cybersecurity mcp servers

74 tagged cybersecurity, measured the same way as everything else here.

Browse within: ai-security 7CVE 6llm-security 6python 6devsecops 5mitre-attack 5osint 5

openosint

01

OpenOSINT/OpenOSINT

MCP server Claude CodeCodexCursor +2

AI-powered OSINT agent, MCP server, and CLI. Interactive REPL + 19 tools. Anthropic Claude or local Ollama. For authorized security research use only. Runs locally from the openosint Python package. Needs 5 environment variables to run.

1.5k 6d ago A tokens not measured original MIT

cve-mcp

02

mukul975/cve-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "cve-mcp" as configured in mukul975/cve-mcp-server. Runs cve_mcp.server with python. Needs 4 environment variables to run.

1.3k 27d ago A tokens not measured original Apache-2.0

cybersec-toolkit

03

26zl/cybersec-toolkit

MCP server Claude CodeCodexCursor +2

MCP server "cybersec-toolkit" as configured in 26zl/cybersec-toolkit. Runs in Docker (ghcr.io/26zl/cybersec-toolkit:1.1.1). Needs 2 environment variables to run.

46 4d ago A tokens not measured original MIT

mythos-agent

04

mythos-agent/mythos-agent

MCP server Claude CodeCodexCursor +2

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP. Runs locally from the mythos-agent npm package.

43 3mo ago A tokens not measured original MIT

api

05

UPinar/contrastapi

MCP server Claude CodeCodexCursor +2

31 tools: CVE (340K+ EPSS/KEV), OSINT, threat intel, dep audit, code sec. No API key needed. Remote server at api.contrastcyber.com.

33 7d ago A tokens not measured original MIT

RamiBotAI/ramibot

MCP server Claude CodeCodexCursor +2

MCP server "rami-kali-docker-local" as configured in RamiBotAI/ramibot. Runs in Docker (/opt/rami-kali/mcp_server.py).

27 5mo ago A tokens not measured original MIT

operant-mcp

07

operantlabs/operant-mcp

MCP server Claude CodeCodexCursor +2

Security testing MCP server for penetration testing, forensics, and vulnerability assessment. Runs locally from the operant-mcp npm package.

23 5mo ago A tokens not measured original MIT

mcp-cyberbro

08

stanfrbd/mcp-cyberbro

MCP server Claude CodeCodexCursor +2

Model Context Protocol server for Cyberbro IOC analysis and enrichment. Runs locally from the mcp-cyberbro Python package. Needs 9 environment variables to run.

19 28d ago A tokens not measured original MIT

huntable-cti-studio

09

dfirtnt/Huntable-CTI-Studio

MCP server Claude CodeCodexCursor +2

MCP server "huntable-cti-studio" as configured in dfirtnt/Huntable-CTI-Studio. Launched with bash scripts/run_mcp_server.sh.

11 3d ago A tokens not measured original MIT

mcpstrike

10

ente0/mcpstrike

MCP server Claude CodeCodexCursor +2

MCP server "mcpstrike" as configured in ente0/mcpstrike. Runs locally from the mcpstrike Python package.

9 2d ago A tokens not measured GPL-3.0

mcp-simple-tool

11

firetix/vulnerability-intelligence-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "mcp-simple-tool" as configured in firetix/vulnerability-intelligence-mcp-server. Runs locally from the mcp-simple-tool Python package.

9 1y ago A tokens not measured copy · 100% MIT

blackveil-dns

12

MadaBurns/bv-mcp

MCP server Claude CodeCodexCursor +2

MCP server "blackveil-dns", hosted remotely at dns-mcp.blackveilsecurity.com, as configured in MadaBurns/bv-mcp.

8 yesterday A tokens not measured

dns

13

MadaBurns/bv-mcp

MCP server Claude CodeCodexCursor +2

DNS and email security scanner with 78 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits. Remote server at dns-mcp.blackveilsecurity.com.

8 yesterday A tokens not measured

clearfront

14

scottmartinanderson/clearfront

MCP server Claude CodeCodexCursor +2

Clearfront OSINT: AI-powered OSINT agent, MCP server, and CLI that maps your digital footprint across 3,400+ public data sources. Interactive REPL + 30 tools. Anthropic Claude or local Ollama. For authorized security research use only. Runs locally from the clearfront Python package. Needs 5 environment variables to…

8 6d ago A tokens not measured original MIT

mcp

15

vulncheck-oss/mcp

MCP server Claude CodeCodexCursor +2

MCP server "mcp" as configured in vulncheck-oss/mcp. Runs in Docker (ghcr.io/vulncheck-oss/mcp:0.2.1).

8 5d ago A tokens not measured original MIT

nist-nvd-mcp-server

16

Cyreslab-AI/nist-nvd-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "nist-nvd-mcp-server" as configured in Cyreslab-AI/nist-nvd-mcp-server. Runs locally from the @cyreslab/nist-nvd-mcp-server npm package.

8 1y ago A tokens not measured original MIT

halo

17

XenoCoreGiger31/GEMMA-by-GOOGLE

MCP server Claude CodeCodexCursor +2

MCP server "halo" as configured in XenoCoreGiger31/GEMMA-by-GOOGLE. Launched with XenoCoreGiger31/GEMMA-by-GOOGLE mcp_server.py. Needs 4 environment variables to run.

8 13d ago A tokens not measured original MIT

mallorymcp

18

malloryai/mallorymcp

MCP server Claude CodeCodexCursor +2

Deprecated — use the Mallory Remote MCP service: https://docs.mallory.ai/use/agent/mcp. Runs locally from the mallorymcp Python package.

8 2mo ago A tokens not measured original Apache-2.0 archived

jobverify

19

yessGlory17/job-verify

MCP server Claude CodeCodexCursor +2

Agentic MCP server for detecting fake LinkedIn recruiter / job-offer scams using free OSINT sources. Runs locally from the jobverify-mcp Python package.

7 1mo ago A tokens not measured original MIT

mcp-threatintel

20

aplaceforallmystuff/mcp-threatintel

MCP server Claude CodeCodexCursor +2

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker. Runs locally from the mcp-threatintel-server npm package. Needs 4 environment variables to run.

7 19d ago A tokens not measured original MIT

mcp-bastion

21

vaquarkhan/MCP-Bastion

MCP server Claude CodeCodexCursor +2

Security middleware for MCP servers protecting LLM agents from prompt injection, resource exhaustion, and PII leakage. Runs locally from the mcp-bastion-python Python package.

5 2d ago A tokens not measured

docs-langchain

22

sunglasses-dev/sunglasses

MCP server Claude CodeCodexCursor +2

MCP server "docs-langchain", hosted remotely at docs.langchain.com, as configured in sunglasses-dev/sunglasses.

4 yesterday A tokens not measured copy · 100% MIT

reference-langchain

23

sunglasses-dev/sunglasses

MCP server Claude CodeCodexCursor +2

MCP server "reference-langchain", hosted remotely at reference.langchain.com, as configured in sunglasses-dev/sunglasses.

4 yesterday A tokens not measured copy · 100% MIT

mcp-server

24

pentesttoolscom/pentesttools-pypi

MCP server Claude CodeCodexCursor +2

MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM. Remote server at mcp.pentest-tools.com.

3 29d ago A tokens not measured GPL-3.0