- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
Yaragen
Generate candidate YARA rules from sample files/strings
Fw Automation
Automate Cisco Secure Firewall (FMC-managed FTD) with Python, Ansible, and Terraform, plus three MCP servers that let an AI agent search policy, trace object usage, and propose ch…
Binhunt
Game/desktop binary integrity scanner that fingerprints executables, detects common packers/obfuscators, and diffs against a known-good baseline to catch tampering.
Security Audit MCP Server Showcase
Showcase site for a private MCP server that audits codebases for secrets, CVEs, SAST issues, and SBOM; includes 4 interactive HTML demos.
Kubectl Ro
Read-only Kubernetes access for AI agents and humans. kubectl wrapper + MCP server that blocks mutations and redacts secrets.
Fhirlint
Validate FHIR R4/R5 resources and bundles against profiles (US Core, etc.) with precise, line-level error reporting.
Obscan
Conformance and security linter for Open Banking / FAPI APIs: validates OAuth flows, consent scopes, and PSD2 endpoints against the spec.
Semgrep Scanner
Run Semgrep static analysis from an AI agent. OWASP top 10, secrets detection, custom rule packs. Baseline scanning to focus only on newly-introduced findings. Built for productio…
Sanctscan
Screens counterparties and transactions against OFAC/EU/UN sanctions lists with fuzzy name matching and explainable hit scoring.
Probesite
Synthetic uptime and Playwright checks exported to Prometheus
Dripcheck
Lint email sequences and drip campaigns for deliverability: SPF/DKIM/DMARC, link health, unsubscribe presence, and CAN-SPAM/GDPR compliance.
Apkpeek
One-command static triage of Android APK/AAB binaries: surfaces hardcoded secrets, exported components, dangerous permissions, and insecure manifest flags as a single SARIF report.
Honeyurl
Generate canary URLs/tokens + a matcher for trip events
Ssrfind
Find SSRF-prone sinks and unvalidated URL fetches in code
Verdict Evaluator
Public MCP Verdict evaluator for isolated MCP server evidence generation
Memtriage
Triage memory-dump artifacts: strings, IOCs, suspicious processes from a dump export
Gti Lookup
Threat context from Google Threat Intelligence (GTI Standard feature set) - CLI + local MCP server
Saferico CLI
Solidity security scanning with 201 detectors that run on your machine. CLI + local MCP server.
Opzyai MCP
Local-first security check MCP server for AI coding agents — hardcoded secrets, .env exposure, git-history leaks, dependency CVEs. Runs entirely on your machine.
Trust Demo
Intentionally-vulnerable MCP server — a live demo target for the MCP Trust scanner (GitHub Action). Do not run.
Sec Seclists MCP
MCP server for SecLists - Security wordlists
Sec Rubeus MCP
MCP server for Rubeus - Kerberos abuse toolkit for security testing
Neon Guard MCP
Local-first MCP security proxy for Neon Postgres: gives AI agents scoped branch/test access while air-gapping your master key and production data.
Yara Detection Harness
Detection-as-code for generated text & code: hand-written YARA rules, a paired synthetic corpus, and a CI harness gating on recall + false-positive rate — plus a VirusTotal enrich…
Sec Chisel MCP
MCP server for Chisel - TCP/UDP tunneling over HTTP/WebSocket
Vulny Agent Scan
MCP skill: run real vulnerability scans (nmap + nuclei + CVE matching) on domains and IPs you own, straight from your AI agent. Pay-per-scan.
Best Practices
Security-first MCP portfolio tracking spec revision 2026-07-28: a policy-enforcing gateway, an Ed25519-signed registry, STRIDE threat models mapped to the OWASP MCP Top 10, and a…
Strike
Active adversarial security scanner for Model Context Protocol (MCP) servers: runtime attacks, LLM-as-judge, and an adaptive agent.
Mcpsnare
Active security scanner that pentests MCP (Model Context Protocol) servers. Triggers and out-of-band-confirms real vulns (RCE, SSRF, path traversal, auth bypass) with graded confi…
Sandboxmcp
Hardened polyglot code sandbox for AI agents — isolated execution with seccomp/namespaces. Python lib · CLI · MCP server · FastAPI.
Gateward
Security gateway for MCP traffic. 5 built-in rules block prompt injection, credential leakage, path traversal, cross-repo exfiltration, and destructive commands. One pip install,…
Offsec Orchestrator
Governed agentic orchestration for reverse engineering and authorized pentesting — real MCP tool integration, scope/ROE gate, default-deny + human approval, tamper-evident audit.
Aigently Catalog
Securely feeds summarized expert security rules into your coding assistance Claude Code, Cursor, etc — zero config, no API key.
Kafkamcp
Secure, vendor-neutral MCP gateway for operating Apache Kafka with AI agents
Sec Hashcat MCP
MCP server for hashcat - GPU password recovery
Sec Wfuzz MCP
MCP server for wfuzz - Web fuzzer for security testing
Sec Ffuf MCP
MCP server for ffuf - Fast web fuzzer
Opensyber MCP Watch
MCP rug-pull detection. SHA-256 fingerprints per tool, per server, across days.
Chatgpt Local Git MCP
一个安全的 MCP 桥接服务，让 ChatGPT 读取、修改、测试并本地提交 Git 仓库代码，但最终 git push 由用户手动控制。
Defensive MCP Audit
Defensive security audit tool for AI Agent and MCP (Model Context Protocol) environments. Detects risky localhost exposure, weak bindings, and confused-deputy risks. Lightweight,…
Sec Smbmap MCP
MCP server for smbmap - SMB share enumeration
Sec Beef Xss MCP
MCP server for BeEF - Browser Exploitation Framework
Bansho
An MCP security gateway. Adds auth, rate limits, and audit logging between your AI client and any MCP server.
Mcpsafe
The first MCP security framework that tests a live running server, not just static config. Runtime adversarial testing — prompt injection, fuzzing, load & concurrency, latency, au…
Verified Approval
Reference implementation of the verified-approval extension for MCP — per-call passkey-verified human approval for sensitive tool calls.
Postgres Doctor
Read-only Postgres operational diagnostics over MCP
Doctor Cloud
Hosted health-check + security audit for MCP servers (web version of mcp-doctor)
Permissioned MCP Server
MCP reference server with least-privilege tools, confirmations, and safe audit logs
Pqc Migration MCP
MCP server giving AI agents post-quantum migration facts: sizing, fragmentation, failure taxonomy, benchmark scoring.
Safe MCP Suite
Two hardened MCP servers - a terminal executor and a file organizer - on one shared deny-by-default safety core, with a fail-closed audit trail and undoable file moves.