devsecops mcp servers

chawdamrunal/assay

MCP server Claude CodeCodexCursor +2

MCP server "assay" as configured in chawdamrunal/assay. Launched with assay mcp --transport stdio.

DownAtTheBottomOfTheMoleHole/megalinter-mcp

MCP server Claude CodeCodexCursor +2

MCP server for running Ox Security MegaLinter via mega-linter-runner. Runs locally from the @downatthebottomofthemolehole/megalinter-mcp-server npm package.

inkog-io/inkog-mcp

MCP server Claude CodeCodexCursor +2

Scan AI agents for security vulnerabilities. Audit MCP servers before installation. Runs locally from the @inkog-io/mcp npm package. Needs 1 environment variable to run.

balasriharsha/shieldbot

MCP server Claude CodeCodexCursor +2

AI-powered security code review MCP server for Claude Code — combines CodeQL, Semgrep (5,000+ rules), bandit, detect-secrets, Dependabot CLI, osv-scanner, Trivy (Docker image scanning), pip-audit, and npm-audit. Runs locally from the shieldbot-mcp Python package.

tiagosilva07/zyrax-guard

MCP server Claude CodeCodexCursor +2

Audit AI agent configs for prompt injection & rogue MCP servers; vet packages. Runs locally from the zyrax-guard npm package.

raccioly/websec-validator

MCP server Claude CodeCodexCursor +2

Gives the agent read and write access to a set of allowed directories on the local filesystem. Runs locally from the @modelcontextprotocol/server-filesystem npm package.

raccioly/websec-validator

MCP server Claude CodeCodexCursor +2

MCP server "local" as configured in raccioly/websec-validator. Runs ./mcp/server.js with node.

AleBrito124356/mcp-secret-sentinel

MCP server Claude CodeCodexCursor

MCP server "mcp-secret-sentinel" as configured in AleBrito124356/mcp-secret-sentinel. Runs locally from the mcp-secret-sentinel Python package.

pezhik/skilltotal

MCP server Claude CodeCodexCursor

AI Component Security Platform — static security analysis for AI components (CLI engine). Runs locally from the skilltotal Python package.

BargLabs/cejel

MCP server Claude CodeCodexCursor

MCP server "cejel" as configured in BargLabs/cejel. Runs in Docker (ghcr.io/barglabs/cejel@sha256:f1cd2356cc0072ad08e24fcddc379206ee07f5699b9a633164326917f665b6d6).

bawbel/bawbel-mcp

MCP server Claude CodeCodexCursor

MCP server exposing Bawbel Scanner as agent-callable security tools. Runs locally from the bawbel-mcp Python package.

sanjoy1234/gauntlex

MCP server Claude CodeCodexCursor

Adversarial Co-Generation Engine — concurrent Builder + Breaker agents for production-grade AI-generated code. Runs locally from the gauntlex-ai Python package.

Fascinax/Inspectra

MCP server Claude CodeCodexCursor

MCP server "inspectra" as configured in Fascinax/Inspectra. Runs mcp/dist/index.js with node.

zombat/scrub-mcp

MCP server Claude CodeCodexCursor

MCP server "scrub" as configured in zombat/scrub-mcp. Runs scrub_mcp.mcp.server with /usr/bin/python.

easygoingcoder/blackduck-polaris-mcp-server

MCP server Claude CodeCodexCursor

Feature-rich MCP server for Black Duck Polaris — trigger SAST/SCA/DAST scans, query findings, generate reports (SBOM, SPDX, CycloneDX), manage policies, triage issues, and more. Works with Claude Code, Claude Desktop, GitHub Copilot, Cursor, and any MCP-c. Runs locally from the blackduck-polaris-mcp-server npm package.

kraken222/sovereign-observer-mcp

MCP server Claude CodeCodexCursor

Scan AI-generated Terraform for security misconfigurations, in your editor, before it is committed. Runs locally from the sovereign-observer Python package. Needs 2 environment variables to run.

cyanheads/osv-advisory-mcp-server

MCP server Claude CodeCodexCursor

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP. Runs locally from the @cyanheads/osv-advisory-mcp-server npm package. Needs 3 environment variables to run.

Varpost/Scout

MCP server Claude CodeCodexCursor

AI security team in a CLI. Find, plan, fix, and verify vulnerabilities — free, local, no signup. Runs locally from the scout-security Python package.

liminalpepe/agent-guard-mcp

MCP server Claude CodeCodexCursor

Verify-before-act safety MCP for AI coding agents: check packages, lockfiles, skill/plugin manifests, and CI workflows before installing or merging. Runs locally from the @liminallablibs/agent-guard-mcp npm package.

liminalpepe/agent-guard-mcp

MCP server Claude CodeCodexCursor

Verify-before-act safety checks for AI agents: packages, lockfiles, manifests, CI workflows. Runs locally from the @liminallablibs/agent-guard-mcp npm package.

netallion/netallion-mcp-lite

MCP server Claude CodeCodexCursor

Free, local, IP-safe MCP server for AI-development security — commodity secret & credential checks from Netallion. Part of Agentic Development Governance. Runs locally from the netallion-mcp-lite Python package.

rijul170/qualys-mcp

MCP server Claude CodeCodexCursor

MCP server "qualys-consulting", hosted remotely at localhost, as configured in rijul170/qualys-mcp.

rijul170/qualys-mcp

MCP server Claude CodeCodexCursor

MCP server "qualys-cloud", hosted remotely at localhost, as configured in rijul170/qualys-mcp.

rijul170/qualys-mcp

MCP server Claude CodeCodexCursor

Model Context Protocol server for full Qualys portal management (VMDR, PC, WAS, Cloud Agent, Container Security, TotalCloud, Patch, CSAM, EASM, and more) across multiple Qualys consoles. Runs locally from the qualys-mcp-full Python package.