Security MCP servers
541 listed servers in this category, out of 1,049 registry entries that match its rule. Each row shows the automated checks, the secrets asked for and an install command.
No keys needed, every check passed
Security servers 541
Now showing are unlisted. These entries didn't pass our listing filter: no source repo, a very short or duplicated description, or a publisher with 100+ servers. Same automated checks, shown as-is. How we check
| Type | Secrets | Version | Actions | ||||
|---|---|---|---|---|---|---|---|
★ 1 io.github.GuardBee/security-suite Every GuardBee MCP security tool in one server: OWASP MCP Top 10, secrets, supply chain, TLS/DNS | 7/7All passed | 67health of 100 | npmRuns locally | Noneno keys asked | 0.5.1 | ||
★ 1 io.github.baharmaulidiii/sharphy CLR Intelligence and Runtime Forensic Bridge for AI Coding Agents. | 4/4All passed | 45health of 100 | NuGetRuns locally | Noneno keys asked | 1.0.6 | ||
★ 8 io.github.gautamvarmadatla/mcpsafetywarden MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution. | 6/71 warning | 60health of 100 | PyPIRuns locally | Noneno keys asked | 1.5.8 | ||
online.patroltech/patroltech Security patrol management: missed rounds, suspicious scans, incidents and checkpoint setup. | 3/3All passed | 49health of 100 | RemoteHosted | Noneno keys asked | 0.2.0 | ||
★ 1 io.github.hu-chenyu/log-ai-compressor Local log forensics: compress logs into citable evidence with root-cause confidence tiers. | 7/7All passed | 73health of 100 | PyPIRuns locally | Noneno keys asked | 2.13.0 | ||
ai.greyridgesignals/tech-risk Free MCP security scan: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + trust badge | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 0.1.5 | ||
io.github.startekenterprises-ai/agent-commons Read-only MCP access to The Agent Commons: shared security findings for AI agents and their tools. | 6/6All passed | 48health of 100 | MCPBRuns locally | Noneno keys asked | 1.0.0 | ||
★ 16 ai.skilltotal/skilltotal Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally. | 5/71 failed | 40health of 100 | PyPIRuns locally | Noneno keys asked | 0.85.0 | ||
★ 1 io.github.maxwellsantoro/dotrepo Trust-aware repository facts for agents: build, test, docs, license, and security, no scraping. | 6/6All passed | 62health of 100 | MCPBRuns locally | Noneno keys asked | 2.0.0-rc.1 | ||
io.github.whois-api-llc/mcp-whoisxmlapi 34 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API. | 5/5All passed | 61health of 100 | npmLocal or hosted | 1secret asked | 1.9.2 | ||
io.github.Misterio070/scanpay Deterministic code security scan + tx preflight, paid in USDC via x402. | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 1.2.0 | ||
★ 2 ai.intodns/scanner DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools. | 8/8All passed | 64health of 100 | npmLocal or hosted | Noneno keys asked | 1.11.3 | ||
io.github.eddyflores100-lang/uta-shield Provider-side MCP firewall: identity, threat-intel, barter, rate limits, DLP, audit. | 7/7All passed | 61health of 100 | npmRuns locally | Noneno keys asked | 0.3.0 | ||
io.github.eddyflores100-lang/uta-shield-remote Remote MCP firewall with barter protocol: identity, threat-intel, IoC lookup. | 3/3All passed | 50health of 100 | RemoteHosted | Noneno keys asked | 0.3.0 | ||
★ 1k io.github.hashgraph-online/hol-guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. | 6/71 failed | 40health of 100 | PyPIRuns locally | Noneno keys asked | 3.58.0 | ||
★ 8 dev.draugr/draugr Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk. | 4/4All passed | 68health of 100 | MCPBRuns locally | Noneno keys asked | 0.157.0 | ||
★ 64 io.github.Servosity/acronis-mcp The first real CLI for the Acronis Cyber Protect Cloud platform - every tenant, agent, and usage | 4/51 warning | 63health of 100 | MCPBRuns locally | 4secrets asked | 0.1.10 | ||
★ 4 io.github.IPGeolocation/ipgeolocation-io-mcp IP geolocation, security, ASN, abuse, time zones, astronomy, and user-agent parsing over stdio. | 7/7All passed | 56health of 100 | npmRuns locally | 1secret asked | 2.0.2 | ||
★ 7 io.github.Gowthaman90/mcp-bastion Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail. | 6/71 warning | 53health of 100 | npmRuns locally | Noneno keys asked | 1.4.0 | ||
ai.topy/cso Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes. | 8/8All passed | 52health of 100 | npmLocal or hosted | 1secret asked | 0.1.0 | ||
★ 1 one.seclens/seclens Assess any domain's email security across SPF, DMARC, DKIM, MTA-STS, DNSSEC, DANE, and TLS-RPT. | 4/4All passed | 45health of 100 | RemoteHosted | Noneno keys asked | 1.0.0 | ||
io.github.MaverickHQ/valvur Offline security scanning for AI-generated code: seven open-source scanners in one MCP server. | 7/7All passed | 53health of 100 | PyPIRuns locally | Noneno keys asked | 1.6.0 | ||
★ 9 io.github.Albasha0x0/corvus Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch. | 4/4All passed | 50health of 100 | NuGetRuns locally | Noneno keys asked | 2.7.0 | ||
★ 6 io.github.goklab/guardvibe Deterministic security layer your AI can't be. 624 rules, 39 tools, CLI + doctor + host audit. | 6/71 warning | 55health of 100 | npmRuns locally | Noneno keys asked | 3.66.0 | ||
★ 90k app.worldmonitor/mcp Real-time global intelligence across conflict, markets, energy, trade, shipping and cyber. 97 tools. | 4/4All passed | 87health of 100 | RemoteHosted | Noneno keys asked | 1.46.0 | ||
★ 120 com.githits/githits Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples. | 8/8All passed | 78health of 100 | npmLocal or hosted | Noneno keys asked | 0.36.1 | ||
★ 1 io.github.GuardBee/security-proxy MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log | 7/7All passed | 67health of 100 | npmRuns locally | Noneno keys asked | 1.31.0 | ||
★ 1 io.github.GuardBee/owasp-scan Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF | 7/7All passed | 66health of 100 | npmRuns locally | Noneno keys asked | 0.4.0 | ||
io.github.lambdasec/frame-mcp MCP server for the Frame security scanner: scan, verify, fix, exploit, packs and separation logic. | 7/7All passed | 55health of 100 | PyPIRuns locally | 1secret asked | 0.1.0 | ||
★ 401 io.github.smart-mcp-proxy/mcpproxy-go Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings | 2/2All passed | 71health of 100 | RemoteRuns locally | Noneno keys asked | 0.72.0 | ||
★ 2 io.github.kubestellar/kubestellar-mcp AI-powered Kubernetes diagnostics, RBAC analysis, security checks, and app deployment via MCP | 4/4All passed | 64health of 100 | DockerRuns locally | Noneno keys asked | 0.9.21-nightly.20261027 | ||
★ 100 io.github.cyberlife-coder/velesdb-memory Offline agentic memory: remember/recall/relate/forget/why over a fused vector+graph+columnar engine | 6/6All passed | 68health of 100 | MCPBRuns locally | Noneno keys asked | 0.15.0 | ||
io.github.dfkunstler/mcp-server-for-oscal AI agent tools for Open Security Controls Assessment Language (OSCAL) | 7/7All passed | 64health of 100 | PyPIRuns locally | Noneno keys asked | 0.7.1 | ||
★ 1 io.github.mechubsec/rustsdcmcp Juniper Security Director Cloud MCP server: scoped, audited change control. Rust. | 4/4All passed | 63health of 100 | DockerRuns locally | Noneno keys asked | 0.5.0 | ||
io.github.JcJamet/ia-qa-security Agent security: prompt injection, PII & secret scans, TLS/header/CORS audits, MCP checks. Free. | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 1.0.1 | ||
★ 15 io.github.prodlint/prodlint Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance. | 7/7All passed | 67health of 100 | npmRuns locally | Noneno keys asked | 0.10.4 | ||
com.soflution/depsonar Dependency audits, live CVE scans, migration detection and stack health across 9 languages. | 5/61 warning | 39health of 100 | MCPBRuns locally | Noneno keys asked | 4.0.0 | ||
★ 1 io.github.altrsoftware/altr-mcp-server MCP server for ALTR data security: databases, tags, policies, classification, access, audits | 7/7All passed | 62health of 100 | PyPIRuns locally | 2secrets asked | 0.8.0 | ||
★ 3 io.github.getmcpm/cli MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls. | 6/71 warning | 60health of 100 | npmRuns locally | Noneno keys asked | 0.47.7 | ||
★ 180 io.github.MustacheCase/zanadir Find what a repository's CI is missing, and which security checks cannot fail the build. | 4/4All passed | 57health of 100 | DockerRuns locally | 1secret asked | 0.23.0 | ||
io.github.4DA-Systems/4da-mcp-server Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans. | 7/7All passed | 53health of 100 | npmRuns locally | Noneno keys asked | 6.2.5 | ||
★ 3 io.github.DevHusnainAi/zerodom The deterministic attack-surface perception layer for AI security agents | 7/7All passed | 67health of 100 | PyPIRuns locally | Noneno keys asked | 0.1.3 | ||
io.github.rara-cyber/reelscribe Transcribe social videos, selected comments, URL batches and Instagram channels. | 3/3All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 2.3.0 | ||
io.github.CloudCorpRecords/tracewatch Observability, tracking, and root-cause for Security Wave scans and findings. | 7/7All passed | 54health of 100 | npmRuns locally | Noneno keys asked | 0.2.2 | ||
io.github.shigechika/gwsadm-mcp MCP server for Google Workspace security auditing — login audit, external sharing, daily brief | 7/7All passed | 51health of 100 | PyPIRuns locally | Noneno keys asked | 0.23.1 | ||
io.github.CloudCorpRecords/prodforge Connects MCP servers, packages, security checks, and release gates in one repo. | 7/7All passed | 56health of 100 | npmRuns locally | Noneno keys asked | 0.5.0 | ||
★ 9 com.blackveilsecurity/dns DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits. | 4/4All passed | 69health of 100 | RemoteHosted | Noneno keys asked | 3.103.3 | ||
io.github.som2026-commits/kestrova Solidity smart contract vulnerability scan (Slither) for AI agents. Free preview; paid full report. | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 0.3.0 | ||
★ 5 io.github.twayst0/fsv Scan your own website for vulnerabilities: DNS takeover, compromised CDNs, debug mode and more. | 6/71 warning | 60health of 100 | PyPIRuns locally | Noneno keys asked | 2.2.1 | ||
★ 8 io.echelongraph/echelongraph-mcp CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless. | 8/8All passed | 59health of 100 | npmLocal or hosted | Noneno keys asked | 3.1.2 |
Showing 1 to 50 of 541