- Conduid
- Marketplace
- #security-tools
MCP servers tagged security-tools
340 live MCP servers tagged "security-tools", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security-tools.
Narsil MCP
Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more
Browserbruter
BrowserBruter is a powerful web form fuzzing automation tool designed for web security professionals and penetration testers. This Python-based tool leverages Selenium and Seleniu…
Prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Dotenv
Loads environment variables from .env for nodejs projects.
Stride Gpt
An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.
Dexcalibur
Reversense (Dexcalibur2) is a fully rewriting and rethinking of Dexcalibur. Reversense is a binary intelligence platform that automates the reverse engineering of mobile and embe…
Attackgen
AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tail…
Qu1cksc0pe
All-in-One malware analysis tool.
Cybermes
Zero-Go Model Context Protocol (MCP) Server for Cybermes Autonomous Security & Diagnostic Framework
Awesome Reverse Engineering
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
Fuzzforge AI
AI-powered workflow automation and AI Agents platform for AppSec, Fuzzing & Offensive Security. Automate vulnerability discovery with intelligent fuzzing, AI-driven analysis, and…
LuaN1aoAgent
LuaN1aoAgent is a cognitive-driven AI hacker. It is a fully autonomous AI penetration testing agent powered by DeepSeek V3.2. Using dual-graph reasoning, LuaN1ao achieves a succes…
Secpipe
MCP server for AI-driven security pipelines
Dark Moon
Autonomous AI pentesting engine, continuous offensive security across web, cloud, AD & Kubernetes. Agentic reasoning + real exploit execution deliver proof-based vulnerabilities.…
Ship Safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
Opensquat
openSquat is an open-source tool that detects look-alike domains impersonating your brand, by scanning newly registered domains daily.
Reverify
Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Re…
Copacetic MCP
an mcp server for patching container images
Cap
Codebase Awareness Protocol (CAP) is designed for AI coding agents to reliably understand the codebase
Cybermcp
CyberMCP is a Model Context Protocol (MCP) server designed for testing backend APIs for security vulnerabilities. It provides a set of specialized tools and resources that can be…
shark
Wireshark-like forensic analysis for Model Context Protocol communications Capture, inspect, and investigate all HTTP requests and responses between your IDE and MCP servers
Shark
Wireshark-like forensic analysis for Model Context Protocol communications Capture, inspect, and investigate all HTTP requests and responses between your IDE and MCP servers
Aegis
Windows-first desktop oversight for AI agents: live monitoring, local security reviews, token usage, audit reports and opt-in action policies/MCP gateways. Experimental Hyper-V gu…
AI Security Tool
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for aut…
Geiger
A Geiger counter for AI agents — one read-only command that inventories every agent, MCP server, plugin, and AI extension on a machine
Zerobox
Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls.
CyberStrike
AI-powered offensive security agent. Autonomous pentesting with 13+ specialized agents, 120+ OWASP test cases, 15+ LLM providers, and Bolt remote tool servers. Your AI red team.
Pentest Agents
Autonomous bug-bounty framework for Claude Code — 40 specialist agents, exploit-chain builder, writeup search, and live HackerOne/Bugcrowd integration.
Prismor
Runtime security for Agents. Blocks dangerous commands, prevent secret leaks, stop prompt injection, gate risky package installs and visibility and control over tool calls.
ARL Next
🚀 自动化资产侦察与漏洞监控平台 (ARL-Next)。重构自经典 ARL，全面升级 Puppeteer + Nuclei 引擎，打通「天眼查/ICP ➔ 资产发现 ➔ 漏洞扫描 ➔ 威胁情报追踪」安全闭环。支持 Docker 极简部署，AI 二开友好。
AgentHound
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI ser…
Evil Winrm Py
Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)
Fleet MCP
🚀 An Model Context Protocol (MCP) server for Fleet. Query OSQuery data, check compliance, and investigate CVEs natively from Claude, Cursor, and any MCP-compatible AI agent.
Builtwith MCP Server
MCP server for the BuiltWith API — look up the technology stack, analytics, and hosting behind any website.
Wazuh MCP Server
Wazuh MCP Server: AI-Driven SOC Automation
0
A cybersecurity harness for full-stack LLM-driven penetration testing. Find and fix vulnerabilities autonomously, 24/7. [RESEARCH PREVIEW]
Awesome AI Pentesting
A curated list of AI-powered pentesting tools, frameworks, MCP servers, and resources for autonomous cybersecurity operations
Bugsy
Automatic security vulnerability remediation for your code.
Hx0 HawkEye
面向 Chrome/Firefox 的轻量级浏览器安全工作台：集成抓包、拦截改包、重放/Fuzz、敏感信息检测、HawkEye MCP 与浏览器级 Agent。（A lightweight Chrome/Firefox browser security workbench for capture, interception, replay/Fuzz, se…
Guardana
Open-source AI security verification — model artifacts, live endpoints, MCP servers and recorded agent traces. One rule engine for your laptop, CI and production, mapped to OWASP/…
0sec
[RESEARCH PREVIEW] The open & extensible cybersecurity harness - by the Swiss Applied AI Cybersecurity Research Lab.
Clampdown
Run AI coding agents in hardened container sandboxes.
Opena2a CLI
Unified CLI for the OpenA2A security platform
Control
Decide which MCP tool calls your AI agents can run: a local gateway with signed policies, one-time approvals and an evidence trail. Experimental alpha. Open source, Go.
Toolbox
Collaborative application security testing between humans and agents via CLI and MCP
Atlas
Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali sandbox, multi-provider LLM routing. 本…
Wireshark MCP
TShark/Wireshark MCP server for network packet analysis via Claude
Control
Observe AI agent runs and control consequential actions. Signed policies, exact-action approvals, AuthZEN API vetoes and evidence. MCP gateway today; connected-channel supervision…
Sectinel
Open-source security arsenal for AI coding agents: 784 cybersecurity skills, scanner integrations, and a security MCP for Claude Code, Cursor, opencode, Gemini CLI, Cline, and any…
Jsowl
JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server，输出 JSON 与交…