- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
Lawang Onboard
Permission-aware onboarding MCP server: answers about a codebase, filtered by the caller's role.
ZTL Judge
Zero-trust logic judge: your AI writes a claim as a ZFL table, the ZTL core judges it.
Sooveryn
AI personas with a lasting, encrypted memory per project, for Claude Code. Hosted in France.
ApproveKit
Audit apps against App Store, Google Play and Google OAuth review rules; get the required docs.
CUBBY HOUSE — AU Mattress Commerce for Agents
AI-matched AU mattress catalogue: 16 retailers, live AUD prices, agent-attributed leads. No auth.
Customermates
Native MCP access to CRM contacts, organizations, deals and tasks with user permissions.
io.github.geekmarine/mcp-ssl-inspector
Audits TLS/SSL handshake latency, HSTS headers, and HTTPS availability on the edge.
Unchore Defend
Grade a site's security headers with fixes and a badge; read logs or code for the defender.
com.getbillwatchdog/billwatch
Current US streaming and VPN plan prices for AI agents: deals, filters and price history.
501c3.HELP nonprofit compliance
Nonprofit compliance rules for all 50 US states, each with its official citation and status
Agent Skill & Config Security Audit
Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.
LedgerIQ 1099 & W-2 Compliance Checker
1099/W-2 rules: is a form required, deadlines, backup withholding, late-filing penalties.
PII & Secret Redactor
Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.
Agent Manifest Protocol (AMP)
Fetch, validate, and permission-check Agent Manifest Protocol (AMP) manifests for API discovery.
com.thetempleofdoom.draco/draco
Coding & security oracle grounded in 1855 real books. Cited answers via MCP.
Qeemah Accounting & ZATCA e-Invoicing
Saudi ZATCA e-invoicing Phase 2 compliance audit, invoice drafting, and CFO VAT analytics.
net.tipmaster/consensus
Crowd football predictions from TipMaster players, per match. Read-only, no auth, no odds.
Prefetchparse
Surface program-execution evidence from Windows Prefetch exports
Hallumark
LLM hallucination & grounding auditor for RAG systems
Cipherdetect
Detect & crack classical ciphers (caesar/vigenere/xor) by scoring
Ttphunt
Hunt MITRE ATT&CK techniques across logs with a rule pack
Shell Guard
MCP server for safe shell access. Every command validated against per-agent permission rules before execution. Powered by AgentsID.
Apiseclint
Lint OpenAPI specs for security gaps (authz, rate-limit, data exposure)
Iamlint
Lint cloud IAM policies (AWS/GCP/Azure JSON) for least-privilege violations
Secretscan MCP Server
MCP server that scans a diff/file/snippet for leaked secrets (AWS, GitHub, Slack, Stripe, private keys, JWTs, entropy-gated generic) before an agent commits or shares it. Local-on…
Protonmail AI
Security-first Proton Mail automation for AI agents — direct QR session-fork auth, local-first Rust CLI + MCP, least-privilege tools, and auditable sessions.
Aicaudit
aicaudit — AI-powered code audit for Python: taint-path static analysis + evidence-grounded AI verdicts. Every result ships with a machine-checkable source-to-sink path.
Voraxx MCP Server
Stdlib-only Python MCP server with three security tools: CVE lookup via OSV.dev, host exposure via Shodan InternetDB, and orchestration of a locally installed Nuclei scanner. No e…
Shpbl Scan Coverage Autopilot
A capacity-safe next scan schedule that names what it could not fit, and why.
Prompt Shield Security MCP
Deterministic prompt injection classification, secret entropy detection, PII redacting, and synthetic dataset bias auditing.
Shpbl Remediation Flight Recorder
One auditable remediation transaction: frozen pre-state, policy gate, execution receipts, verified post-state, rollback on failure.
Pancakes
Static-analysis engine for automation blueprints, with a language-neutral IR, security and delivery rules, Make.com translation, and an MCP interface.
Devguard MCP
A fast workspace auditor, safe artifact cleaner (.venv, node_modules), and security secret scanner exposed via Model Context Protocol (MCP) and Typer CLI.
Tool Schema Fuzzer
Generate adversarial test cases from an MCP tools/list: valid-minimal, missing-required, wrong-type, extra-field, boundary, enum-violation. Each carries an expected accept/reject…
Sec Wpscan MCP
MCP server for WPScan - WordPress security scanner
Sec Recon Ng MCP
MCP server for recon-ng - OSINT framework
Sec Responder MCP
MCP server for Responder - LLMNR/NBT-NS poisoner for authorized penetration testing
Sec John The Ripper MCP
MCP server for John the Ripper - Password cracking and security auditing via SSH to Kali Linux
Grade Neq Gate
GRADE ≠ GATE — MCP inventory grade is not a runtime gate. Synthetic demo for sentinelagent-guard.
Geo Explorer Trustpath AI
Protótipo educacional de capacitação responsável em IA com dados sintéticos, testes automatizados e MCP read-only.
Acr Meta MCP
High-performance forward proxy & governance control plane aggregating third-party MCP servers with Auth Vault.
Audit Toolkit
Audit MCP servers as a client would: leak scanner, stdio health probe, and the two bug classes that silently break MCP tools on Linux
Vulnbench
Benchmark of static analyzers on real, publicly disclosed vulnerabilities in open-source MCP servers: vulnerable/fixed commit pairs, Docker harness, SARIF scoring
Git Signing MCP
Self-hosted MCP server for creating DCO-compliant, cryptographically signed Git commits with OpenPGP/SSH signing, GitHub verification, OpenBao secrets and OpenAI Secure MCP Tunnel.
Unified MCP Control Plane
Policy-gated MCP control plane with OAuth 2.1, provider adapters, risk classification, credential redaction, and Node/Cloudflare runtimes.
D Eye
FOSS-first, local-first capability and evidence layer for AI agents. Local MCP server and CLI for safe, cited web access: SSRF-hardened fetch, provenance-tracked research packets,…
Odavi
Architecture case study: self-hosted email platform with a credential boundary that keeps secrets out of an AI agent's context. Docs only, source is private.
Constellation MCP
Constellation MCP — one MCP server, sixteen tools, three products. Xavani Agent drives Gavaza (POPIA), Nyarhi (knowledge graph) and Mhangani (web audit) as native tools.
Pmtechdev MCP Plugins
Local-first, safety-focused MCP servers, shared tooling, and a public Codex plugin marketplace.
Readonly SQL MCP
A read-only Model Context Protocol server for safely querying SQLite/PostgreSQL databases with an LLM.