- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
Stateful Auth For MCP Servers
Implementing stateful authorization in MCP servers.
Template Express No Auth
Simple MCP server template without authentication for public APIs
Mcpfox
MCP Server Security Analysis Tool
Oauth Keycloak Template
MCP server template with Keycloak OAuth authentication
Tensorfire
Cignal's MCP Server for AI security Tools
InvokeCordon
Security scanner and runtime policy gateway for MCP servers
Mecmcp
Vendor-neutral Rust foundation for enterprise network-security MCP servers — a mechub project
F0 Pentest
Offensive-security tools, skills, and MCP servers for local AI agents — privacy-first, small-model-driven. Authorized pentest/red-team companion: 6 MCP servers (27 tools), all irr…
Sec Httpx MCP
MCP server for httpx - HTTP toolkit for web reconnaissance
MCPBouncer
The No-Nonsense Desktop Action Firewall & Live Inspector for Model Context Protocol (MCP)
Panos MCP Go
MCP server for Palo Alto Networks PAN-OS firewalls and Panorama, in Go on the pango SDK
Cred MCP
Credential management MCP server for AI agents — bridges Vaultwarden/Bitwarden with Claude Code, with secrets that never leak into LLM context.
Opensvc AI Agent
Standalone Go daemon that orchestrates LLM providers and OpenSVC MCP servers for authenticated AI-assisted cluster diagnostics.
Docsli
Git-backed document store for AI agents — a self-hosted MCP server where every agent write is a git commit with author attribution and a mandatory why
Toolcage
Per-tool-call WASM sandbox for MCP servers - every tools/call runs in a fresh wasmtime instance with only the filesystem that tool's policy grants
Akaunting MCP Laravel
Laravel MCP server for Akaunting (tuned for 3.1.21) with HTTP Basic auth
Binnacle
MCP server that lets AI agents work on a Raspberry Pi.
Huntress MCP
MCP server for the Huntress cybersecurity platform
Fedramplens
FedRAMP boundary visualizer & OSCAL-format SSP/POAM generator
Vulnfeed MCP
Dependency vulnerability monitoring MCP server — knows your lockfile, prioritizes by EPSS, recommends fix versions.
Whisper Skills
Agent Skills for the WhisperGraph MCP connector — indicator investigation, bulk triage, Cypher query authoring, and brand-protection sweeps. Claude Code plugin, portable to any SK…
MCPWarden
Offline static auditor for MCP server configs: unpinned npx/uvx, inline secrets, home-dir filesystem roots, privileged Docker, shadowed servers. SARIF output.
Hermes Security Suite
奇点造物 Genesisix-hermes — Agent安全三件套。检测(825规则/13层)+诊断(自愈)+防护(实时拦截)。
Moat
Verified Agent Capabilities Marketplace — MCP-first trust + policy + execution layer for agents
Agentsid
Identity, permissions, and audit for AI agents. The Auth0 for the agent economy.
Project R Score
A comprehensive development ecosystem featuring enterprise-grade tools, automation frameworks, and performance optimization utilities built with Bun and TypeScript.
SafeInstall
Understand software before you run it — local-first static risk analysis for unfamiliar projects.
Broude
Your AI coding assistant's security watchdog. Claude Code hooks that catch supply chain attacks, exposed secrets, and obfuscated commands.
Harmonyos Reverse Skill
HarmonyOS NEXT (ArkTS/ArkBytecode .abc) reverse-engineering toolkit — Claude Code plugin: fingerprint→unpack→strings→classes→decompile→NAPI-bridge-trace→repack. Wraps abcde + dayu…
Threatlocker MCP
MCP server for ThreatLocker — zero-trust application allowlisting, approval requests, audit logs
Tkach Security
Fail-closed MCP adapter for untrusted model output over a local Tkach runtime.
Vaultbridge
Secret management for AI coding agents. Your secrets never enter the LLM context window.
Bounty Hunter MCP
Give your AI superpowers for bug bounty hunting. MCP server that turns Claude Code into a structured bug bounty toolkit — recon, live testing, intelligence, and report generation.
Ssl Check MCP
SSL certificate checker via MCP. Issuer, expiry, SANs. Free + $19/mo.
Beaver
A MCP server generator with a natural flow. Renders one policy file into an MCP server, an HTTP tool API, a widget, and a helm release.
Sagashield
ACID transactional Saga runtime, Step-0 security guardrail, and MCP server for autonomous AI agents.
Rolecraft Vscode
VS Code extension for RoleCraft — install, manage, and discover AI agent skills with built-in security scanning. Manages skills, MCP servers, and agent profiles.
Supabase Security MCP
MCP server for Supabase security: audit, apply fixes, re-audit from any MCP client (Claude Code, Cursor, Cline).
Blekline Oss
Non-Human Identity & Runtime Enforcement for AI Agents — open-core MCP/SDK to mask, enforce, and audit every agent call.
Agentsurface
Local inventory of the AI agent surface on your machine. No account, no network, no upload.
Fsck
Integrity check for MCP server configs audits Claude, Cursor, VS Code and Windsurf agent configs for secrets, injection-prone args, tool poisoning and dangerous capability combos.
Managed MCP Doctor
Audit Claude Code MCP governance drift, catch when allowedMcpServers no longer covers managedMcpServers (2.1.259+). CLI + JSON/SARIF for CI.
Skynt
Policy gateway for MCP.
Sandbox Bash MCP
MCP server for sandboxed bash execution with session persistence
Andbo
Secure sandbox for AI coding agents — run an agent (or let your harness drive it) in an isolated, policy-controlled container with enforced network egress, secret redaction, and a…
Owl Github Intel
Evidence-led research trails, datasets, and adoption intelligence for the AI dev ecosystem
Mimir Scan
An MCP security scanner that integrates with AI coding agents like Claude Code, GitHub Copilot, Cursor, and others.
Policy Testkit
CI-first policy and security testkit for MCP servers, manifests, metadata, and source artifacts.
Buckler
Agent gatehouse for AI coding harnesses (Cursor, Claude Code, …): declarative hook policies, harness-neutral core + adapters, YAML packs (polished Git pack by default). Cosign-sig…
Agent Skill Scan Action
GitHub Action: Scan agent skill files for security vulnerabilities. 22 rules across prompt injection, capability escalation, data exfiltration, encoded payloads, and composition r…