appsec MCP servers

20 tagged appsec, measured the same way as everything else here.

Browse within: devsecops 7model-context-protocol 6ai-security 5cursor 5

hacker-bob

01

vmihalis/hacker-bob

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "hacker-bob" as configured in vmihalis/hacker-bob. Runs ../../../mcp/server.js with node.

not rated 100 2d ago A tokens not measured original Apache-2.0

codeinspectus

02

Synvoya/codeinspectus

MCP server Claude CodeCodexCursor +2

Local-first MCP security scanner and CLI for AI-generated applications. Runs locally from the codeinspectus npm package.

not rated 49 +1 22d ago A tokens not measured original Apache-2.0

mythos-agent

03

mythos-agent/mythos-agent

MCP server Claude CodeCodexCursor +2

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP. Runs locally from the mythos-agent npm package.

not rated 47 +1 5mo ago A tokens not measured original MIT

defectdojo-mcp

04

jamiesonio/defectdojo-mcp

MCP server Claude CodeCodexCursor +2

DefectDojo MCP server for integrating with DefectDojo vulnerability management system. Runs locally from the defectdojo-mcp Python package.

not rated 17 1y ago A tokens not measured original MIT

prodcheck

05

FarzamHabibi/pre-production-checklist

MCP server Claude CodeCodexCursor +2

4,372 pre-production checks: security, performance, scale, integrations, post-launch. Runs locally from the prodcheck npm package.

not rated 15 6d ago A Socket: warn tokens not measured

sabba

06

8NobleTruths/sabba

MCP server Claude CodeCodexCursor +2

SABBA: a security templates CLI and MCP server for coding agents that prove findings by running them. Runs locally from the sabba Python package.

not rated 9 3mo ago A tokens not measured original Apache-2.0

draugr

07

draugr-dev/draugr

MCP server Claude CodeCodexCursor +2

MCP server "draugr" as configured in draugr-dev/draugr. Launched with https://github.com/draugr-dev/draugr/releases/download/v0.99.1/draugr-0.99.1.mcp.

not rated 8 +1 today A tokens not measured original Apache-2.0

lachesis

08

UnboundCompute/lachesis

MCP server Claude CodeCodexCursor +2

A compiler-precise code property graph with an embedded columnar store and a navigation layer for security reasoning over source code. Runs locally from the lachesis-cpg Python package.

not rated 6 10d ago A tokens not measured AGPL-3.0

linmas

09

TanKimGwan/linmas

MCP server Claude CodeCodexCursor +2

MCP server "linmas" as configured in TanKimGwan/linmas. Runs ./mcp/server.mjs with node.

not rated 2 23d ago A tokens not measured

mcp-hardened

10

Nu1lstep/MCP-Hardened

MCP server Claude CodeCodexCursor +2

MCP server "mcp-hardened" as configured in Nu1lstep/MCP-Hardened. Runs locally from the mcp-hardened Python package.

not rated 0 2mo ago A tokens not measured original MIT

codesecurity

11

Chiehyii/code-security-skill

MCP server Claude CodeCodexCursor +2

Secure-coding knowledge base and MCP server for Claude Code, Cursor, GitHub Copilot, Windsurf, OpenAI Codex, and Antigravity. Runs locally from the codesecurity npm package.

not rated 0 4mo ago A tokens not measured

x0base/mcp-security-toolkit

MCP server Claude CodeCodexCursor +2

Atomic MCP tools for AppSec and AI Security engineers. Runs locally from the mcp-security-toolkit Python package.

not rated 0 2mo ago A tokens not measured original MIT

opzyai-pro

13

thfothijn/opzyai-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "opzyai-pro", hosted remotely at www.opzyai.com, as configured in thfothijn/opzyai-mcp.

not rated 0 3mo ago A tokens not measured original MIT

smakarim/mcp-n8n-security-scanner

MCP server Claude CodeCodexCursor +2

MCP server "mcp-n8n-security-scanner" as configured in smakarim/mcp-n8n-security-scanner. Runs locally from the mcp-n8n-security-scanner Python package.

not rated 0 3mo ago A tokens not measured original MIT

provekit-mcp

15

Th3Circle-app/provekit-mcp

MCP server Claude CodeCodexCursor +2

MCP server "provekit-mcp" as configured in Th3Circle-app/provekit-mcp. Runs locally from the provekit-mcp Python package.

not rated 0 2mo ago A tokens not measured original MIT

apex-bounty

16

nadirzhon/apex

MCP server Claude CodeCodexCursor +2

MCP server "apex-bounty" as configured in nadirzhon/apex. Runs locally from the apex-bounty Python package.

not rated 0 20d ago A tokens not measured original MIT

aribot

17

aristiun/aribot-mcp

MCP server Claude CodeCodexCursor +2

Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes. Remote server at mcp.aribot.ayurak.com.

not rated 0 3mo ago A tokens not measured original MIT

zfuzz-mcp

18

Zfuzz-dev/zfuzz-mcp

MCP server Claude CodeCodexCursor +2

Security copilot for your IDE. SAST, SCA, secrets, threat modeling — right where you code. Rust-native, zero config, runs 100% locally. Runs locally from the @zfuzz/mcp npm package.

not rated 0 3mo ago A tokens not measured original Apache-2.0