- Conduid
- Marketplace
- #security-tools
MCP servers tagged security-tools
340 live MCP servers tagged "security-tools", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security-tools.
CogniGraph
BloodHound for AI agents - graph-native capability reachability analysis for MCP and agentic AI systems
SafeInstall
Understand software before you run it — local-first static risk analysis for unfamiliar projects.
Defender Xdr MCP
Self-hosted, strictly read-only MCP server for Microsoft Defender XDR. Bring your own AI to your Defender telemetry — delegated per-user auth, no write path, production guardrails.
Haechi
Experimental self-hosted AI context enforcement layer for LLM, MCP, vLLM, Ollama, and agent traffic.
Conclear
Local utility for managing AI coding session data — disk space, leaked secrets, lost files, conversation history. CLI + web UI + MCP server. Multi-tool: Claude Code, Cursor, Cline…
Tool Sanitizer
Detect and neutralize Unicode concealment codepoints in MCP tool metadata (covert-channel control). AGPL-3.0-or-later.
Skillguard
Static security scanner for AI agent skills and plugins — flags prompt injection, hidden Unicode, exfiltration, and dangerous commands in SKILL.md/CLAUDE.md and scripts.
Agentic Workflow Guard
Static analysis for AI automation workflows. Find prompt-injection paths, overpowered tools, and write-capable agent jobs before they run.
Pkgguard API
Open-source AI package security gate that blocks slopsquatting, hallucinated dependencies, and typosquats before npm, pip, uv, or cargo install
Mcpwatchman
Independent security and quality audit for Model Context Protocol servers — static analysis, dependency CVE scanning, and evidence-linked scores for every server in the official M…
Agent Authenticator
Self-hostable TOTP MCP server for AI agents. Generate 2FA codes without exposing seeds.
Otaverify
Validate OTA update packages end-to-end: signature chains, rollback protection, anti-downgrade counters, and delta-patch integrity.
Rldyour Antigravity CLI
rldyour Antigravity CLI configuration: native extensions, GEMINI.md context, commands, skills, subagents, hooks, MCP, browser-provider routing, Serena memory, and runtime validati…
Mcpbait
Red teaming framework that proves whether an MCP-speaking agent can be hijacked by a malicious server
Ble MCP
MCP server for Bluetooth Low Energy scanning and GATT enumeration. Uses bleak to discover devices, inspect their GATT profiles, read characteristics, and capture notification stre…
Agentblackbox
AAPP: Flight Recorder for AI Agent Tool Actions. Prove what an AI agent was allowed to do, what tool it requested, what policy decided, and whether the evidence was changed later.
Scopediff
Review AI agent, MCP, and workflow permission changes before merge.
Agent Skill Guard
Security auditor for AI agent skills — catches hidden-Unicode prompt injection, reviewer-subversion, data exfiltration & post-install drift that markdown-only vetters miss.
Rldyour Claudecode
rldyour AI CLI configuration for Claude Code: plugin marketplace, MCP/LSP, Serena memory, security review, browser/design workflows, and reviewer agents.
LLM Redteam
面向中文场景的开源 LLM 红队测试工具 | An open-source red team toolkit for LLM applications, covering prompt injection, jailbreak and info leakage attacks, with OpenAI/Dify/MCP adapters and LLM-a…
Residoo
Find secrets your AI coding agent leaked to disk, watch for new ones, and optionally block a sensitive read before it happens. Free, MIT, zero deps, no network calls by default. O…
Sentinel Memory MCP
Evidence-first cybersecurity MCP server with persistent SQLite graph memory, vulnerability triage, scoped testing and reports for Antigravity and Codex.
AntiStrike7.0
Antistrike 7.0 — Advanced AI-powered penetration testing platform with 99 attack modules, MCP integration, and web dashboard
Agentreveal
本地扫描 AI Coding Agent 的 Provider、密钥、权限、MCP 与代理链路，并生成可执行的安全报告。
MCP
Integration two AI's into a modernized MCP for better performance
Fofa MCP Server
This server provides access to FoFa API functionality through the Model Context Protocol.
Narsil MCP
Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more
Siege
Runtime red-team harness for live MCP servers. Attacks as real roles to find authz/RBAC bypasses a static manifest scan can't see. The offense leg of an agent-governance suite (Wa…
Gateway
Local-first firewall and black-box run reporter for MCP tool calls: block poisoned tools, detect drift, rate-limit agents, and audit runs.
Kali MCP
Kali Linux container exposed to AI agents via MCP, behind a gateway with a network kill-switch
Cap
What can this MCP server actually do — and has it changed since you trusted it? Inspect its declared capabilities, seal them in a lock file, and get told when a later version can…
Mcpaudit
Audit your MCP servers for tool poisoning, credential exposure, and supply-chain risk. Zero dependencies. Nothing is executed.
Mitmproxy MCP
MCP server for network-level TLS interception and IoT security testing. Orchestrates mitmproxy and tshark to intercept traffic from devices connecting to a WiFi access point, auto…
Prismsec
Secure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting
Tsk
tsk is a local MCP server that sits between your AI agent and external APIs. It holds your credentials, enforces per-tool call rules, scrubs sensitive data from API responses befo…
Sentinelmcp
The EDR for MCP servers — 100% local, read-only. Discover, fingerprint and monitor every MCP server your AI agents expose across 14 clients; catch rug-pulls, tool poisoning, typos…
Burp MCP
Burp Suite Professional MCP server - 61 tools to drive Burp from an AI agent (Claude Code) for authorized security testing.
Golf Scanner
Discover and audit MCP servers for security vulnerabilities across Claude Code, Cursor, VS Code, and more
CyberChef MCP
[CyberChef-MCP] Model Context Protocol Server for CyberChef ... exposing GCHQ's "Cyber Swiss Army Knife" as 463+ executable AI agent tools spanning encryption, encoding, compressi…
Nsauditor AI
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration.…
Cybersec Toolkit
580+ cybersecurity tools, one command. Modular bash installer for Linux & Termux with 14 profiles, 18 modules, and an MCP server for AI-assisted ethical hacking.
BurpMcpEnhance
Enhanced Burp Suite MCP Server — Streamable HTTP solves AI disconnection; SQLite cache prevents Burp freezing under load.Burp Suite MCP Server 增强版 — Streamable HTTP 彻底解决AI断连，SQLit…
Codex Safe Git
Local-first MCP server that gives sandboxed Codex a narrow, auditable Git workflow surface.
rob925/mcp-shield
server`
Mcphints
Given an MCP server, shows the declared ToolAnnotations for security assessments
Pocmap
MCP-native CVE, PoC & exploit discovery toolkit (Metasploit, Nuclei, GitHub & more)
Seizu
A neo4j dashboard and reporting tool.
AgentNull
AgentNull: AI System Security Threat Catalog + Proof-of-Concepts. Collection of PoCs for using Agents, MCP, and RAG in bad ways.
Bearstrike AI
🐻 BearStrike AI: High-Signal Pentesting Console (MCP-First, Model-Agnostic). Build fast, low-noise security workflows with queue-first execution, skills-aware planning, and 150+ i…
Mcpsshclient
An Agentic MCP server sshclient