- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
VMware NSX Security
VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.
SPARDA
AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.
LexQ
Policy engine tools: author rules, simulate impact, replay decisions, and deploy.
Fettle
Uptime monitoring for developers — monitors, incidents, heartbeats, maintenance, status pages
keycloak-mcp-server
Keycloak MCP server that calls the Admin API as the signed-in user, via OAuth
mcp-server-shield
Author-side hardening primitives for Python MCP servers.
nvd-cve-mcp-server
MCP stdio server for querying CVE data from the NVD API v2.0
obsidian-mcp-server
MCP server giving Claude Code read/write access to Obsidian vaults
sonarqube-mcp-server
MCP Server for SonarQube - allows AI assistants to query bugs, vulnerabilities, code smells, security hotspots and more
Server
MCP server for SixthWall AI code security scanner. Integrates with Claude Code for automatic vulnerability detection with Fix Packs.
MCP
Host-agnostic Model Context Protocol client for PostQode: hub, OAuth manager, typed Zod schemas, shared server/tool/resource types.
Sqlite Server
A secure SQLite MCP (Model Context Protocol) server for AI agents with granular permissions and comprehensive security features
Network
Comprehensive MCP (Model Context Protocol) server for AI agents to perform network testing and validation with built-in security and authentication
Core
Deterministic CLI and library that analyzes a web application repository and reports how far it is from production-ready for the kind of product it is meant to be.
Sigil
Trust scanning for MCP servers: static heuristics plus behavioral evals, with signed version-pinned trust badges. The place you check before you install an MCP server.
CLI
Verify, install, and publish MCP servers, A2A agents, and AI skills
SDK
Pre-flight MCP tool-contract drift interceptor from mcpindex.ai, the drift-monitored MCP server index. One-line wrap() over an MCP client session that HOLDs a tool call before you…
Guard
MCP runtime security proxy — intercepts and enforces security policies on MCP tool calls
Mcpguard
Security scanner for MCP servers — detect tool poisoning, malicious code patterns, and supply-chain risks before your AI agents execute them.
Sandbox
Run any MCP server inside an isolated E2B cloud sandbox instead of on your machine — one command, no code changes. Transparent stdio bridge with env allowlisting and JSONL traffic…
Guardrail
A firewall for AI agent tool calls. Wrap any MCP server in one command and block dangerous actions before they execute.
Sbd Toe
MCP server for the SbD-ToE (Security by Design — Theory of Everything) security manual — structured tools for Claude, GitHub Copilot and other MCP clients
io.github.cyanheads/first-epss-mcp-server
FIRST EPSS scores, score history, and CVE prioritization with caller-supplied severity.
SecureNow
Production security for Node.js apps: investigate live attacks, block IPs, tune detections.
vault-ask
Request and send secrets for AI agents, end-to-end encrypted and never shown in the chat.
com.mambabuilt/mcp-wcag-accessibility-audit
Audit websites for WCAG issues with axe-core, plus EAA exposure signals and compliance page checks.
ActAs
Persistent identity, email, saved accounts and scoped credentials for AI agents.
SafeWeave
Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.
io.github.reworkio/rework-proof
Verify REWORK credentials: is this delivered work genuinely the author's?
io.github.jaronskijakub/fatsecret-mcp
Unofficial, self-hosted MCP server for logging food into a FatSecret food diary through Claude.
io.github.cyanheads/canada-parliament-mcp-server
Track Canadian federal bills, MPs, House votes, and Hansard speeches.
SanAlert
Unofficial threat level from the air for a place in Poland, worked out on your own computer.
FormVault
Create and manage GDPR-compliant, EU-hosted forms from any MCP-compatible AI assistant.
Mcpvault
No description published.
Integration Suite
MCP servers + n8n gateway making business systems AI-agent-accessible with auth, HITL write gates, and audit trails
Wazuh MCP
Model Context Protocol server for Wazuh SIEM/XDR — multi-tenant, RBAC + rate-limit + audit chokepoint, OAuth 2.1, stdio + Streamable HTTP transports.
Remote MCP Server Authless
No description published.
With Oauth
No description published.
Remote MCP Webapp Python Auth Oauth
No description published.
Redmine Oauth
No description published.
Crowdstrike MCP
No description published.
Pentest Framework
No description published.
Lauterbach Trace32 MCP
No description published.
CVE 2026 21852 PoC
No description published.
Plimsoll
A sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind. Lessons, no clone needed: https://plimsollmark.github.io…
Trustweave
Review your AI agent’s security configuration before deployment. Emphasizes local, deterministic setup under Apache-2.0 license.
Agentcordon
Self-hosted credential broker for AI agents: agents ask for an API call by credential name; a policy engine decides; secrets never reach the agent.
Safeguard
🛡️ Security scanner for MCP (Model Context Protocol) servers — prompt injection, credential exposure, SSRF, tool poisoning & source-level credential-handling flaws. pip install mc…
Mycop
Scan and fix vulnerabilities in Python, JavaScript, TypeScript, Go, and Java code using AI-powered analysis with 200 built-in security rules.
Sso
OAuth 2.1 and enterprise SSO for remote MCP servers without API keys in client configs.