- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
SecureShell
Plug-and-play terminal security layer for LLM agents. Drop-in gatekeeper that prevents dangerous shell commands. Works with OpenAI, Claude, Gemini & more.
Ultraship
Ultraship — Claude Code plugin. 32 expert-level skills for building, shipping, and scaling production software. 29 audit tools (security, code quality, bundle size, SEO/GEO/AEO) c…
The Red Council
LLM Adversarial Security Arena — Jailbreak → Detect → Defend → Verify
Cloud Native Utils
A collection of high-performance, modular utilities for enhancing testing, transactional consistency, efficiency, security and stability in cloud-native Go applications.
Agent Vault
Zero-trust credential manager for AI agents
i-am-bee/acp-mcp
An MCP server acting as an adapter into the [ACP](https://agentcommunicationprotocol.dev) ecosystem. Seamlessly exposes ACP agents to MCP clients, bridging the communication gap b…
girste/mcp-cybersec-watchdog
time monitoring with anomaly detection across 23 analyzers: firewall, SSH, fail2ban, Docker, CVE, rootkit, SSL/TLS, filesystem, network, and more.
Wechat Decrypt Macos
微信 macOS 聊天记录解密与分析工具 | Decrypt & analyze WeChat chat history on macOS via SQLCipher key extraction from process memory
Pentest AI
The most autonomous pentesting AI on the market. MCP server + Python agents with 150+ security tools, exploit chaining, and PoC validation.
Tenuo
High-performance capability engine for AI agents. Cryptographically attenuated warrants, task-scoped authority, Rust core.
Kali MCP Go
Let AI agents run nmap, metasploit, sqlmap, hydra and more in parallel — MCP server built for pentesting and CTF
Cache Commander
Cache Commander — a TUI and MCP server to explore, audit, and clean developer cache directories. Scan for CVEs, find outdated packages, reclaim disk space. Supports pip, npm, Carg…
Vibecop
AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.
Ubon
Peace of mind for vibe-coded apps
mopanc/depguard
the SBOM serializer is implemented natively against the public CycloneDX schema.
Bluerock
Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as structured NDJSON. No code changes. Apache…
WonderSuite AI Bug Bounty
AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy, stealth browser, autonomous AI agent. B…
Unlost
Bridging code authorship and ownership
Heron
Open-source AI agent auditor. Know what your agents do before production.
ZeroGraph
ZeroGraph - pentest agent for whitebox code review
MCTS
MCTS (Model Context Threat Scanner) is a local-first security scanner for MCP servers -- static and live tool discovery, multiple analyzers, auditable risk scores, and JSON, SARIF…
JanuScope
Local-first MCP policy proxy. Tool-block, SQL-mutation gate, PII redact, audit, rate-limit, OpenTelemetry, vault secrets, first-use quarantine, schema pre-inject. No hosted gatewa…
Remotepower
Server management dashboard, CVE-scanner, patch-mangement, SNMP-polling, monitoring, MCP-server, drift-detection, Proxmox. Basically a swiss-knife! AIO.
Deptrust
deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Ha…
Awesome Agentic Devops
Curated + scored map of official MCP servers and agents for DevOps, Cloud, SRE, and Platform Engineering — every entry rated on production access, approval gates, and audit eviden…
Agent LibOS
Agent libOS provides a runtime substrate for self-evolving LLM agents with process-like execution, tool management, and security boundaries implemented through explicit capabiliti…
Mcpgrade
Lighthouse for MCP servers — score any MCP server on agent usability, not just spec compliance
SecureAI Scan
SecureAI-Scan is a CLI tool that scans TypeScript and JavaScript codebases for security issues specific to AI-powered apps — prompt injection, MCP tool abuse, RAG data poisoning,…
LLM Differential Privacy Gateway
Noisegate: a differential privacy gateway that lets an untrusted LLM agent query sensitive data over MCP (Model Context Protocol), with a formal guarantee no individual's record c…
Ryk
Guardrails for coding agents. Run Pi, Hermes, OpenCode, Codex, or Claude through ryk with policy, approvals, 86 safety packs, and a local audit trail.
Pythinker CLI
Think first, then code. Where Claude Code and Codex jump straight to writing, this stays review-first: a code reviewer, security scanner, root-cause debugger, and code generator,…
Pdf Decompiler MCP
A MCP that turns PDFs into structured text, tables, figures, metadata, annotations, and page-level evidence for selective retrieval by MCP-compatible AI agents. Improves the infor…
AI Smart Contract Auditor
AuditSentry — AI-powered smart contract security auditor for Claude Code. Automated vulnerability detection, exploit PoCs, mainnet-fork simulation, and professional audit reports…
Toolpermit
A local-first permission firewall and approval layer for AI agent tool calls.
C2detect
C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel
Osim Schema
OSIM （Open Security Information Model）是 面向 AI 的开源安全数据标准化 项目，通过定义规范统一的安全数据 schema 语义层，破解行业数据碎片化难题，使安全团队、工具和 AI 系统能够在不同的数据源之间进行一致性推理和分析。致力于实现跨厂商、跨产品的安全数据无缝对接，为安全智能化升级与建立协同防御的核心数据打基础！
Symaira Vault
🔐 The password manager for terminal users and AI agents. Age-encrypted, keyring-cached, MCP-ready. Zero telemetry.
Chancery
The identity provider for AI agents — registry, scoped delegation, in-path MCP enforcement, instant revocation, tamper-evident audit.
Sentinel AI
Real-time AI safety guardrails for LLM apps. 10 scanners: prompt injection, PII, harmful content, code vulnerabilities, obfuscation detection. Sub-ms latency. Python + TypeScript…
Hackbrowser MCP
The first browser MCP built for security testing. Give your AI agent a real Firefox browser and let it find vulnerabilities.
Proton Pass Community MCP
Unofficial MCP server that integrates with the Proton Pass CLI
Security Framework MCP
Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping
SpectreWeb AI
Self-Learning AI for Manual Web Penetration Testing
Architect To Product
Vibe code fast. Ship like an engineer. AI engineering framework packaged as an MCP server that enforces TDD, security scanning, pentesting, secret management, QA audits, and depl…
Sabba
SABBA - Security Templates CLI & MCP Server for coding agents that prove every finding by running it
Helios
An AI IDE secure coding MCP service
Codomyrmex
Modular Python 3.11+ coding and agent platform — 130 modules spanning LLM agents (13+ providers), graph RAG, static analysis, git ops, cloud and container deployment, all exposed…
Shadow Web
Local-first Python SDK for AI agents: Shadow DOM flatten, Action Map, SchemaSnap, form fill, security scan, MCP (64–97% token reduction)
Luvv MCP
Luvv-MCP 是一个 AI 原生的前端安全分析引擎，接入 Claude Code 后，你说一句"帮我审计这个网站"，AI 就能自动完成技术栈识别（1.8 万条规则覆盖 CMS/框架/CDN/中间件）、泄露扫描（阿里云 AK、GitHub Token、Webhook、JWT 等 60+ 类敏感信息）、漏洞审计（XSS、开放重定向、CSRF、IDO…
Example MCP App Security
Reference MCP App for Elastic Security — interactive SOC dashboards inside Claude, Cursor, and other MCP hosts.