- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
SyteCheck
Scan a website for SEO, accessibility, performance and security issues, and read the report.
Vizier Guard
Deterministic authorization and security guard for AI agent actions with signed receipts.
Security MCP
Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses
io.github.lazytitan30/billing-doctor
Diagnose Google Play Billing incidents locally, with evidence. Not affiliated with Google.
io.github.williamblaismedia-create/ridealong
Watch your AI drive a real Chrome live, point, approve, or take the wheel from your phone.
Gadriel AI Security Harness
AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.
Mneme Decision MCP
Local MCP server for architectural decisions, traceability, and non-authoritative proposals.
io.github.aapd-studio/omnideck
Local privacy-first tools: redact secrets, decode JWTs, compare LLM costs. No network calls.
Askew — iPhone, iPad and Mac via Shortcuts
Run Shortcuts on your iPhone, iPad or Mac from any MCP agent, even locked. End-to-end encrypted.
vaultguard
AI agents use your Obsidian secrets by name — values never reach their context.
io.github.markusvankempen/mcp-ticket-demo
MCP server demo — tickets, schema discovery, auth, and PII gating. stdio + HTTP.
io.github.cyanheads/cisa-cybersecurity-mcp-server
CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.
Swarmproof
Official Model Context Protocol (MCP) server for SwarmProof — multi-agent smart contract security auditing on Hedera
Aspex
See what your AI agents actually did, then scan what they could do. MCP security from logs, no proxy. Offline, one binary.
Verimand MCP Authority Server
Agent-native access to verifiable VAGP authority.
io.github.charmshots/mcp-server
Read-only MCP connector for Charmshots photoshoots, photo metadata and owner-authenticated links.
io.github.mrfentmen/certspotter-mcp
Certificate transparency lookups from Cert Spotter. No key required.
io.github.mrfentmen/fema-mcp
Federal disaster declarations and emergency data from FEMA. No key required.
io.github.mrfentmen/incident-timeline-mcp
Summarize local log timeline gaps and severity counts without returning messages, IDs, paths, or...
io.github.mrfentmen/openalex-mcp
Use this MCP server to OpenAlex scholarly works, authors, institutions, and citations. Tools...
io.github.mrfentmen/osv-mcp
Use this MCP server to OSV open source vulnerability data and package security checks. Tools...
io.github.mrfentmen/repo-forensics-mcp
Local read-only MCP tools for Git repository archaeology, churn, hotspots, and hygiene. Tools...
io.github.mrfentmen/ssl-cert-mcp
Inspect TLS certificates of a host: issuer, expiry, and SAN. No key required.
io.github.mrfentmen/ssl-labs-mcp
TLS security grades from SSL Labs. No key required.
io.github.mrfentmen/unicode-security-mcp
Local first MCP checks for Unicode confusables, mixed scripts, invisible controls, and...
io.github.mrfentmen/uptime-mcp
Check website availability, latency, and TLS certificate expiry locally. No key required.
Palar
Defensive, read-only static analyzer for local MCP tool and server definition files
io.github.zerohourzulu/continuity-evidence
A bounded local evidence tool with current agent permission checks and durable retry handling.
io.jikida/mcp
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
Opencode MCP Java Lsp
MCP server exposing jdtls (Java LSP) code-intelligence tools - see README.md for design and the config.json-driven config
figma-vault
Figma designs pulled once into a local vault; AI agents read them offline with no rate limits
EverThread
Plain-English website security check for agents: certificate, headers, scripts, forms, spam.
AtlaSent MCP Server
Authorize-before-execute for AI agents: evaluate an action, get a permit, verify it before running.
Anwani
Anwani digital addresses: create/list/patch/share/delete after OAuth. Real map pins only.
io.github.mlugo-apx/detectzestack-mcp
Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.
io.github.moxno/ztds
Open standard MCP server for Zero-Trust Data Sanitization (ZTDS RFC v1.0). In-memory PII masking.
io.github.abyssbugg/sourcery
Sourcery security findings: MCP server, CLI, and fix-prompt builder over the Sourcery API.
Echelongraph
EchelonGraph CVE and internet-exposure data as an MCP server: CVEs with EchelonGraph multi-source scores, CISA-KEV and EPSS, plus a per-CVE internet-exposure footprint derived fro…
io.github.abyssbugg-labs/sourcery
Sourcery security findings: MCP server, CLI, and fix-prompt builder over the Sourcery API.
API Key Case
Local MCP tools for secret status and guarded deployment. Values never reach the agent.
isMalicious threat intelligence for AI agents
Indicator reputation verdicts, CVE lookups (CVSS, EPSS, KEV) and prompt-injection scans for agents
LinkPilot
Send a password or API key as a link that opens once. Encrypted client-side, so we cannot read it.
io.github.Projetxana/gate-authority-network
Live authority-state verification for agent actions at effect time.
SutramX
SutramX uptime monitoring: monitors, check results, incidents, status pages and uptime/SLO reports.
io.github.WSattazahn/caveat-lang
Authoring bridge for Caveat: validate, check and test programs; explain decisions; find dependents.
io.github.subhajitlucky/codebase-doctor
Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.
Verified by NPC
Check products, credentials, claims, and agents against NPC Labs verification records.
MCP Security Guard
Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).
Valca
Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.
Armadoc
Send and read end-to-end encrypted documents. Your private key never leaves your machine.