- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
Readonly Gateway
Gatehouse: a read only MCP gateway that lets Claude query a business CRM safely. Per key scopes, field masking, rate limits, a full audit log and a live attack suite.
Drift Check
Zero-execution MCP security preflight + GitHub Action. Detect mutable package references before AI agents run them. Try any public repo in the browser.
Traceguard
Deterministic capability-contract testing for MCP servers
Phantom MCP Security
PHANTOM - Kernel-Level Rogue MCP Server Detection Engine
Zfuzz CLI
The Rust-native security scanner behind every Zfuzz tool. SAST, SCA, secrets, MCP/skill audit, Sealed Vault — one $0 binary. npx @zfuzz/cli scan .
AgentSecGateway
Open-source scanner for AI agent skills, MCP servers, and coding-agent security risks.
Agent Gateway A2a
Reference architecture: governed least-privilege access for multi-agent systems — agent gateway, A2A boundary, policy-as-code, fail-closed (HLD/LLD + threat model)
Claude Code Slack
A Python Slack bot for Claude Code with session persistence, sandboxing, webhooks, scheduled tasks, MCP support, and audit logging.
Agentic Ops Hub
Agentic Ops Hub: configuration control plane for AI coding agents, agent-harness alignment, safety doctrine, and fleet operations.
Agenthive
Multi-agent attack simulation framework for AI systems. 8 attack categories, simulation engine, CLI, SARIF/JSON/HTML reporting, mcp-taxonomy integration.
Secure Flow
Enterprise secure-flow Technical Architecture focusing on Scalability and High Performance.
Sec Mimikatz MCP
MCP server for Mimikatz - Credential extraction and security assessment tool
Skill Identity Access Management
Identity governance skill — user lookup, MFA, entitlements, access requests, emergency revoke via mcp-identity
Pocketbase Security MCP
MCP server for PocketBase security: audit collection rules, preview fixes from inside any MCP client.
Guardrail Chain
Composable input/output guardrail pipeline for agent systems. Chain PII redaction, prompt injection detection, topic boundaries, and output filters with short-circuit logic and la…
Agent Identity Bridge
Portable identity for AI agents across MCP, A2A, ANP protocols. One passport. Every protocol. Full audit trail.
Adversa
LLM red-team harness — OWASP LLM Top 10 + MITRE ATLAS attack packs
Control Tower Lite
Minimal multi-agent coordination for Claude Code. 11 tools, 5 tables, full security. Python stdlib only.
Agentic IAM PoC
Proof of concept showing how OAuth 2.0, OIDC, Token Exchange (RFC 8693) and an external policy engine (OPA) compose to secure multi-agent LLM systems. Includes a LangGraph orc…
Dns Eyes
DNS 资产侦察 MCP 服务：多区域解析、CNAME 追踪、crt.sh 证书透明日志、IP 分类、C 段扫描、web 探测、主机碰撞 —— 面向 AI Agent 的攻击面测绘工具
Onprem Agent Kit
Reference kit for running an agent stack inside a customer VPC with zero egress — Helm chart, MCP gateway allowlist, deny-all NetworkPolicy. Early scaffold.
Logbook Agent
Local-first, tamper-evident audit trail for AI agents. The operator holds the only key; the agent vendor can neither read nor forge the record. Includes a byte-transparent MCP pro…
Aikido Rs
Unofficial CLI and MCP server for the Aikido Security public API, in Rust
P0 Security
P0 Security — independent third-party profile of a public API surface, by API Evangelist. P0 Security is a cloud-native Privileged Access Management (PAM) platform that governs ru…
Abuse Insight Vault
Scam-Proof Your Inbox: The 2026 Defensive Abuse-Response Toolkit for Email Extortion
M365 Secure MCP
Policy-bound Microsoft Graph MCP server for Codex, Claude Code, and other MCP clients
Changeguard
MCP ChangeGuard product and proof surface; paid release-gate kit is not included
Supabase Migrate Doctor
CLI that scans repos for legacy Supabase API keys, risk-scores each finding, and explains fixes with citations from Supabase's own docs. Includes an MCP server.
Regulated MCP Insurance Deployment
Open-source reference architecture for deterministic, auditable insurance quotation workflows using MCP, Waniwani SDK, TypeScript, and PostgreSQL.
Agenstral
Local preflight and audit tool for AI coding agents: scan repo risk, enforce tool-call policy, and record tamper-evident audit logs. Local-first, zero telemetry.
Dsh Managed Approval
Codex-inspired managed approval for DeepSeek Harness
Paladin Npm
Audit an npm package before you install it: install hooks, shipped agent instruction files, hidden characters, and provenance.
LinWay
AI-powered Static Application Security Testing (SAST) tool
Tool Poisoning Scanner
Paste an MCP server's tool definitions and statically scan them for prompt injection, hidden characters, tool shadowing, and exfiltration-shaped parameters before you install it.
Gitmoru
Recover force-pushed GitHub branches and see what changed after a breach. Reads through the API, clones nothing, sends nothing anywhere.
Threatzone MCP Server
Official Threat.Zone MCP Server
Export Pdf
A Model Context Protocol (MCP) tool to seamlessly export LLM conversation data from LM Studio into professionally styled PDF documents. Free and Open-Source for everyone!
LLM Saftey MCP
An open-source Model Context Protocol (MCP) server for local, fast, and deterministic LLM safety checks.
Qr MCP
Servidor MCP: genera un QR con estilo a partir de un link. Sin secretos, sin auth.
Siebel
MCP server for Oracle Siebel CRM integration
Phishclean MCP
MCP server for PhishClean security tools — check URLs for phishing, analyse email headers, decode JWTs, scan code for leaked secrets. Works with Claude Desktop, Claude Code, Curso…
Cyber Chef MCP
CyberChef Model Context Protocol (MCP) Server — 500+ data transformations, ciphers, hashing, JWT decoding, and payload deobfuscation for AI security & coding agents.
Blukit
Scope-gated launcher for the Claude Code CLI — records the authorized defense scope into .mcp.json (atomic, fail-closed), pins the model, and logs each launch. Blue-team mirror of…
Facturatum Grok Bot Plugin
Plugin Facturatum (MCP OAuth) para el Marketplace de Grok Bot / Cursor
Client Config Audit
Audits MCP client configs (Claude Desktop, Claude Code, Cursor, Windsurf, VS Code, goose) for risky server wiring like unpinned packages, leaked secrets, shell wrappers and unsafe…
Py Agentlint
Lint MCP configs, agent permission settings and CLAUDE.md/AGENTS.md offline: unpinned launchers, literal secrets, blanket permissions, prompt injection, hidden Unicode (Python, st…
Wp Secure MCP
A WordPress plugin exposing an MCP server over the REST API, with the security model as the point -- closes the CVE-2026-15015 OAuth-bypass shape by never having that surface at a…
agentegress
See which AI agent and MCP server talks to what on Windows, with a rule-based security verdict
Dubber
MCP server for Dubber: call recordings, compliance, groups/accounts/users, and Dub.Point.
ResellPortal
White-label reseller platform: eSIM, VPN, SMM, AI tools, CRM, hosting. Prices, clients and orders.