- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
LLM Security Skills
Agent Skills that turn your AI coding agent into an LLM security reviewer — prompt-injection testing, OWASP LLM Top 10 audits, MCP & RAG review, KVKK/PII checks. English + Turkish.
Agent Build Controls
Evidence-backed build controls for Codex and Claude Code.
Trustline
Trusted baseline + auto-rollback for AI agent config files (.claude/, AGENTS.md, .mcp.json). Detects prompt-injection / supply-chain tampering and rolls back to a trusted snapshot…
Gmail MCP Send To List Only
send to list only gmail MCP for VPS
Burp Autopilot
Drive Burp Suite autonomously from the CLI — MCP-transport client + companion Montoya extension for scans & scripted fuzzing
Dsh Shield
Security, Trust & Policy Layer for DeepSeek Harness. Don't trust your agent's tools. Verify them.
Chaos Type Zero
Autonomous Zero-Bloat Agentic AI OS | 10 Core MCP Servers • 67 Production Tools • 14 LLMs • Cryptographic Provenance Receipts (HMAC-SHA256) • 3-Tier Self-Healing Memory • Sisyphus…
Checkpoint MCP Server
Governed Model Context Protocol server for Check Point R82 firewall management — RBAC, human-in-the-loop approval, tamper-evident audit.
Paseo MCP
Manage MCP servers, OAuth, and project connections from Paseo
Callwitness
Record every tool call an AI agent makes. Block nothing. A transparent MCP proxy.
Splunk MCP Security
Splunk Security MCP Server with behavioral threat hunting capabilities.
Hermes Plugin Snyk
Hermes Agent plugin: Snyk code/dependency/container/IaC scanning via Snyk's first-party MCP server, with the snyk-security-scan skill bundled (Agent Plugins v1)
Agent Extension Auditor
Local-first security auditor for AI agent skills, plugins, MCP servers, hooks, configs, and packages.
Uipath Orchestrator MCP Python
Python MCP server for UiPath Orchestrator — typed async client with multi-auth support for managing automations through Model Context Protocol
Mcpwatchman
Independent security and quality audit for Model Context Protocol servers — static analysis, dependency CVE scanning, and evidence-linked scores for every server in the official M…
Frevo MCP
F-revoCRM(vtiger) を Model Context Protocol (MCP) 経由で Claude などのAIから操作するモジュール。OAuth 2.1 + Bearerトークン認証対応。
ReconPal
Friendly recon and configuration-audit tool for authorised security testing, with Model Context Protocol (MCP) deployment discovery
Sec Social Engineer Toolkit MCP
MCP server for SET - Social Engineering Toolkit
Gmail Oauth
Self-hostable Gmail MCP server with stdio downstream OAuth and OAuth 2.1 Streamable HTTP
Mahrem
Local PII masking for Turkish documents — MCP server and skills for AI assistants. MIT licensed.
Orknux Shell
MCP Server for operating system access, integrates seamlessly with Orknux Server
Ebay
eBay MCP — Browse + Taxonomy APIs via client_credentials OAuth
Blescope
Sniff and decode BLE GATT traffic, fingerprint device profiles, and assert on insecure pairing/characteristics in CI against a capture.
Fwxray
Diff two firmware images and surface exactly what changed: new binaries, flipped config flags, added certs, and shifted entropy regions.
BlenderVibeBridge
A security minded, Blender MCP server, enabling mechanistic vibe coding edits for Blender to enable VR Avatar and World Creation and Editing + 3d printing modeling
Yararun
Run simple YARA-style string/regex rules over a directory
Crusty Proxy
MCP proxy that keeps API keys away from your AI agents and lets you cherry-pick their tools - read ✅, delete ⛔. Built for OpenClaw, works with any MCP client.
Skill Sentry
Scan Claude MCP skills for security threats before you install. npx skill-sentry < your skills github url> free, open source, no code executed.
Docker Compose Field Guide
A hardened Docker Compose reference for homelabs — best practices, security defaults, recipes, troubleshooting, MCP server for AI agents, and a working quickstart stack.
Pod
pod — least-privilege compiler for AI agents. Compile a least-privilege policy from what your agent actually did, then prove what happened.
ServerFS MCP
Read-only MCP server that exposes selected Linux directories to ChatGPT/OpenAI agents via Secure MCP Tunnel — list, find, search, read. No write, no shell, no escape.
Farhand
Remote hands for coding agents: an MCP server that runs OpenCode / Claude Code / Codex work on a remote host over SSH, keeps credentials and the local machine closed, and audits e…
Sec Impacket MCP
MCP server for Impacket - Network protocol toolkit for penetration testing and Active Directory security
Sovereign MCP Blueprints
[MCP | GDPR | Air-Gap] Production-ready MCP server templates for regulated European enterprises. GDPR-compliant, auditable, air-gap capable. Built for Public Sector, Healthcare &…
Agentk
AgentK is a user-space security kernel for AI agents: an MCP/tool boundary with typed syscalls, taint-aware policy, capability receipts, signed evidence, and replayable flight log…
Trustdex
Trust policy layer for AI agents, MCP servers, skills, and plugins.
Correctover Scan Action
GitHub Action: scan MCP (Model Context Protocol) configuration files for credential leaks, SSRF and missing auth in CI — SARIF output, fails builds on critical findings.
Arena Bridge
A supervised local MCP bridge: a remote AI agent can read, patch and (opt-in) run commands in your local workspace, while every action stays on your machine, is approved locally a…
Agent Chaperone
Screens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a client's built-in tools.
Gauntlet
A CI linter for what your MCP server publishes: tool poisoning and prompt injection across every surface an agent sees, definition drift between runs, and schema rot.
Agent Governance
[DEPRECATED] Moved to microsoft/agent-governance-toolkit
Patchpilots MCP
PatchPilots security agent as an MCP server. Catch supply chain attacks and security anti-patterns inside Claude Code, Cursor, and any MCP-compatible IDE.
BadHost CVE 2026 48710 Exploit
Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI
Gatecheck Oss
Read-only x402 and MCP readiness checks for paid agent-tool sellers.
Prx
The agent-run work-unit CLI: capability-scoped agents whose every privileged effect is verified against its signed owner, driving a work unit through one signed pipeline to a merg…
CVE 2026 23744
PoC for CVE-2026-23744, demonstrating an unauthenticated RCE in MCPJam Inspector (<= 1.4.2).
Fluxgate
An enterprise-grade, dual-plane AI API Gateway featuring streaming reverse-proxy, algorithmic rate limiting, and an MCP-compliant Security Operations Agent.
Skill Vet
Vet AI agent skills (SKILL.md, MCP bundles, Cursor rules) before your agent runs them. Prompt injection, exfil, cred harvesting — zero deps, one file.
Mia
Managed Identity for Agents. Scoped, revocable, live-checked identity and enforcement for AI agents acting on behalf of a human.
Qwen Security Copilot
Chinese-first unified Qwen security copilot plugin for authorized red-team, blue-team, purple-team and lab workflows