mcp-security MCP servers

22 tagged mcp-security, measured the same way as everything else here.

Browse within: ai-security 6mcp-server 6agent-security 5llm-security 5

reversecore-mcp

01

sjkim1127/Reversecore_MCP

MCP server Claude CodeCodexCursor +2

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more. Runs locally from the reversecore-mcp Python package.

not rated 211 +4 yesterday A tokens not measured original MIT

mastyf.ai

02

mastyf-ai/mastyf.ai

MCP server Claude CodeCodexCursor +2

Runtime proxy for MCP security, cost governance & audit. Runs locally from the @mastyf_ai/server npm package. Needs 3 environment variables to run.

not rated 21 3d ago A tokens not measured AGPL-3.0

keys_mcp

03

truststrikelabs/BrokenMCP

MCP server Claude CodeCodexCursor +2

MCP server "keysmcp", hosted remotely at 127.0.0.1, as configured in truststrikelabs/BrokenMCP. Needs 2 environment variables to run.

not rated 14 2mo ago A tokens not measured

scanner

04

bawbel/scanner

MCP server Claude CodeCodexCursor +2

Security linter and scanner for MCP servers and AI skill files. Detects toxic flows, prompt injection, tool poisoning, and supply chain attacks. Runs locally from the bawbel-scanner Python package.

not rated 12 today A tokens not measured original Apache-2.0

mcp-scribe

05

The-Swarm-Corporation/mcp-scribe

MCP server Claude CodeCodexCursor +2

Transcribe any OpenAPI schema into a production-grade MCP server. Runs locally from the mcp-scribe Python package.

not rated 7 1mo ago A tokens not measured original Apache-2.0

fs-utils

06

r3dlight/phantom

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "fs-utils" as configured in r3dlight/phantom. Runs ./scripts/fs-utils-server.mjs with node.

not rated 5 2mo ago A tokens not measured original Apache-2.0

mcp-seatbelt

07

KryptosAI/mcp-seatbelt

MCP server Claude CodeCodexCursor +2

MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine. Runs locally from the @kryptosai/mcp-seatbelt npm package.

not rated 3 2mo ago A tokens not measured original MIT

defenter-proxy

08

Defenter-AI/defenter-proxy

MCP server Claude CodeCodexCursor +2

Defenter proxy. Runs locally from the defenter-proxy Python package.

not rated 3 9mo ago A tokens not measured original Apache-2.0

velvet-rope

09

paulchum/velvet-rope

MCP server Claude CodeCodexCursor +2

MCP server "velvet-rope" as configured in paulchum/velvet-rope. Runs locally from the velvet-rope Python package.

not rated 2 23d ago A tokens not measured

sqlite

10

alexmmatos/arthur-mcp

MCP server Claude CodeCodexCursor +2

MCP server "sqlite" as configured in alexmmatos/arthur-mcp. Runs locally from the mcp-server-sqlite-npx npm package.

not rated 2 2mo ago A tokens not measured original MIT

armor

11

studiomeyer-io/mcp-armor

MCP server Claude CodeCodexCursor +2

MCP server "armor" as configured in studiomeyer-io/mcp-armor. Runs in Docker (ghcr.io/studiomeyer-io/mcp-armor:0.8.1).

not rated 1 changed 18d ago A tokens not measured original MIT

autonomous-docs-mcp

12

perryjr1444-ux/autonomous-docs-mcp

MCP server Claude CodeCodexCursor +2

MCP server "autonomous-docs-mcp" as configured in perryjr1444-ux/autonomous-docs-mcp. Runs locally from the autonomous-docs-mcp npm package.

not rated 1 10mo ago A tokens not measured original MIT

mcpshield-runtime

13

srisowmya2000/mcp-shield

MCP server Claude CodeCodexCursor +2

Secure MCP runtime — policy enforcement, SSRF blocking, audit logging. Runs locally from the mcpshield-runtime Python package.

not rated 1 2mo ago A tokens not measured

dcl-trust-oracle

14

Fronesis-Labs/dcl-webhook

MCP server Claude CodeCodexCursor +2

AI/LLM agent output audit MCP: policy eval, tamper-evident chain, AI safety, x402 USDC on Base. Remote server at mcp.fronesislabs.com.

not rated 1 today A tokens not measured original Apache-2.0

clauxel/mcp-oauth-scope-gate-mcp

MCP server Claude CodeCodexCursor +2

OAuth scope approvals and consent receipts for remote MCP servers. Remote server at mcpoauthscopegate.clauxel.com.

not rated 0 5mo ago A tokens not measured

workspace-tools

16

brian-mitchell-sec/workspace-tools-mcp

MCP server Claude CodeCodexCursor +2

Sandbox workspace tools: search, file read, DB queries, integrations. Returns synthetic data. Remote server at vandorla.com.

not rated 0 2mo ago A tokens not measured original MIT

attestd-mcp

17

attestd-io/attestd-mcp

MCP server Claude CodeCodexCursor +2

CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm). Runs locally from the @attestd/mcp npm package. Needs 2 environment variables to run.

not rated 0 8d ago A tokens not measured original MIT

agent-security-lens

18

professor2k8/agent-security-lens

MCP server Claude CodeCodexCursor +2

Safe-install and trust-check MCP for agents before installing MCPs, Skills or tools. Runs locally from the agent-security-lens npm package. Needs 3 environment variables to run.

not rated 0 3mo ago A tokens not measured

stdio-shellguard

19

studiomeyer-io/mcp-stdio-shellguard

MCP server Claude CodeCodexCursor +2

Defense-in-depth for MCP stdio servers: shell-injection guard, AST audit CLI, RCE blocking. Runs locally from the mcp-stdio-shellguard npm package.

not rated 0 3d ago A tokens not measured original MIT

skillguard

20

epistemedeus/skillguard

MCP server Claude CodeCodexCursor +2

MCP server "skillguard" as configured in epistemedeus/skillguard. Launched with epistemedeus/skillguard.

not rated 0 2d ago A tokens not measured

agent-chokepoint

21

ydarwish1/agent-chokepoint

MCP server Claude CodeCodexCursor +2

MCP server "agent-chokepoint" as configured in ydarwish1/agent-chokepoint. Runs locally from the agent-chokepoint Python package.

not rated 0 10d ago A tokens not measured original Apache-2.0