- Conduid
- Marketplace
- #security-tools
MCP servers tagged security-tools
340 live MCP servers tagged "security-tools", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security-tools.
Aegis SSH MCP
MCP-native SSH bridge for AI agents with host-scoped access, rule-based command validation, ephemeral SSH sessions, and audit logging
Checkexploit
Scanners flag CVEs. CheckExploit proves which ones actually reach your code — by running the real exploit against your actual code inside an isolated sandbox. Supports Python,Node…
Awesome Security MCP Servers
This is curated list of Security tools' MCP server
Pentos
Wissensgetriebener, lokaler Pentest-Workspace (CLI) für CTF, Bug Bounty & autorisierte Tests – geführte Recon, Findings/Loot/Reports, Web-Dashboard, lokale KI-Unterstützung & MCP-…
Trustshell
Open-source toolkit for AI agent security — autonomous attacker + static engine + scanner + red-team skills. Exploit-validated. trust-shell.com
ProcWitness
Passive process forensics for Windows, Linux and macOS. Records process behavior locally and produces an AI-ready evidence bundle.
Pentest MCP Toolkit
Pentest MCP Toolkit: 50 Kali Linux security tools exposed as one MCP server over Docker stdio, built to be driven 100% by AI agents (Claude Code, Codex). For authorized pentests o…
Pengstrike MCP
AI-Powered MCP Penetration Testing Framework - 150+ security tools with adaptive task model
Security Hunter MCP
🛡️ Production-grade Model Context Protocol (MCP) Server for Autonomous AI Security Bug Hunting, Persistent Pentest Memory, Dynamic Checklists, Secret Redaction, and Exploit PoC Ge…
Zoomeye MCP Server
ZoomEye MCP Server - 网络资产搜索与用户信息查询
Hunter MCP Server
An Model Context Protocol (MCP) server that provides access to Hunter API functionality, allowing AI assistants to query information about internet-connected devices and services.
Trigger Happy MCP
An irresponsible MCP Server
Hol Guard Template
HOL Guard template: pre-configured secure plugin starter with CI
Ewcorr
Correlate electronic-warfare event logs by time/frequency/bearing to cluster emitters.
Security MCP Suite
5 MCP servers that give AI agents autonomous security scanning — nmap, nuclei, trivy, sqlmap, gitleaks
Metascrub
Strip identifying metadata from docs/images before release
AI Agent Launch Tools
Dependency-free launch hygiene tools for AI agent and MCP builders
Reposecure
One-shot repo security posture grade (secrets/CI/branch rules/deps)
Logsift
Detect brute-force, spray, and anomalous auth events in logs
Wavewatch
Offline RF signal reconnaissance & triage from capture files — detect, fingerprint & classify emitters (drone/Wi-Fi/BLE/GNSS) without demod. Defensive, zero-dependency, CLI + MCP.
Hl7tap
Parse, pretty-print, diff, and replay HL7 v2 messages over MLLP from the terminal.
Gitstory
Changelog and release notes from conventional commits
Deepcheck
Lightweight synthetic-media detector with C2PA validation
Crmsync
Bidirectional, idempotent sync of contacts/deals between a local SQLite source-of-truth and CRM APIs (HubSpot/Pipedrive/Salesforce) via one config.
Sfi Audit Toolkit
SFI security audit toolkit — audit any repo against Microsoft Secure Future Initiative (SFI) pillars. Zero Trust + NIST CSF 2.0 knowledge base, read-only scanner, MCP server, GitH…
Shrike
The autonomous security agent for your AI stack — finds the vulns in your MCP servers & agent tools AND writes the fixes, on a local model.
Agentic Dfir
Agentic-DFIR — autonomous digital forensics & incident response agent. Architecture-first, not prompt-first: typed read-only MCP tool surface, SHA-256 audit chain, senior-analyst…
Hermes Pentest Lab
AI-orchestrated, Kali-native pentesting lab: an MCP tool-server with scope/VPN/rate/audit enforced in code, independent finding verification, MITRE ATT&CK + OWASP mapping, a reusa…
Mobix
Authorized Android pentest lab, drivable by hand or by AI — Frida bypass chain, live traffic capture with automatic IDOR flagging, full MCP control plane, web dashboard.
Burpsuite MCP Bridge
Burp Suite MCP bridge for traffic triage, replay, bounded interception, rewrite automation, and evidence export.
Marq
Universal cyber assistant: ~80 audited Kali tools + an expert skills library, driven by any model over MCP or direct run
IANUA Broker
Local-first, offline-by-default security posture scanner for MCP servers and local AI-agent setups (CLI: mcpscan).
Jakk
Black-box security scanner for MCP servers — deterministic single-call probes, no LLM. 13 probes across 7 surfaces.
The Box MCP
MCP daemon that gives an agentic coding client a native offensive-security toolchain: MITM proxy, app graph, OOB server, CVE/report RAG and 103 tools.
Shellockolm AI CLI MCP Scanner
Welcome to Shellockolm-ai-CLI-MCP-Scanner - 🎯 Your React app is probably vulnerable. Find out in 30 seconds 🚀
Testssl MCP Server
MCP Server for SSL/TLS security testing with testssl.sh
Agent Security Kit
Practical audit tools and controls for securing MCP servers and agentic AI tool access.
Hexforge Gateway
Self-hosted reverse-engineering workspace API — orchestrates jadx/apktool/adb/frida/APKiD via a job & workflow engine, exposed as native MCP tools for Claude. No cloud required.
Fulcrum Boundary
The action boundary for routed agent tools. See what your AI tools can do; block what they should not.
Cross Provider Egress Guard
Destination-aware, default-deny egress control for AI coding agents, at the tool-dispatch layer across Claude Code and Codex from one shared policy.
Dtrack MCP
Read-mostly MCP server for Dependency-Track: AI-powered vulnerability triage with alias dedup, cross-project duplicate discovery, diff + carry-over between versions, and broadcast…
Cancerbero
Local, offline-first GGUF and llama.cpp pre-load inspector
Wpf Dotnet Engineering MCP
Security-first Model Context Protocol (MCP) server for WPF UI automation, .NET diagnostics, ASP.NET observability, and VS Code on Windows.
Safe AI Skill
Security firewall and supply-chain verifier for Claude Code / Codex / Agent skills and MCPs.
Raze
MCP-first security orchestrator for Solidity smart contracts. Validates AI attack hypotheses, generates Foundry proof scaffolds, catches bugs before auditors do.
Solidity Audit Recipes
Recipes to help AI agents autonomously perform security reviews with Aderyn's builtin MCP server
Openssh Poc Expl
zero day exploit to get remote access to any server running openssh (unpatched)
Moonbunny
execute lua scripts on remote devices using mcp and grpc
Websec Validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
Buspirate MCP
MCP server for BusPirate 6 hardware security testing. Exposes UART, power supply, GPIO, and flash-dump operations as Model Context Protocol tools over stdio transport.