diff two firmware images and surface exactly what changed: new binaries, flipped config flags, added certs, and shifted entropy regions.
Yararun
Run simple YARA-style string/regex rules over a directory
Crackq
Self-hosted password cracking queue — multi-user hashcat with audit log
Pcapsummary
Summarize flows/talkers/protocols from a pcap text export
Approvewarden
Scans any wallet for dangerous ERC-20/721/1155 token approvals and infinite allowances, scoring drainer exposure and emitting revoke transactions.
Kafka MCP Enterprise Server
A production-ready Model Context Protocol (MCP) server for Apache Kafka. Features Information Flow Control (IFC) sandboxing, granular namespace isolation, and strict bounded buffe…
Canzap
Replay, fuzz, and assert on CAN bus traffic from a .pcap or SocketCAN interface with a tiny YAML DSL.
Piiscan
PII discovery across warehouses and lakes (data-side scanner)
Egresswatch
Server-side outbound connection auditor — eBPF/Falco wrapper
Security Hunter MCP
🛡️ Production-grade Model Context Protocol (MCP) Server for Autonomous AI Security Bug Hunting, Persistent Pentest Memory, Dynamic Checklists, Secret Redaction, and Exploit PoC Ge…
Crt.sh Skills
Comprehensive crt.sh wrapper: Skills · MCP Server · CLI · Go SDK — search CT logs, retrieve certs, investigate CAs, lint certificates, monitor Atom feeds. Every crt.sh feature wra…
Phishforge
Open-source phishing simulation — campaigns, templates, training
Attackmap
Map findings to MITRE ATT&CK techniques + coverage heatmap
Reposecure
One-shot repo security posture grade (secrets/CI/branch rules/deps)
Logsift
Detect brute-force, spray, and anomalous auth events in logs
Mftparse
Analyze an NTFS $MFT CSV for timestomping and suspicious file activity
Wavewatch
Offline RF signal reconnaissance & triage from capture files — detect, fingerprint & classify emitters (drone/Wi-Fi/BLE/GNSS) without demod. Defensive, zero-dependency, CLI + MCP.
Portfan
Summarize and diff nmap XML into prioritized, attackable findings
Ssltriage
Grade TLS config (protocols/ciphers/expiry) from openssl/sslyze output
Pentquiver
Fast cross-platform TUI/CLI/API/MCP command library and cheat-sheet launcher for pentesters - 2,800+ security commands, argument templates, hexagonal architecture.
AI Pentest Agent
基于 LLM Agent + MCP 的自动化安全侦察框架：自然语言驱动 nmap / subfinder / httpx，完成子域枚举 → Web 探测 → 端口扫描 → 中文报告闭环（仅限已授权场景，只做侦察不做利用）
Netprobe MCP
An open-source, AI-native Model Context Protocol (MCP) server bridging Large Language Models with core network diagnostic tools for automated observability, threat detection, and…
Phishcheck
Score URLs/emails for phishing signals (lookalike, auth, intent)
Cookieaudit
Audit Set-Cookie flags (Secure/HttpOnly/SameSite) from a response dump
Headerscan
Grade HTTP security headers (CSP/HSTS/XFO) A-F from a response dump
Baadiff
Scan a repo or infra manifest for HIPAA Security Rule gaps and produce a Business Associate readiness scorecard.
Payloadlab
Static malicious payload analyzer — PE/ELF/LNK/macro/OneNote
K8saudit
Audit Kubernetes manifests against CIS-style security rules
Yaragen
Generate candidate YARA rules from sample files/strings
Binhunt
Game/desktop binary integrity scanner that fingerprints executables, detects common packers/obfuscators, and diffs against a known-good baseline to catch tampering.
Obscan
Conformance and security linter for Open Banking / FAPI APIs: validates OAuth flows, consent scopes, and PSD2 endpoints against the spec.
Sanctscan
Screens counterparties and transactions against OFAC/EU/UN sanctions lists with fuzzy name matching and explainable hit scoring.
Probesite
Synthetic uptime and Playwright checks exported to Prometheus
Apkpeek
One-command static triage of Android APK/AAB binaries: surfaces hardcoded secrets, exported components, dangerous permissions, and insecure manifest flags as a single SARIF report.
Honeyurl
Generate canary URLs/tokens + a matcher for trip events
Ssrfind
Find SSRF-prone sinks and unvalidated URL fetches in code
Memtriage
Triage memory-dump artifacts: strings, IOCs, suspicious processes from a dump export
Nimbus MCP
Nimbus - AWS Security Assessment MCP Server | 45 Tools | Multi-Region Scanning | TRA Reports | CIS/NIST/PCI-DSS Compliance
Embedaudit
Embedding / vector-store drift and poisoning audit