- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
Infisical Env
Agent Plugin: Infisical secret refs + path sync (MCP). Shape InfisicalSecretRef.
Mcpguardlab
Verified MCP (Model Context Protocol) Security Validation Harness
Miriam Claude Protocol
MCP server for Claude
io.github.raclarke1/hiveposts
Agent library of verified fixes under permanent URLs.
epistemedeus/skillguard
y github:epistemedeus/skillguard mcp`
AurasPay Merchant MCP
Review AurasPay merchant payments and prepare payment links with scoped OAuth and human approval.
MeroFoundry
Build and publish full-stack apps from your coding agent: models, rules, pages, auth, per-app MCP.
OpenRevenue
OpenRevenue analytics MCP: projects, stats, visitors, funnels, and goals via API key or OAuth.
CedarAI Data Depot
Read-only Cedar ARMS railroad data via Cedar login for authorized carriers.
Fmind AI Security Architect Portfolio
Read-only portfolio tools, resources, and prompts for Fmind.
LexGO Jobs
Live Belgian and Luxembourg legal jobs. Unauthenticated. Send candidates to click_url.
PlateQuery MCP — US License Plate & Vehicle Information
License plate lookup for AI agents: plate messages and ALPR history via PlateQuery. OAuth 2.1.
Didit
Didit MCP — wraps the Didit v3 identity / compliance API (didit.me)
Ny Authority Debt
ny-authority-debt — New York public authority debt issuance.
MCP Security & Vulnerability Auditor
Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.
Sec 13f
SEC 13F — institutional ownership, asked security-first.
Sec Nport
SEC Form N-PORT — fund and ETF holdings, asked security-first.
Keeper Secrets Manager
Read-only multitenant Streamable HTTP bridge over Keeper Secrets Manager's MCP server.
io.github.trencinodin-stack/arcstone-mcp-sidecar
Deterministic execution boundary and reference MCP sidecar for Arcstone Security Stack
Sbomgate
Continuous SBOM diff & vulnerability watch with maintainer-change tracking
Embedaudit
Embedding / vector-store drift and poisoning audit
Phiscrub
Stream-scan logs, CSVs, and free-text notes for PHI (names, MRNs, SSNs, dates, addresses) and redact or tokenize in place.
Trackblock
Family phone stalkerware audit — MVT-class iOS/Android forensics
Promptmirror
Prompt-injection & indirect-injection scanner for any LLM context input
Dirsight
Analyze web content-discovery output (ffuf/gobuster) into ranked endpoints
Secure Python Starter
Secure-by-default Python MCP server starter (CORS allowlist, size limits, optional auth)
Auditrail
Tamper-evident audit-log aggregator with hash-chained attestation
Passgen
Stateless deterministic passphrase generator for agentic ai.
Ghaudit
Audit a GitHub org's security posture (branch rules, 2FA, secrets) from an export
Graphqlmap
Analyze GraphQL introspection for risky fields, depth, and authz gaps
Cspbuilder
Generate and audit a Content-Security-Policy from a page's resources
Dnsaudit
DNS posture & misconfiguration scanner — SPF/DKIM/DMARC/DNSSEC/CAA
Semsift
Lightweight semantic-aware SAST that runs curated taint rules over diffs only, so PRs get fast incremental SAST instead of whole-repo scan fatigue.
Sbomx
Generates a CycloneDX SBOM for mobile apps by unpacking native libs and bundled SDKs, then matches components against known-vuln and tracker/privacy databases.
Dastlite
A headless, config-as-code DAST runner that crawls an authenticated web/mobile-API surface and fires a curated active-scan ruleset, emitting deduplicated SARIF.
Envguard Secrets Vault
EnvGuard Secrets Vault - Zero-Trust .env Auditor, AES-256 Armored Vault, Transformer, MCP Server & Studio UI (design influenced by Material 3)
Tool Calling
A runnable demo using an MCP server demonstrating secure MCP best practices with a refund_order tool that moves money.
Keendreams Security
Open source memory layer for security agents. Every fact cites its evidence; only a human can confirm one. Runs in your own Cloudflare account.
Gsc Seo MCP
Secure, read-only Google Search Console MCP server with exact property allowlists and a hardened TypeScript runtime.
Hardened Terminal MCP
Security-hardened MCP server for terminal access: deny-by-default policy engine, shell=False sandboxed execution, cwd jail, secret redaction, fail-closed audit log.
Platform Case Study
An SSH-dispatch MCP platform — built, validated end-to-end, and rejected on architectural grounds. Lab 2 rebuilds the surviving principles on Kubernetes + IAM
Zeroclaw Solana Sentinel
Read-only Solana account monitoring MCP server for ZeroClaw with no wallet custody.
LLM Secret Manager
The secret manager for LLM agents: create, rotate, and use secrets they can never read. OS-native keyvault (macOS Keychain) + zero-dependency MCP server + Claude Code guard hook.…
Dockhand MCP
Security-first MCP server for DockHand
TalonHound
Self-hosted threat intelligence and IOC management platform
Claude Web Studio
Web Studio for Claude Code: tiered agents, pipeline skills, hooks, dated stack reference, agent testing framework
Jak Shield
Secure AI agent tool calls by blocking destructive actions, redacting sensitive data, and enforcing human oversight with this universal security gateway.
Sec Hydra MCP
MCP server for THC-Hydra - Password brute-forcer for authorized penetration testing
Fipsign MCP Python
MCP server for FIPSign — post-quantum signing via ML-DSA-65 (NIST FIPS 204)
Sec Audit MCP
Security audit MCP server — CASP+ technical depth, CCSP cloud controls, CISA compliance mapping