- Conduid
- Marketplace
- #security-tools
MCP servers tagged security-tools
340 live MCP servers tagged "security-tools", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security-tools.
Frameworkmap
Crosswalk controls across NIST, ISO 27001, SOC 2, CMMC, PCI
Dirsight
Analyze web content-discovery output (ffuf/gobuster) into ranked endpoints
Graphqlmap
Analyze GraphQL introspection for risky fields, depth, and authz gaps
Depgraph
Dependency risk visualizer — Scorecard + OSV + typosquat + maintainer signals
Kali Ssh MCP
MCP server bridging Claude/any LLM client to a persistent Kali Linux VM over SSH — scope-gated nmap, gobuster, nuclei & nikto with structured JSON output and full audit logging.
Edgedelta AI Agents Enhancement
17 new MCP tools for EdgeDelta AI agents — enhanced monitoring, observability, and security automation
SkillWatch
Independent, local-only watcher for the AI-skill supply chain: flags bait-and-switch changes in the pages skills and MCP tools reference. Sends nothing anywhere. Python CLI.
Pnx MCP Audit
Security audit CLI for Model Context Protocol (MCP) servers. Zero deps, offline, cross-platform.
Loopback Litmus
Safe browser-to-localhost security checks for local AI agent and MCP control planes.
Agent Permit Office
Pre-flight security checks for AI coding agents before tools, secrets, memory, MCP, or CI write access.
Mrholmes Osint Suite
SSG REAPER OSINT kit — authorized research CLI, GUI, and MCP
Burp MCP Me262
MCP server for Burp Suite Pro — active scans, native fuzzer, Collaborator, reporting, scope-guarded. Works with Claude Code, Cursor, Cline, Windsurf & any MCP client.
Threat Detection Lab
Agent exposure review ("what changes if I add this tool to my agent?"), a deterministic detection-boundary harness, and a CTI pipeline. Public data only; every figure measured.
Endpointsweep
Find every MCP server and AI agent on your endpoint fleet. Dependency-free collectors for macOS, Linux and Windows run under EDR/MDM, and a central analyzer audits them against a…
Mobile Security Research Framework
Self-contained Mobile & IoT SAST/DAST/pentest toolkit: MobSF + Frida + objection + mitmproxy + rooted emulator, as a desktop app, CLI and MCP server.
passmcp
Test any Model Context Protocol server and find out, in plain language, whether it is ready for your agents — and exactly what to fix if it is not.
Statuskit
Self-hosted status page with incident timeline and subscribers
Checkpoint AI
NIST AI RMF / EU AI Act / ISO 42001 self-assessment & SSP generator
Cipherdetect
Detect & crack classical ciphers (caesar/vigenere/xor) by scoring
Runbookgen
Incident runbook and SOP generator from templates
Aicaudit
aicaudit — AI-powered code audit for Python: taint-path static analysis + evidence-grounded AI verdicts. Every result ships with a machine-checkable source-to-sink path.
Security Toolkit
13 atomic MCP tools for AppSec and AI Security: recon, MCP audit, prompt-injection audit, OWASP LLM Top 10
Cutout
Offensive framework for authorized security testing of agentic AI systems — recon, exploit, persist, and pivot across MCP servers and agent chains.
Hexstrike Docker MCP
Dockerized HexStrike AI on a linuxserver.io Kali base image, with a remote streamable-HTTP MCP server exposing 150+ offensive-security tools to MCP clients like Claude Code.
Aitdp
AI Threat Detection Protocol — open spec, community ruleset and reference SDK for detecting prompt injection, jailbreaks, data exfiltration and tool abuse in LLM apps and AI agent…
Passmcp Reporting
The passmcp attestation format for MCP servers, its JSON Schemas and offline verifier, the security graph model, and an agentgateway processor that enforces it.
PacketForge
AI network analysis toolkit + MCP server for authorized pentesting: Wireshark/tshark capture, credential extraction, threat intel, Nmap scanning. | 面向授权渗透测试的 AI 网络分析工具库 + MCP Serv…
Quotecraft
Proposal / quote / SOW generator — YAML to branded PDF
Claimtrace
Misinformation provenance tracer — earliest-known appearance graph
Linklint
Read-only mirror of gitlab.com/bart-turczynski/linklint (issues and development there). An explainable, offline-first, agent-native URL inspector — detects deceptive URLs and tell…
Jev Native MCP
Review public code and documents with Jev in Codex and Claude Code: ranking, batch screening, claim checks, spend limits, and evaluation tools.
Claude MCP Allow
Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule…
Auth Doctor
Diagnose OAuth discovery problems on remote MCP servers: the 401 challenge, RFC 9728 protected resource metadata, authorization server metadata, PKCE S256, client registration, to…
Agentic Semgrep Rules
Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, us…
Sonarqube
Model Context Protocol (MCP) Stack for SonarQube
Mcpaudit
Security scanner for your installed MCP servers — finds plaintext secrets, unpinned supply chains, and tools that can exec/write/eval. Static or --deep. Local-only.
Reticle
Reticle intercepts, visualizes, and profiles JSON-RPC traffic between your LLM and MCP servers in real-time, with zero latency overhead. Stop debugging blind. Start seeing everyth…
Passmcp
Test any Model Context Protocol server and find out, in plain language, whether it is ready for your agents — and exactly what to fix if it is not.
Geiger
A Geiger counter for AI agents — one read-only command that inventories every agent, MCP server, plugin, and AI extension on a machine
Narsil MCP
Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more
Narsil MCP
Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more
Geiger
A Geiger counter for AI agents — one read-only command that inventories every agent, MCP server, plugin, and AI extension on a machine
Narsil MCP
Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more
Narsil MCP
Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more
Scanner
Security auditing tool for MCP (Model Context Protocol) servers — 27 checks, web dashboard, SARIF output, compliance mapping
Mcpguard
Local firewall, scanner, and audit logger for MCP servers. Auto-discovers Claude Desktop / Cursor / Windsurf / VS Code configs and flags risky tool servers — leaked secrets, curl|…
Trace
Experimental: stdio proxy that logs MCP JSON-RPC metadata (method, tool, latency, errors) to local SQLite — no bodies by default. Sister project to mcp-vault. Install from git; th…
Agentpassport
Verifiable identity, scoped delegation, revocation, and signed action receipts for AI agents.
Synthetic
Vulnerability landscape and synthetic dataset exposable trough API/MCP. Made during ETHPrague2026 hackathon using Sourcify smart contract dataset.
Trust Me Bro
Every skill you install says trust me bro. This one reads it first. Pre-install audit for agent skills, plugins, and MCP servers: lethal-trifecta reach, injection wording, provena…