- Conduid
- Marketplace
- #security
MCP servers tagged security
4.9K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
Secret Handoff
Let agents use temporary secrets without receiving their values in chat. Local stdio; Node 22+.
POAScan
Read-only Proof of Agent explorer: epochs, rewards, holders, swaps and agent census. No auth.
agent haven
A place for AI agents: an open forum and direct messages encrypted in the agent's own client.
Archytan Lite MCP gate
Puts an MCP tool server behind Archytan Lite: each tool call is authorized and spent before it runs.
Aurelmark
EU compliance facts with sources: TED tender deadline changes, CBAM values, EU deadlines, EUDR scope
Hardcover OAuth MCP
Read and update your Hardcover library, progress, lists, and goals. Sign in with Hardcover OAuth.
io.github.lonniev/chartremotely-mcp
ChartRemotely — put a security on a desktop chart anywhere in the world, by voice or by tool call
Portunus
Secret broker for agents: reference secrets by name; values injected only at the execution boundary.
OntoRamp Decision Intelligence
Log, evaluate, and ground AI decisions against authority context. Returns PASS, WARN, or BLOCK.
VOMO
Find and read your VOMO meeting notes and transcripts. OAuth sign-in; read-only access.
io.github.cx-anand-nandeshwar/dlp-mcp
The DLP MCP provides the compliance violation in the one drive, google drive documents.
uta-shield
Provider-side firewall for MCP servers: identity, threat-intel, rate limits, DLP, metering, audit.
UniFi
Manage a Ubiquiti UniFi network: devices, clients, WiFi, firewall and VPN. Read-only by default.
SECRET4422/guardrail-mcp
safety guardrail for AI agents featuring AST taint analysis, SARIF/SBOM generation, and policy gates.
toby7979/sealmyapp-tools
launch checklists for Lovable, Bolt, Cursor, Replit and v0. Ships with a Cursor rule and an Agent Skill.
Recall
Private, encrypted memory about you, shared by all your AI agents. Self-hosted; runs on a Pi.
JMAP mail
Read, organize, draft and send email on any JMAP server, with OAuth sign-in and zero configuration
MCP Security Sanitizer
Redacts common secrets, email addresses, and phone numbers.
MCP Security Sanitizer
Redacts common secrets, email addresses, and phone numbers.
MCP Security Sanitizer
Redacts common secrets, email addresses, and phone numbers.
Ranuk Web Accessibility & AST Security Auditor
Edge MCP Server for live WCAG 2.1 AA accessibility compliance and AST security audits.
Goalz
Manage your Goalz football manager account via hosted OAuth MCP.
iter0
Build and edit launch-ready websites for tech founders from a brief or an authorised reference.
io.github.slyaidevelop/miami44
Find Miami businesses, read their sites, and send reservation or quote requests owners confirm.
Stride — AI software delivery platform
Your team's stories, acceptance criteria, designs and docs, for coding agents. Sign in with OAuth.
Securellm MCP
voidnxlabs MCP server, development in progress.
Authmatrix
Test an access-control matrix (role x endpoint) for IDOR/authz gaps
Corsaudit
Detect permissive/misconfigured CORS from headers or a config
Opsecscan
Scan documents and file metadata for OPSEC leaks: geotags, author, GPS EXIF, unit identifiers.
Supply Chain Monitor
Monitor PyPI and npm releases for supply chain threats, diff package changes, and alert on malicious updates with LLM-based analysis
Terraform Guardrail
🔒 Enhance Terraform governance with a Python-based MCP server and CLI, ensuring faster workflows and stronger compliance for safer infrastructure deployments.
Tools
企业 MCP 工具套件：只读 SQLite + 受限文件系统两类标准 MCP Server(stdio)，含分层只读保证与路径白名单
Keel
Read-only Kubernetes access for AI agents over MCP, governed by deny-by-default policy.
Agentshortlist
Evidence you can check before you install an MCP server. A source on every line.
Servers
Production-minded MCP servers for AI agents — passive website security audit, RSS digest, and firmware recon. Pure-stdlib cores, an SSRF guard red-teamed against the full public b…
Wazuh MCP
Model Context Protocol server for Wazuh SIEM/XDR — multi-tenant, RBAC + rate-limit + audit chokepoint, OAuth 2.1, stdio + Streamable HTTP transports.
Agentperms
Least-privilege permissions for AI agents and MCP tools. Record what your agent does, auto-generate a safe policy, and block dangerous tool calls before they happen.
Config Guard
Detect security risks in MCP configuration files with a zero-dependency linter that scans for 54 vulnerability types before server start.
Witness
Security scanner for MCP servers. Found and disclosed 6 vulnerabilities; 1 fix verified upstream (PR #4226).
Guardian
MCP governance proxy - zero-dependency single binary (Go)
FireClaude
Unofficial Firefox extension + MCP server that lets Claude Code control Firefox, with a sidebar chat panel and prompt-injection safeguards.
CF MCP
Authenticated dual-mode Cloudflare MCP server with request-scoped BYOK and reviewed endpoint policy
Scan
Static security scanner for MCP servers. Checks tool poisoning, permissions, encoding, shadowing, provenance, scope and drift.
Guard
Security scanner for MCP servers and AI agents: tool poisoning, indirect prompt injection, secret leaks and excessive permissions, with SARIF output for CI.
Serverless MCP AWS
Run an MCP server on AWS Lambda + API Gateway: stateless Streamable HTTP, JWT bearer auth (RS256/ES256), per-scope tool allowlists, OAuth protected resource metadata and a CDK con…
Proton Safe MCP
Draft-only email tools for Proton Mail, human-approved—never sends without your explicit consent.
Env Doctor
MCP server that diagnoses .env files for missing vars, weak secrets, exposed API keys & format errors
Claude Guard
Prompt injection security guard for Claude Code. 5-layer defense in depth: URL blocklist, pattern scanning, LLM analysis, MCP sanitization, and rate limiting.
Keeper Security
Keeper Security for AI agents: Claude Code/Cursor plugin marketplace (keeper-admin, keeper-msp, keeper-secrets, keeper-setup) + local Commander-backed MCP server (MCPB)
Secrets Detection MCP
MCP server that detects accidentally committed secrets, API keys, tokens, and credentials using pattern matching and entropy analysis