- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
Mekka
Experimental source-available SQLite/libSQL backend for human-and-agent-native workflows, with Studio and scoped MCP access.
Obsigna
Agent Receipts — cryptographically signed audit trails for AI agent actions. Protocol spec, SDKs (Go, TypeScript, Python), and MCP proxy.
Sourcerykit
Python SDK for accurate and verifiable agent tool use. Agents verify that answers came from the right source and were not changed. Downstream agents detect 100% of errors and retr…
Shellgate Legacy
Self hosted secure gateway for AI agents. One token. Full control. Complete audit trail.
Rookhold
Run short-lived Python, Node, and Bash with hard limits, live output, and verifiable receipts.
Ephemora Cell
Ephemora Cell — The execution layer for untrusted AI-generated code. Fast, capability-based WASM execution with explicit CPU, memory, time, I/O, and filesystem limits.
AgentDoctor
Local CLI that audits coding-agent configuration for security, instructions, context, and MCP — no API key or code upload by default.
Blockend
shadcn/ui for your backend — a CLI that generates production-ready TypeScript blocks (rate limiting, validation, logging) into your codebase. You own the code
Localant
Use ChatGPT as the brain and your local computer as the hands — a safe, permissioned local MCP gateway with default-deny security, local approvals, and full audit logging.
Openclaw Holy Grail
Curated OpenClaw resource library with setup guides, personas, memory systems, security hardening, MCP integrations, communities, and more. 190+ links.
Indexleak Scanner
⚡ AI-powered directory listing scanner that hunts for exposed secrets and classifies security risks.
GuardianWAF
Zero-dependency Web Application Firewall in Go. Single binary. Three deployment modes. Tokenizer-based detection.
Weasel
Solidity static analyzer you can talk to. MCP integration for Claude Code, Cursor, and Windsurf.
AI Agent Hacking Writeups
A collection of public writeups on attacks against AI agents: prompt injection, tool abuse, memory poisoning, and data exfiltration.
Shaka
Company email for Rwanda. Read and send mail from a Shaka mailbox over OAuth or an API key.
Skillhawk
Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.
Awesome Offensive MCP
A curated list of Offensive Security MCP Servers for Red Teaming & Pentesting.
Concealer
🔐 The local-only secret manager for the AI-coding era with MCP, CLI, Web UI, TUI and Extension. No cloud, No telemetry, No account.
Lockkeeper
The capability router for AI coding agents. Route any task to a bounded skill portfolio across Claude Code, Codex, Cursor, Jcode, Hermes and more — with a built-in prompt-injectio…
Cpex
A policy enforcement runtime for AI agents
Vetto
Daemon-less OS security boundary & sandbox for AI coding agents (Codex, Claude Code, Cursor, Aider)
Agent Audit Kit
Static scanner for MCP-connected AI agent pipelines. 332 rules across 14 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to…
Gatelet
Self-hosted MCP proxy that gives AI agents fine-grained access to your accounts (e.g. GMail, GCal, Outlook) – without giving away the keys.
Leandro
AI SRE agent diagnosing Kubernetes incidents over Google Chat — security-first sandbox: NixOS VM, default-deny egress, hard tool denylist against prompt injection
Terraview
Realiza análise estática e contextual de segurança em infraestrutura Terraform, detecta misconfigurations e riscos de compliance antes do apply, calcula scores de segurança e gera…
Aegis Lang
A security-by-construction programming language for AI agents
SchemaPin
The SchemaPin protocol for cryptographically signing and verifying AI agent tool schemas to prevent supply-chain attacks.
Audit A Static Security And Hygiene Audit CLI For MCP Servers
A CI-friendly open-source CLI that statically audits MCP servers before they are wired into AI agents. It flags tool poisoning, hidden Unicode payloads, misleading annotations, an…
Calendar Autoauth MCP Server
A Model Context Protocol (MCP) server for Google Calendar integration in Cluade Desktop with auto authentication support. This server enables AI assistants to manage Google Calend…
Delphi Visual Studio Code Debugger
A debugger for delphi in visual studio code, and also a MCP server to give claude/copilot/etc authonomous delphi debugging capabilities
Sb Siem MCP
sb-siem-mcp is an MCP server that connects LLMs (like Claude) to Wazuh SIEM, enabling natural language threat hunting, alert analysis, compliance checks, and incident response thr…
Windows Memory Forensics MCP
MCP server for Windows memory forensics. Provides AI agents with 33 tools for analyzing memory dumps using Volatility 3, MemProcFS, and CLR/SOS backends. Includes process analysis…
Fortianalyzer MCP
MCP server for FortiAnalyzer JSON-RPC API. Query logs, alerts, incidents, FortiView analytics, and PCAPs from AI assistants.
Accuretta
A sovereign, zero-trust local AI agent and micro-IDE.
Nuwaclaw
nuwax agent
Tabby AI Assistant
Tabby Terminal AI Assistant Plugin - Multi-AI provider support with smart command generation and security features
Universal MCP Oauth
Universal MCP IdP (Identity Provider) - Support Thousands of Integrations, Zero Maintenance
Safesemantics
SafeSemantics is a topolgical guardrail for AI apps and agents. Just plug and play the security layer of AI with advanced knowledge base of how all attackers penetrate and exfiltr…
Brin CLI
the credit score for context.
Smith Core
The most secure AI agent. Live the automation dream without the security nightmares.
Cursor MCP Trivy
A Model Context Protocol (MCP) server that provides Trivy security scanning capabilities through a standardized interface.
Web Security Agents
LLM Agents for Web Security
Pgrls
Static analyzer for Postgres Row-Level Security — 67 lint rules covering tenant and per-user row-scoping bugs, performance traps, and hygiene; 20 mechanically auto-fixable; semant…
Franken Surveillance System
Pure-Rust, evidence-native, local-first sensor fabric and semantic control plane for owner-authorized cameras and capture drones
Malshark
AI-powered malware traffic analysis and network forensics via the Model Context Protocol
Cobalt Docker
Builds and runs Cobalt Strike 4.12 in Docker with automatic REST API startup. Production-ready, one-command deploy.
Sample MCP Security Scanner
This pattern describes how to implement a Model Context Protocol (MCP) server that integrates three industry-standard security scanning tools (Checkov, Semgrep, and Bandit) to pro…
Cybersec
Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural language conversation.
GAIA Obsidian Vault
GAIA Obsidian Vault
Threatshield
Making lives of Security Engineers easier!