- Conduid
- Marketplace
- #security-tools
MCP servers tagged security-tools
340 live MCP servers tagged "security-tools", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security-tools.
Soc Stack
One-command self-hosted SOC lab for Proxmox: Wazuh, TheHive, Cortex, MISP, Zeek, Suricata, and MCP servers for homelab blue-team training.
Premortem
An agentic system that performs swarm-style repository audits and synthesizes structured GitLab/Github issues.
Capability Ledger
Infer least-privilege MCP tool policies from agent traces
Nirikshak
It runs the standard passive recon checks, but it remembers the last scan and tells you what changed, and it's built MCP-native from the start so Claude (or any MCP client) can dr…
NTZ
Evidence-first VM experimentation platform for system analysis, debugging, and AI-assisted investigation.
Daemonaudit
Red/blue security audit for self-hosted AI agent daemons — finds the secrets, the open doors, and the blast radius.
Switchyard
Detect when Claude silently falls back from Fable 5 to Opus 4.8, log it to a local tamper-evident ledger, and keep your work on the frontier model.
LilyStrike
Advanced pentest & BadUSB toolkit for the LILYGO T-Dongle-S3 (ESP32-S3 Device) HID, Deauth, EvilAP, MCP AI and more - Web Flasher Online
Agentcapdiff
AI agent security policy-as-code for detecting capability, permission, and least-privilege changes across MCP, OpenAI, Claude, LangChain, LangGraph, and CrewAI tools.
Agent Webhook Check
Free single-file auditor for webhook signature verifiers — the highest-frequency real bug in AI-agent tool callbacks. Stdlib only, no deps. MIT.
Yamcpscanner
Yet Another MCP Security Scanner
Qanvuli
Local vulnerability database and scanner for CVE, OSV, CWE, CAPEC, KEV and EPSS — CLI, TUI and MCP.
Agent Safe MCP
A Remote MCP Server that checks every email before your agent acts on it. Connect via MCP protocol, pay per use with Skyfire.
Windows Toolkit
Windows power-user starter kit — curated tools, 80+ shortcuts, one-command winget setup
SkillSpectorWeb
Skill Spector Web: A Web Assemby port of https://github.com/nvidia/skillspector
Consentinel
Static security auditor for MCP servers. Finds tools that can do irreversible or external damage and verifies each one actually enforces a human-in-the-loop safeguard — not just d…
YeepForge
Automated web application penetration testing framework: OWASP Top 10 + advanced attacks, an autonomous AI agent (Ollama/Claude/OpenAI), SAST source-code analysis, and an MCP serv…
Agentgate MCP Firewall
Governance proxy for MCP tool calls with narrow independent verification for governed write_file and delete_file effects.
Burpsuite For AI Agent
Two-way Burp Suite MCP bridge for AI agents — capture traffic, queue scan tasks, send findings back to Burp as Scanner issues or Repeater tabs. MCP server + Jython plugin.
Anubis
An MCP server that gives your AI assistant the ability to triage malware. Static analysis, YARA, VirusTotal — all local. (beta)
Magus Opensecmcp
A deterministic execution firewall for MCP agents. Local-first, open source, no LLM judging the thing it's meant to secure, no cloud dependency, no telemetry leaving your machine…
Ganimedes Project
A local, zero-dependency security gateway for MCP servers. Audit, block and approve what your AI agents actually do.
Anakrisis
Ethics-aware OSINT investigation planning, collection, and risk evaluation, delivered as an MCP server. Classification, risk tiers, hard stops, and defensible documentation — driv…
Slopguard
Blocks AI-hallucinated and typosquatted packages before they install — npm, pip, uv, yarn, pnpm, bun
Vulnerability Detection
Self-contained MCP security server that scores AI agent tool-calls with a rule-based library + behavioral detector, giving explainable, MITRE-mapped verdicts for known attacks
Agent Policy Lens
A zero-dependency CLI that inventories AI agent and MCP permissions before they surprise you.
Ida Pilot
Headless IDA Pro analysis server that exposes the decompiler and disassembler as MCP tools for AI agents — tiered tool loading, multi-layer caching, batch ops, and compact payload…
Projectscope
A robust, production-ready Model Context Protocol (MCP) server that empowers AI agents with deep understanding and manipulation capabilities for software repositories. It inclued…
Glassport
Wire-level observability and enforcement for MCP servers: passive stdio tap, behavioral detectors, drift watch, and static audit — with SARIF for the GitHub Security tab. Zero dep…
Payloadlab
Static malicious payload analyzer — PE/ELF/LNK/macro/OneNote
Dpiaforge
DPIA and EU AI Act impact-assessment generator
Schemadrift
Schema-change detector and data-contract tests
Mevscope
Replays a tx or address history to attribute sandwich, frontrun, and backrun MEV extraction with per-trade loss accounting.
Hol Guard Examples
HOL Guard examples and guides for AI agent security
Apidiff
Breaking-change detector for OpenAPI / GraphQL across commits
Nipmod
Nipmod package intelligence, Codex plugin, MCP workflows and public agent safety tooling.
Paywatch
Recurring-charge and subscription detector from bank/Plaid CSV
Deeplinkfuzz
Fuzzes Android/iOS deep links, intents, and custom URL schemes against an emulator/device to surface unvalidated-redirect, injection, and component-hijack bugs.
Ssrfind
Find SSRF-prone sinks and unvalidated URL fetches in code
Aibom
Generate an AI bill of materials for models, MCP servers, tools, datasets, vector stores, and external APIs.
Gateward
Security gateway for MCP traffic. 5 built-in rules block prompt injection, credential leakage, path traversal, cross-repo exfiltration, and destructive commands. One pip install,…
Plumbline
A public, append-only transparency log of MCP tool definitions. Detects post-publication changes to what agent tools claim they can do.
Vetmcp
Security scanner for MCP servers — npm audit for the Model Context Protocol
AI Protect
AI-application security assurance pipeline: tier-aware SAST · DAST · AI red-team scanning with a findings dashboard, CVE intel feeds & auto-remediation. For AppSec & platform team…
Rtosmap
Statically map task structures, stack usage, and ISR call graphs in FreeRTOS/Zephyr firmware to flag stack overflows and priority-inversion risks.
Gasprofiler
Per-opcode and per-function gas profiler that flags unbounded loops, DoS-prone patterns, and regressions against a committed baseline.
Narrativediff
News bias & framing diff across 50+ outlets per event
Storagelens
Diffs and decodes contract storage layouts across proxy upgrades to catch storage-collision and uninitialized-slot bugs.
Lineagemap
Column-level lineage extracted from SQL and dbt
Envdoctor
.env validator, secret-presence and config-drift checker