cybersecurity MCP servers

openosint

01

MCP server Claude CodeCodexCursor +2

AI-powered OSINT agent, MCP server, and CLI. Interactive REPL + 19 tools. Anthropic Claude or local Ollama. For authorized security research use only. Runs locally from the openosint Python package. Needs 5 environment variables to run.

not rated 1.8k +27 yesterday A Socket: warn tokens not measured original MIT

cve-mcp

02

mukul975/cve-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "cve-mcp" as configured in mukul975/cve-mcp-server. Runs cve_mcp.server with python. Needs 4 environment variables to run.

not rated 1.6k +2 15d ago A tokens not measured original Apache-2.0

mythos-agent

03

mythos-agent/mythos-agent

MCP server Claude CodeCodexCursor +2

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP. Runs locally from the mythos-agent npm package.

not rated 45 +1 4mo ago A tokens not measured original MIT

rami-kali-docker-local

04

RamiBotAI/ramibot

MCP server Claude CodeCodexCursor +2

MCP server "rami-kali-docker-local" as configured in RamiBotAI/ramibot. Runs in Docker (/opt/rami-kali/mcp_server.py).

not rated 29 +1 6mo ago A tokens not measured original MIT

cyberchef-mcp

05

doublegate/CyberChef-MCP

MCP server Claude CodeCodexCursor +2

MCP server "cyberchef-mcp" as configured in doublegate/CyberChef-MCP. Runs in Docker (ghcr.io/doublegate/cyberchef-mcp_v4:4.2.0).

not rated 26 +3 5d ago A tokens not measured GPL-3.0

operant-mcp

06

operantlabs/operant-mcp

MCP server Claude CodeCodexCursor +2

Security testing MCP server for penetration testing, forensics, and vulnerability assessment. Runs locally from the operant-mcp npm package.

not rated 25 6mo ago A tokens not measured original MIT

mcpstrike

07

ente0/mcpstrike

MCP server Claude CodeCodexCursor +2

MCP server "mcpstrike" as configured in ente0/mcpstrike. Runs locally from the mcpstrike Python package.

not rated 14 1mo ago A tokens not measured GPL-3.0

mcp

08

vulncheck-oss/mcp

MCP server Claude CodeCodexCursor +2

MCP server "mcp" as configured in vulncheck-oss/mcp. Runs in Docker (ghcr.io/vulncheck-oss/mcp:0.2.2).

not rated 12 +2 changed 24d ago A tokens not measured original MIT

huntable-cti-studio

09

dfirtnt/Huntable-CTI-Studio

MCP server Claude CodeCodexCursor +2

MCP server "huntable-cti-studio" as configured in dfirtnt/Huntable-CTI-Studio. Launched with bash scripts/run_mcp_server.sh.

not rated 10 +1 yesterday A tokens not measured original MIT

mcp-simple-tool

10

firetix/vulnerability-intelligence-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "mcp-simple-tool" as configured in firetix/vulnerability-intelligence-mcp-server. Runs locally from the mcp-simple-tool Python package.

not rated 9 1y ago A tokens not measured copy · 100% MIT

blackveil-dns

11

MadaBurns/bv-mcp

MCP server Claude CodeCodexCursor +2

MCP server "blackveil-dns", hosted remotely at dns-mcp.blackveilsecurity.com, as configured in MadaBurns/bv-mcp.

not rated 9 yesterday A tokens not measured

mcp-threatintel

12

aplaceforallmystuff/mcp-threatintel

MCP server Claude CodeCodexCursor +2

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker. Runs locally from the mcp-threatintel-server npm package. Needs 4 environment variables to run.

not rated 9 +1 2mo ago A tokens not measured original MIT

nist-nvd-mcp-server

13

Cyreslab-AI/nist-nvd-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "nist-nvd-mcp-server" as configured in Cyreslab-AI/nist-nvd-mcp-server. Runs locally from the @cyreslab/nist-nvd-mcp-server npm package.

not rated 8 26d ago A tokens not measured original MIT

mallorymcp

14

malloryai/mallorymcp

MCP server Claude CodeCodexCursor +2

Deprecated — use the Mallory Remote MCP service: https://docs.mallory.ai/use/agent/mcp. Runs locally from the mallorymcp Python package.

not rated 8 3mo ago A tokens not measured original Apache-2.0 archived

jobverify

15

yessGlory17/job-verify

MCP server Claude CodeCodexCursor +2

Agentic MCP server for detecting fake LinkedIn recruiter / job-offer scams using free OSINT sources. Runs locally from the jobverify-mcp Python package.

not rated 8 3mo ago A tokens not measured original MIT

mcp-bastion

16

vaquarkhan/MCP-Bastion

MCP server Claude CodeCodexCursor +2

Security middleware for MCP servers protecting LLM agents from prompt injection, resource exhaustion, and PII leakage. Runs locally from the mcp-bastion-python Python package.

not rated 7 yesterday A tokens not measured

fingerprint-mcp

17

badchars/fingerprint-mcp

MCP server Claude CodeCodexCursor +2

Universal digital fingerprinting MCP server — 100 tools for TCP/TLS/SSH/HTTP/DNS/WAF/IoT/SMTP/SMB fingerprinting, infrastructure topology, C2 detection, OSINT enrichment. Runs locally from the fingerprint-mcp npm package.

not rated 6 +1 23d ago A tokens not measured AGPL-3.0

rapid7-mcp

18

SecuritahGuy/rapid7-mcp

MCP server Claude CodeCodexCursor +2

MCP server "rapid7-mcp", hosted remotely at localhost, as configured in SecuritahGuy/rapid7-mcp.

not rated 6 yesterday A tokens not measured copy · 86% MIT

kali

19

Hannes221/kali-mcp

MCP server Claude CodeCodexCursor +2

MCP server "kali" as configured in Hannes221/kali-mcp. Runs dist/index.js with node.

not rated 5 6mo ago A tokens not measured copy · 83% MIT

aegisforge

20

sunilgentyala/AegisForge-MCP

MCP server Claude CodeCodexCursor +2

MCP server "aegisforge" as configured in sunilgentyala/AegisForge-MCP. Launched with cargo run --manifest-path mcp-server/Cargo.toml --release --. Needs 1 environment variable to run.

not rated 5 21d ago A tokens not measured original MIT

mcp-server

21

pentesttoolscom/pentesttools-pypi

MCP server Claude CodeCodexCursor +2

MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM. Remote server at mcp.pentest-tools.com.

not rated 3 2mo ago A tokens not measured GPL-3.0

keel

22

lutfizp/keel

MCP server Claude CodeCodexCursor +2

MCP server "keel" as configured in lutfizp/keel. Runs scripts/keel_mcp.py with python3. Needs 1 environment variable to run.

not rated 2 1mo ago A tokens not measured original MIT

promptrejectormcp

23

revsmoke/promptrejectormcp

MCP server Claude CodeCodexCursor +2

Security gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities. Runs locally from the prompt-rejector npm package. Needs 1 environment variable to run.

not rated 2 15d ago A tokens not measured original ISC

netmcp

24

cortexc0de/netmcp

MCP server Claude CodeCodexCursor +2

Professional-grade network analysis MCP server with Wireshark, Nmap, and threat intelligence. Runs locally from the netmcp Python package.

not rated 2 6mo ago A tokens not measured original MIT