- Conduid
- Marketplace
- #security-tools
MCP servers tagged security-tools
340 live MCP servers tagged "security-tools", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security-tools.
Ramibot
RamiBot v3.8.0 is a local-first AI security operations platform integrating multi-LLM support, a dynamic red/blue team skill pipeline, MCP tool orchestration, Docker terminal acce…
Nuclei Server
A Nuclei security scanning server based on MCP (Model Control Protocol), providing convenient vulnerability scanning services.一个基于 MCP (Model Control Protocol) 的 Nuclei 安全扫描服务器，提供…
Repo Forensics
Security scanner for GitHub repos, Agent Skills, Plugins, and MCP servers. 18 scanners. Zero dependencies.
WonderSuite AI Bug Bounty
AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy, stealth browser, autonomous AI agent. B…
Authsome
Local credential vault for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Offsec AI
offsec-ai is a Python library and CLI that combines classic network reconnaissance with modern AI/LLM security testing.
C2detect
C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel
Tcpk
Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runtime checks, IL-verified findings, computed…
Flarevm MCP
MCP server bridging Kali and FlareVM for automated Windows malware analysis. 48 tools, 5 prompts, 5 resources, composite playbooks (triage, behavioral, unpack, persistence audit).
Sabba
SABBA - Security Templates CLI & MCP Server for coding agents that prove every finding by running it
Malware Sandbox MCP
Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox, URLhaus, Feodo, URLScan & VirusTotal — straig…
Aipermission
Local-first permission gateway for AI agents with scoped connector access, human approval, audit trails, and encrypted local credentials.
Burp MCP Security Analysis Toolkit
Burp MCP Security Analysis Toolkit
Bugbountyrules
Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, coverage, no false positives, never quits e…
Wordpress Malware Removal
Audit, clean, and harden a WordPress site end to end, with an AI agent (Claude/Cursor/Codex/MCP or SSH). Detects & removes hidden malware — cloaking, backdoors, database injection…
Inkog
Static security scanner for AI agents. Catches prompt injection, runaway loops, missing oversight, and compliance gaps across 21 frameworks. Use from Claude Code, Cursor, ChatGPT…
Awesome Offensive MCP
A curated list of Offensive Security MCP Servers for Red Teaming & Pentesting.
Agentmetry
Local-first flight recorder for AI coding agents. Hash-chained audit trail, MITRE-mapped sequence detection, DLP. Forwards to the SIEM you already run.
Kali Opencode Usb
Bootable Kali Linux USB with AI-powered pentesting: OpenCode, CLI Agent, Kali MCP (35+ tools), and Shannon Plugin (autonomous pentesting with 600+ Docker tools). Boot anywhere, pe…
TraceTree
TraceTree - Runtime behavioral analysis tool that maps the process cascade of suspicious packages into a directed tree, catching supply chain attacks that install-time scanners mi…
DeepSentry
🛡️ DeepSentry 是一款 AI 驱动的安全应急与智能运维 Agent，支持本地、SSH、Telnet、FTP、Fleet、WebShell 多目标环境，通过自然语言自动规划巡检、日志分析、CTF/AWD 辅助与安全事件处置，并生成可审计 Markdown 报告。
Irulescan
:shield: irulescan - security analyzer for iRules
Bonklm
MCP SDK connector for BonkLM
MCPServers
MCP Servers for BlockChain, Cyber Security and AI Automation A cutting-edge Model Context Protocol (MCP) server infrastructure designed to power the next generation of decentraliz…
Malvex
AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server
Saker
万物皆是插件，万物皆可自定义——基于DeepSeek Harness的安全测试工作台，提示词、工具、MCP、技能、知识库、WebShell均可模块化编排，覆盖渗透测试与代码审计。
Naso
Self-hosted breach and dark-web exposure monitoring: ingest leaks, correlate identities, triage with a local LLM. Your infrastructure, your data.
Visor
Runtime policy enforcement and audit control plane for MCP tool execution. Deterministic, non-AI policy engine that intercepts MCP tools/call requests before execution.
KAVACH
Zero-trust security runtime for AI agents with deterministic policy enforcement, guarded execution, approvals, redaction, MCP protection, and tamper-evident auditing.
Llamator MCP Server
MCP server for llamator: automate LLM red teaming workflows
Canarchy
Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.
Toolpoison
Security scanner for MCP servers. Detects tool poisoning, prompt injection hidden in tool descriptions, leaked API keys, and supply-chain risk across Claude, Cursor, VS Code, Wind…
FactGraph
Agent-native incident investigation graph: analysts and AI agents (MCP/REST) link evidence from EDR, Entra ID, cloud and GitHub logs into one shared, real-time attack graph and ti…
Llamator MCP Server
MCP server for llamator: automate LLM red teaming workflows
VulScan MCP
Security vulnerability scanner for VS Code. Scans dependencies for CVEs from NVD/OSV databases. Integrates with GitHub Copilot via Model Context Protocol. Supports npm, pip, Maven…
Blitzstrike
⚡ Blitz Strike — a universal MCP penetration-testing toolbelt. Structured methodology: reconnaissance & attack-surface mapping, source-to-sink analysis, and live validation. 57 es…
Vexqr
Vexqr - Connect any AI (Claude, Gemini, Copilot, Cursor, etc.) to security tools with real-time supervision and MCP integration
K Playbook
A project-local toolbox for AI coding assistants: slash commands, persistent project knowledge, MCP integration, code reviews, security scans, and auditable task workflows for Cla…
Bounty Operator
Find the hole in your bug bounty report before the triager does. Pre-submission review for bounty reports and smart-contract findings, on your own model key.
Linkpivot MCP
MCP tool packages (.mcpb) for AI-driven network device ops — firewall REST API toolkits (NSFOCUS / Hillstone / YAXIN / ASG, 490+ tools) + open package format spec. 灵枢 MCP 扩展包生态：防火…
Security Scanner
Scans Model Context Protocol (MCP) server configurations for common security issues: overprivileged tools, missing auth, prompt injection surface, unsafe defaults.
Mcprobe
Security scanner and introspection tool for MCP servers. Connect, inspect, detect injection patterns, find tool shadowing, baseline for drift. Single binary, zero dependencies, Go…
Warden
CI-first MCP supply-chain integrity gate + runtime tool-result inspection. Pin an MCP server's tool surface, fail CI on drift, and block poisoned tool results (ANSI/secret-echo/ex…
Gate
Runtime enforcement for MCP agents: capability manifests, session taint tracking, and a non-configurable rule-of-two trifecta invariant, with a hash-chained audit log.
Vex
Agent-first red team framework for AI systems probe LLMs, agents, MCP servers, and RAG pipelines for safety failures and exploitable vulnerabilities.
Agentsiege
⚔️ Autonomous red-team swarm for AI apps, agents & MCP servers — pentest your agent before someone else does.
Confirmesc
Linux privesc enumerator that confirms exploitability and gives you the exact root shell command - no GTFOBins searching. MCP server + AI-agent skills included.
Fofa MCP Server
This server provides access to FoFa API functionality through the Model Context Protocol.
Tsk
tsk is a local MCP server that sits between your AI agent and external APIs. It holds your credentials, enforces per-tool call rules, scrubs sensitive data from API responses befo…
Fedramplens
FedRAMP boundary visualizer & OSCAL-format SSP/POAM generator