- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
Reeve
Audit AI agents, starting at the endpoint.
Mr Robot
An ADR-driven security framework for Kali — a HackTheBox co-pilot orchestrating Hat-persona Claude agents across a shared arcade and a cross-engagement memory layer.
Bumper
A macOS Control Plane that runs AI coding CLIs inside the Project boundary you choose.
Statedrift
git log for your infrastructure — tamper-evident host snapshots, diffable history, and drift rules for Linux (and your AI agent's config)
Agentbouncer
Scan what your AI agent can actually do — before it does it. Open-source MCP security scanner.
Agent Reliability Kit
Verify, harden, and ship AI-agent-assisted codebases in one command.
Thesmos Governance
AI governance CLI, GitHub Action, VS Code extension & MCP server — 1,075 rules for Claude, Cursor, Copilot, Gemini, Codex.
Agentrisk
Zero-execution preflight scanner for untrusted AI-agent and MCP artifacts
Tack
Task management for people and AI agents, with scoped OAuth access to issues, projects, and docs.
Agent Context Lens
Audit the context your coding agents actually consume — locally, with no API key.
Rulesentry
Catches hidden and invisible-unicode instructions smuggled into AI coding-agent config and skill files. Zero-config CI check.
Roelint
Turn Rules of Engagement into a policy firewall for red-team commands and AI agents
KavachOS
Auth for AI agents and humans. First-class agent identity, MCP OAuth 2.1, delegation, audit. TypeScript, edge-native, MIT.
Wardrail
Local security scanner for vibe-coded apps: stop API key leaks, Git-history secrets, and unsafe MCP or AI agent instructions before commit.
Dsh Safety
DSH 插件安检仪：对社区 DeepSeek Harness 插件做安装前安全审计（静态 AST + 动态沙箱双引擎）的 MCP 服务器
Daemonaudit
Red/blue security audit for self-hosted AI agent daemons — finds the secrets, the open doors, and the blast radius.
Gate.cat
Block irreversible AI-agent actions before they run — deterministic, fail-closed action veto for Claude Code, Codex, Cursor, and other tool-using agents.
Auth0
Auth0 — independent third-party profile of a public API surface, by API Evangelist. Auth0 (now part of Okta) is a leading identity-as-a-service platform providing authentication a…
OrchestAI
AI-powered codebase audit tool that scans for dependency vulnerabilities, deprecated API usage & generates comprehensive security reports. Uses MCP connectors for intelligent anal…
EchoForge
Zero-leakage, biometric-secured portfolio tracker: live data, local encryption, and cross-device FIDO2 authentication for finance and crypto.
Example Security Scan Elasticsearch MCP
This repository shows an example of how to spin-up a sandbox and execute a security scan using Proximity against Elasticsearch MCP.
Wazuh SIEM
Monitor Wazuh SIEM with threat intel, network device logs, custom rules, active response, and Dockerized syslog collection
Security Glossary Tw
繁體中文資安術語庫 - 台灣第一個開源、結構化、可機器讀取的資安專有名詞庫，470+ 個標準化術語
Agent Smiths
MCP-based autonomous security agent with LLM-powered analysis, multi-tool orchestration, and automated reporting
Attestload
attestload
Lucinlabs
Static analysis for AI agent tools. Reads the function body, not the tool description.
Safa
Let AI agents diagnose servers, services, and infrastructure without revealing passwords, private keys, or reusable credentials.
Autonomyproof CLI
Prove what authority your AI agent holds — and fail the PR that grants new unsafe authority. Open-source, local, deterministic.
Skill Advisories
Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.
Noscape
MCP server security scanner. Know what your AI agents are connecting to.
Hugo Public MCP
[DEPRECATED] Superseded by mcp-hugo-server-go
Hackbot
A control plane for LLM-driven offensive security work, with a human in the loop. Bounded workers, content-addressed evidence, and a four-tier gate where two tiers are not models…
RunOnMine
Local-first MCP security gateway for controlled AI access to files, terminals, browsers and desktop apps on machines you own.
Keyring
An access governance agent. Finds every grant your people and your AI agents still hold, waits for human approval, and writes a verifiable audit trail. Built on TrueForge.
Dsh MCP Security
dsh-mcp-security
Cixa
A local fortress between autonomous agents and real money.
Rotate Env
Bulk-rotate a leaked API-key env var across every .env and .mcp.json, safely. Dry-run by default, never prints the secret; agent- and CI-safe.
Openclaw Install Tools
Simplify OpenClaw setup with guided install steps, LAN file transfer, and AI-powered error diagnosis for macOS and Windows users.
Stytch
Stytch — independent third-party profile of a public API surface, by API Evangelist. Stytch is an authentication and identity infrastructure provider. Its Consumer and B2B APIs co…
Oath Playground
Model Context Protocol (MCP) authorization & OAuth security experiments
Postgres Mpc Server
Postgres MCP server for AI tooling with secure query execution, observability, and workflow integration.
API Server
MCP-API-Server
Mcpaccess Auth0 Express
Auth0 authentication middleware for Express-based Model Context Protocol (MCP) servers. Easily secure MCP tools, resources, and prompts with JWT validation, role-based access cont…
Vulnerability Demo
mcp vulnerability demo
Stratos MCP
Stratos - Azure Security Assessment MCP Server with 32 professional security tools
Security Pocs
Exploring MCP security: prompt injections, leaks, auth bypasses, OPA policies, and quirky edge cases. A playground for safe, educational, and cutting-edge model security experimen…
Mcpaccess Core
Core library for Model Context Protocol (MCP) access control. Includes essential types, interfaces, and utility functions to build consistent authentication and authorization acro…
Vpn Recon
Route reconnaissance through VPN with 5-layer security defense. Claude Code plugin, MCP server, and Docker infrastructure.
Compliance Log Schema
Protocol Buffers schema for compliance-grade audit logging. Built for SOC2, HIPAA, PCI. First-class support for AI/agent systems.
Security Auditor MCP
AI-powered security vulnerability scanning and code remediation MCP. Automated OWASP, dependency audit, and compliance gap detection.