- Conduid
- Marketplace
- #secops
MCP servers tagged secops
20 live MCP servers tagged "secops", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with secops.
Asnmap
Map ASN/CIDR ownership & neighbors from whois/RIR exports
AI Runbooks
No description published.
Aptl
SOC-in-a-Box for AI purple teaming
Awesome Agent Skills
<DDW-X> Agentic Knowledge Base: A massive, cross-IDE repository transforming leaked AI system prompts (GPT-5, Claude Fable, DeepSeek) into structured, token-efficient Agent Skills…
Microsoft Security Agent Toolkit
Action layer for Microsoft Security AI agents - MCP servers, KQL snippets, Logic Apps templates, and end-to-end demos that pair with microsoft-security-skills
Centinela
A lightweight, defense-in-depth SecOps daemon for Linux/WSL that monitors processes and network traffic, provides plain-language threat explanations, and executes opt-in automated…
Mftparse
Analyze an NTFS $MFT CSV for timestomping and suspicious file activity
Secops
Security operations as conversation. An MCP server connecting 13 security platforms (Wiz, Kodem, GitHub, Okta, SentinelOne, Apono, Twingate, Pluto, Panorays, Abnormal, Slack, Mond…
Cookieaudit
Audit Set-Cookie flags (Secure/HttpOnly/SameSite) from a response dump
K8saudit
Audit Kubernetes manifests against CIS-style security rules
Yaragen
Generate candidate YARA rules from sample files/strings
Memtriage
Triage memory-dump artifacts: strings, IOCs, suspicious processes from a dump export
Ghaudit
Audit a GitHub org's security posture (branch rules, 2FA, secrets) from an export
Graphqlmap
Analyze GraphQL introspection for risky fields, depth, and authz gaps
Microsoft Defender MCP
Rust MCP server for Microsoft Defender XDR and Defender for Endpoint: 88 tools for hunting, threat intelligence, vulnerability management, and gated response.
Prefetchparse
Surface program-execution evidence from Windows Prefetch exports
Cipherdetect
Detect & crack classical ciphers (caesar/vigenere/xor) by scoring
Ttphunt
Hunt MITRE ATT&CK techniques across logs with a rule pack
Apiseclint
Lint OpenAPI specs for security gaps (authz, rate-limit, data exposure)
Iamlint
Lint cloud IAM policies (AWS/GCP/Azure JSON) for least-privilege violations