appsec mcp servers

25 tagged appsec, measured the same way as everything else here.

Browse within: devsecops 8

hacker-bob

01

vmihalis/hacker-bob

MCP server Claude CodeCodexCursor +2

MCP server "hacker-bob" as configured in vmihalis/hacker-bob. Runs ../../../mcp/server.js with node.

97 3d ago A tokens not measured original Apache-2.0

brutalist

02

vmihalis/hacker-bob

MCP server Claude CodeCodexCursor +2

Deploy Claude Code, Codex & Antigravity (agy) CLI agents to demolish your work before users do. Real file analysis. Brutal honesty. Per-call model pinning, conversation continuation & intelligent pagination. Runs locally from the @brutalist/mcp npm package.

97 3d ago A tokens not measured original Apache-2.0

codeinspectus

03

Synvoya/codeinspectus

MCP server Claude CodeCodexCursor +2

Local-first MCP security scanner and CLI for AI-generated applications. Runs locally from the codeinspectus npm package.

44 7d ago A tokens not measured original Apache-2.0

mythos-agent

04

mythos-agent/mythos-agent

MCP server Claude CodeCodexCursor +2

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP. Runs locally from the mythos-agent npm package.

43 3mo ago A tokens not measured original MIT

defectdojo-mcp

05

jamiesonio/defectdojo-mcp

MCP server Claude CodeCodexCursor +2

DefectDojo MCP server for integrating with DefectDojo vulnerability management system. Runs locally from the defectdojo-mcp Python package.

15 1y ago A tokens not measured original MIT

sabba

06

8NobleTruths/sabba

MCP server Claude CodeCodexCursor +2

SABBA: a security templates CLI and MCP server for coding agents that prove findings by running them. Runs locally from the sabba Python package.

12 1mo ago A tokens not measured original Apache-2.0

endor-cli-tools

07

endorlabs/ai-plugins

MCP server Claude CodeCodexCursor +2

MCP server "endor-cli-tools" as configured in endorlabs/ai-plugins. Launched with endorctl ai-tools mcp-server.

9 5d ago A tokens not measured original MIT

apiiro

08

apiiro/mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "apiiro", hosted remotely at mcp.apiiro.com, as configured in apiiro/mcp-server.

4 2mo ago A tokens not measured original Apache-2.0

guardian-agent

09

apiiro/mcp-server

MCP server Claude CodeCodexCursor +2

Apiiro Application Security Posture Management (ASPM) tools for AI coding assistants. Remote server at mcp.apiiro.com.

4 2mo ago A tokens not measured original Apache-2.0

draugr

10

draugr-dev/draugr

MCP server Claude CodeCodexCursor +2

MCP server "draugr" as configured in draugr-dev/draugr. Launched with https://github.com/draugr-dev/draugr/releases/download/v0.99.1/draugr-0.99.1.mcp.

4 yesterday A tokens not measured original Apache-2.0

lachesis

11

UnboundCompute/lachesis

MCP server Claude CodeCodexCursor +2

A compiler-precise code property graph with an embedded columnar store and a navigation layer for security reasoning over source code. Runs locally from the lachesis-cpg Python package.

3 2d ago A tokens not measured AGPL-3.0

linmas

12

TanKimGwan/linmas

MCP server Claude CodeCodexCursor +2

MCP server "linmas" as configured in TanKimGwan/linmas. Runs ./mcp/server.mjs with node.

2 1mo ago A tokens not measured

files

13

raccioly/websec-validator

MCP server Claude CodeCodexCursor +2

Gives the agent read and write access to a set of allowed directories on the local filesystem. Runs locally from the @modelcontextprotocol/server-filesystem npm package.

2 yesterday A tokens not measured original MIT

local

14

raccioly/websec-validator

MCP server Claude CodeCodexCursor +2

MCP server "local" as configured in raccioly/websec-validator. Runs ./mcp/server.js with node.

2 yesterday A tokens not measured copy · 81% MIT

mcp-hardened

15

Nu1lstep/MCP-Hardened

MCP server Claude CodeCodexCursor

MCP server "mcp-hardened" as configured in Nu1lstep/MCP-Hardened. Runs locally from the mcp-hardened Python package.

0 1mo ago A tokens not measured original MIT

codesecurity

16

Chiehyii/code-security-skill

MCP server Claude CodeCodexCursor

Secure-coding knowledge base and MCP server for Claude Code, Cursor, GitHub Copilot, Windsurf, OpenAI Codex, and Antigravity. Runs locally from the codesecurity npm package.

0 2mo ago A tokens not measured

x0base/mcp-security-toolkit

MCP server Claude CodeCodexCursor

Atomic MCP tools for AppSec and AI Security engineers. Runs locally from the mcp-security-toolkit Python package.

0 1mo ago A tokens not measured original MIT

opzyai

18

thfothijn/opzyai-mcp

MCP server Claude CodeCodexCursor +2

Local-first security check MCP server for AI coding agents — finds hardcoded secrets, exposed .env files, secrets in git history, and vulnerable dependencies in your workspace, entirely on your machine. Runs locally from the @opzyai/mcp npm package.

0 2mo ago A tokens not measured original MIT

opzyai-pro

19

thfothijn/opzyai-mcp

MCP server Claude CodeCodexCursor +2

MCP server "opzyai-pro", hosted remotely at www.opzyai.com, as configured in thfothijn/opzyai-mcp.

0 2mo ago A tokens not measured original MIT

smakarim/mcp-n8n-security-scanner

MCP server Claude CodeCodexCursor +2

MCP server "mcp-n8n-security-scanner" as configured in smakarim/mcp-n8n-security-scanner. Runs locally from the mcp-n8n-security-scanner Python package.

0 1mo ago A tokens not measured original MIT

provekit-mcp

21

Th3Circle-app/provekit-mcp

MCP server Claude CodeCodexCursor +2

MCP server "provekit-mcp" as configured in Th3Circle-app/provekit-mcp. Runs locally from the provekit-mcp Python package.

0 22d ago A tokens not measured original MIT

apex-bounty

22

nadirzhon/apex

MCP server Claude CodeCodexCursor +2

MCP server "apex-bounty" as configured in nadirzhon/apex. Runs locally from the apex-bounty Python package.

0 16d ago A tokens not measured original MIT

shipcheck

23

noureldeensalama/shipcheck

MCP server Claude CodeCodexCursor +2

MCP server "shipcheck" as configured in noureldeensalama/shipcheck. Runs ${CLAUDE_PLUGIN_ROOT}/dist/index.js with node.

0 7d ago A tokens not measured copy · 86% MIT

aribot

24

aristiun/aribot-mcp

MCP server Claude CodeCodexCursor +2

Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes. Remote server at mcp.aribot.ayurak.com.

0 1mo ago A tokens not measured original MIT