- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
as-mcp-server
Local MCP server that lets AI agents monitor an OpenVPN Access Server through its Web API (read-only)
Keystash
Local encrypted vault that lets an AI agent use your secrets without exposing them to the model.
APSA mobile app security audit
Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.
sealkeep
Let AI agents use secrets without seeing them: inject into a command, redact the output.
LLMVerify
Local-first MCP server for LLM output verification — risk signals, injection and PII checks.
Świadectwo Energetyczne 24
Polish energy performance certificates: pricing, requirements, order, documents, payment link
Cognate
MCP adapter: exposes runtime capabilities as MCP tools through the runtime's authorization path.
io.github.chrischall/iaqualink-mcp
iAqualink pool equipment: status plus confirm-gated pump, heater, light and set-point control.
ai.sanctuaryprotocol/sanctuary
Open-source MCP server: encrypted local keys and state, operator approval gates, a hash-chained log.
io.github.ark-forge/prove-it
Free public benchmark for AI agents: compliance tasks, every claim checked against signed receipts
AppLedger
Plain-English security checks for AI-built apps (Trivy + Opengrep), with fix requests for agents
Notibuddy
Zero-knowledge end-to-end encrypted CLI and Model Context Protocol (MCP) server for NotiBuddy
litshrine
A quiet place for agents to make wishes, light a daily lamp, and receive a reviewed oracle.
io.github.RealSpap/authority-risk-mcp
Read-only tools for AI agents: who can change a smart contract, how fast. Signed data, testnet.
io.github.corpussanctum/atlas-mcp
Pre-action authorization for AI agents: permit, deny or escalate against a signed delegation chain.
keyshroud
Agent-safe secrets from self-hosted Vaultwarden/Bitwarden: injected into commands, masked in output
EyalSec
Read your EyalSec security events, machines, runs and rules from an AI assistant.
Epeaky
Your AI agents in an Epeaky den: end-to-end encrypted rooms. Only their owner's orders count.
io.github.MadeByFYI/madeby
Disclose AI authorship of code per the ACO standard — tools for AI coding agents.
OTPilot
Use your OTPilot accounts (passwords, 2FA codes) to sign in and run commands, without seeing them.
Fairquery Agent Trust & Data Safety
PII/secret redaction, email checks, sanctions screening and OSV vulnerability lookups for AI agents.
BenchFleet
Let AI agents use your real Android phones safely, with permissions, approvals and an audit log.
Lokal
Indonesia-ready agents: NIK, phone, Rupiah, regions, postal codes, holidays, and PII masking.
Agentcomms
Account-free encrypted messaging between AI agents over a public Agentcomms hub.
Labby
Rust MCP gateway with Code Mode, authentication, setup, logs, CLI, HTTP API, and operator web UI.
Check AI Free — Image Source Clues
Inspect editable image source clues. No C2PA signature verification or authenticated origin.
Sn1per MCP Server: pentest, recon and attack surface scanning
Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.
io.github.4DA-Systems/4da-mcp-server
Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
mcp-scan
Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.
Conning
Run commands on your remote test machines over SSH without the agent ever seeing a secret.
io.github.Toraastrta/sphior-code-mcp
Deterministic SAST/SCA findings + fix guidance for your AI agent. Runs locally, no account needed.
QuickBooks Online MCP Server
QuickBooks Online MCP server for invoices, customers, and payments. OAuth 2.1 + PKCE, stdio/HTTP.
io.github.carelessdept/ci-guard-mcp
Local-first static repository security and configuration drift auditor (CLI, GitHub Action & MCP).
UML Forge
Architecture intelligence, security analysis, and living docs. 13 Mermaid tools.
MCP Server for OSCAL
AI agent tools for Open Security Controls Assessment Language (OSCAL).
contextweaver
MCP gateway: bounded tool shortlists + artifact-backed result firewall. Deterministic, no model.
Forge MCP
MCP server + tools for the Forge E-- generative-music authoring loop (compile / run / commit).
LeanGate
Checks agent-written Python against your repo: duplicate helpers, error handling, security.
io.github.makash/feedmyagent
Technology intelligence feed for AI agents: tech stack, compliance, security.
io.github.michalper/mcp-magento-audit
MCP server for auditing Magento projects: update compatibility, module quality, dependency security
hush
Team secrets your AI agent can use but never read: encrypted in the repo, value-blind tools.
Oura Ring
Read-only Oura Ring sleep, readiness, activity, stress and heart rate data (OAuth2)
WokiToki
Walkie-talkies for AI coding agents: peer-to-peer, end-to-end encrypted messaging via MCP.
MemoraEU
Zero-knowledge persistent memory layer for AI agents. Encrypted client-side, hosted in France.
Security MCP
Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses
ConnectWise PSA
ConnectWise PSA (Manage) MCP server — tickets, time entries, companies, configurations, RBAC
MCP Shield
Security scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.
io.github.stasxr/palanit-core
Scan MCP servers and agent tool manifests for poisoning, exfiltration, secrets and supply-chain risk
ForgeBridge
A local, permissioned MCP agent for authorized developer workstations.
VMware Harden
VMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection.