- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
ext-auth
Extensions to authorization
Nothumanallowed
Security-first platform for AI agents. 38 specialized agents, 15 AI-powered extensions, zero-knowledge multi-agent orchestration. SENTINEL WAF, Ed25519 auth, 2.6M grounding facts.
DocSentinel
MCP server for AI agent for cybersecurity: automate assessment of documents, questionnaires & reports. Multi-format parsing, RAG knowledge base,Risks, compliance gaps, remediation…
Claudit Sec
Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connectors, scheduled tasks, and permissions.
Bugsy
Automatic security vulnerability remediation for your code.
ajitpratap0/GoSQLX
no install needed. 1.25M+ ops/sec, 6 SQL dialects.
arthurpanhku/Arthor-Agent
...
Trust Kit
Deterministic CI scanner and surface-risk scoring for MCP (Model Context Protocol) servers.
OffensiveSET
Offensive Security Dataset Generator — MCP server for generating high-quality pentesting conversation datasets for LLM fine-tuning
Cycode CLI
Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning
AI Plugin Scanner
Security and best-practices scanner for AI Plugins, covering Codex, Claude, Opencode, Gemini & more. Scores trust for plugins 0-100.
Nyxstrike
AI Powered penetration testing Platform for offensive security research
Cfuzz
Command line fuzzer and bruteforcer 🌪 wfuzz for command
Bountyhunter
Autonomous bug bounty hunting framework for Claude Code — 7-phase FSM, parallel hunter agents, 3-round adversarial verification, MCP control plane. Speed-tunable harness modes (fa…
Halo Record
Tamper-evident runtime records for AI agents. Hash-chained, dependency-free, verifiable by anyone.
Throughline
Multi-engine SAST scanner that traces tainted data source-to-sink across JS/TS, Python, Go, PHP and Ruby — with AI triage over MCP.
Hacker Bob
A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/…
Kali Security MCP
连接kali linux与ClaudeCode等主流大模型进行全面CTF挑战及渗透测试的MCP，附带192个kali渗透工具
Gori
A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.
Openpawz
OpenPawz is a native, offline-first desktop AI platform (Tauri v2 + Rust) that lets you run local models or connect to any compatible provider. It gives you private-by-default age…
0sec
[RESEARCH PREVIEW] The open & extensible cybersecurity harness - by the Swiss Applied AI Cybersecurity Research Lab.
SecuritySkills
Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Codex CLI, OpenClaw, Kiro.
Vulnometry
Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS, CISA KEV, OSV and GHSA.
Lightning Agent Tools
AI agent toolkit (skills+MCP server) for Lightning Network payments. Run nodes, pay for APIs (L402), host paid endpoints, and manage credentials.
Trudi
Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response
Auth Step By Step
Step by step walkthrough of an MCP Authorization implementation
Good Egg
Trust scoring for GitHub PR authors based on contribution history.
XposedOrNot API
Open-source API to check if an email has been exposed in a data breach and monitor breaches across your verified domains. Real-time alerts and breach analytics protect your online…
Flywheel Connectors
Mesh-native protocol and Rust connector library for secure AI agent integration with external services: Twitter, Linear, Stripe, Discord, Gmail, GitHub, and more
Vibescan
Security scanner for AI-generated ("vibe-coded") code. Runs SAST, DAST, and sandboxed exploit simulation across 15+ languages using 30+ tools. Catches what LLMs introduce bef…
Bughunter AI
Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault, LLM security track. Type 'hunt target.…
Key Amnesia
Let your AI agent use your passwords and API keys - without ever letting it see them
Correctless
The agent that writes the code never reviews it. Spec-driven TDD with agent separation, adversarial QA, and dynamic rigor for Claude Code.
AutoWIFI
Wireless penetration testing framework. Automates WPA/WPA2/WEP/WPS attacks - recon to exploitation in one command. aircrack-ng + hashcat + PMKID.
Authmcp
Simple MCP servers that demonstrates the MCP OAuth flow
Vex MCP
An MCP server to explore Red Hat VEX and CSAF advisory data
Uno Oauth MCP
Quickly integrate OAuth authentication from mcpmarket.cn into your MCP Server.
G0
The control layer for AI agents. 1,200+ rules, 12 domains, 10 frameworks, 4,000+ adversarial payloads. Discover. Assess. Test. Monitor. Comply.
Shuffle Mcps
Turn 3,000+ SaaS tools into MCP servers your agents can use. Headless React component for search, selection, and OAuth handoff.
Agentic Auth
Agentic Auth: untrusted LLM agent auth boundary (MCP gateway + daemon), approvals, budgets, capability tokens, receipts
scan
Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.
Wsl Exec
A secure Model Context Protocol (MCP) server for executing commands in Windows Subsystem for Linux (WSL) with built-in safety features and validation
Secretless AI
One command to keep secrets out of AI. Works with Claude Code, Cursor, Copilot, Windsurf, and any AI coding tool.
Fetch Cwe List
MCP (Model Context Protocol) server exposing fetch-cwe-list tools for LLM agents. Experimental/alpha — APIs may change.
Eslint Plugin MCP SDK Security
ESLint plugin for Model Context Protocol (MCP) SDK security — catches tools registered without an input schema, handlers reading arguments the schema never declared, model-visible…
Uno MCP Stdio
Uno MCP Stdio Client - Local stdio proxy for Uno MCP Gateway with OAuth authentication
Obsidian Vault Sync
No description published.
Autopentest Go
No description published.
Farenhytee/database-sentinel
Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys and risky functions, and returns a scor…
Keycloak MCP Server
An MCP server for Keycloak, designed to work with Keycloak for identity and access management, covering, Users, Realms, Clients, Roles, Groups, IDPs, Authentication. Searching ke…