Security MCP servers

1,865 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 298model-context-protocol 263compliance 76ai-security 74cli 69cursor 68ai-governance 60AI Safety 57LLM 57cybersecurity 46devsecops 45agent-security 41ai-tools 37llm-security 34

tirith-gateway

01

sheeki03/tirith

MCP server Cursor

MCP server "tirith-gateway" as configured in sheeki03/tirith. Launched with tirith gateway run --upstream-bin tirith --upstream-arg mcp-server --config ~/.c.

not rated 2.8k +4 yesterday A tokens not measured AGPL-3.0

qu1cksc0pe

02

CYB3RMX/Qu1cksc0pe

MCP server Claude CodeCodexCursor +2

MCP server "qu1cksc0pe" as configured in CYB3RMX/Qu1cksc0pe. Runs qu1cksc0pe.py with python3. Needs 1 environment variable to run.

not rated 2.1k +17 1mo ago A tokens not measured GPL-3.0

jshookmcp

03

vmoranv/jshookmcp

MCP server Claude CodeCodexCursor +2

MCP server for JavaScript analysis, security auditing, browser automation and hooks. Runs locally from the @jshookmcp/jshook npm package.

not rated 2.1k +18 yesterday A tokens not measured AGPL-3.0

openosint

04

OpenOSINT/OpenOSINT

MCP server Claude CodeCodexCursor +2

AI-powered OSINT agent, MCP server, and CLI. Interactive REPL + 19 tools. Anthropic Claude or local Ollama. For authorized security research use only. Runs locally from the openosint Python package. Needs 5 environment variables to run.

not rated 1.8k +26 today A Socket: warn tokens not measured original MIT

cve-mcp

05

mukul975/cve-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "cve-mcp" as configured in mukul975/cve-mcp-server. Runs cve_mcp.server with python. Needs 4 environment variables to run.

not rated 1.6k +4 18d ago A tokens not measured original Apache-2.0

stepsecurity

06

cloudposse/atmos

MCP server Claude CodeCodexCursor +2

MCP server "stepsecurity", hosted remotely at agent.api.stepsecurity.io, as configured in cloudposse/atmos.

not rated 1.4k +5 today A tokens not measured original Apache-2.0

llm-sandbox

07

vndee/llm-sandbox

MCP server Claude CodeCodexCursor +2

LLM Sandbox is a lightweight and portable sandbox environment designed to run large language model (LLM) generated code in a safe and isolated mode. Runs locally from the llm-sandbox Python package. Needs 12 environment variables to run.

not rated 1.1k +3 today A Socket: warn tokens not measured original MIT

vet-mcp

08

safedep/vet

MCP server Cursor

One of 2 in mcp.json

MCP server "vet-mcp" as configured in safedep/vet. Runs in Docker (ghcr.io/safedep/vet:latest).

not rated 1.1k +2 changed 1mo ago A tokens not measured original Apache-2.0

hol-guard

09

hashgraph-online/hol-guard

MCP server Claude CodeCodexCursor +2

Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs. Runs locally from the hol-guard Python package.

not rated 933 +71 today A tokens not measured original Apache-2.0

unifi-access-mcp

10

sirkirby/unifi-mcp

MCP server Claude CodeCodexCursor +2

One of 3 in server.json

UniFi Access MCP Server. Runs locally from the unifi-access-mcp Python package. Needs 6 environment variables to run.

not rated 921 +29 today A Socket: warn tokens not measured original MIT

skylos

11

duriantaco/skylos

MCP server Claude CodeCodexCursor +2

Open-source, local-first static analysis and PR gates for Python, TypeScript/JavaScript, Go, Java, Kotlin, PHP, Rust, Dart, C#, C++, and Shell. Finds dead code, security issues, secrets, quality regressions, and AI-code mistakes. Runs locally from the skylos Python package. Needs 1 environment variable to run.

not rated 848 +2 today A Socket: warn tokens not measured original Apache-2.0

linear

12

hoophq/hoop

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

Linear's hosted MCP server: lets the agent read and update issues, projects and cycles. Remote server at mcp.linear.app.

not rated 831 +1 2d ago A tokens not measured original MIT

ssh-mcp

13

tufantunc/ssh-mcp

MCP server Claude CodeCodexCursor +2

Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log. Runs locally from the ssh-mcp npm package. Needs 4 environment variables to run.

not rated 815 +14 5d ago A tokens not measured original MIT

mcp

14

decionis/agent-safe-pipeline

MCP server Claude CodeCodexCursor +2

Authorize consequential AI agent actions before execution. Runs locally from the @decionis/mcp npm package. Needs 3 environment variables to run.

not rated 688 changed 14d ago A tokens not measured original Apache-2.0

vestige

15

samvallad33/vestige

MCP server Claude CodeCodexCursor +2

Local-first memory for AI agents that reaches backward to find a failure's root cause. Runs locally from the vestige-mcp-server npm package.

not rated 652 +3 today A tokens not measured AGPL-3.0

mcp-server

16

emiliaprotocol/emilia-protocol

MCP server Claude CodeCodexCursor +2

Exact-action approval for consequential agent actions: request, track, and verify signed receipts. Runs locally from the @emilia-protocol/mcp-server npm package. Needs 3 environment variables to run.

not rated 611 +1 6d ago A tokens not measured original Apache-2.0

mcp-ssh-manager

17

bvisible/mcp-ssh-manager

MCP server Claude CodeCodexCursor +2

SSH server management for agents, with per-server read-only and allowlist security modes. Runs locally from the mcp-ssh-manager npm package. Needs 2 environment variables to run.

not rated 511 +8 10d ago A Socket: warn tokens not measured original MIT

PV-Bhat/vibe-check-mcp-server

MCP server Claude CodeCodexCursor +2

Metacognitive AI agent oversight: adaptive CPI interrupts for alignment, reflection and safety. Runs locally from the @pv-bhat/vibe-check-mcp npm package. Needs 1 environment variable to run.

not rated 502 +1 2d ago A tokens not measured original MIT

dollspace-gay/chainlink

MCP server Claude CodeCodexCursor +2

MCP server "chainlink-safe-fetch" as configured in dollspace-gay/chainlink. Runs .claude/mcp/safe-fetch-server.py with python.

not rated 363 +1 2mo ago A tokens not measured original MIT

emisar

20

AndrewDryga/emisar

MCP server Claude CodeCodexCursor +2

Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. Remote server at emisar.dev.

not rated 339 +2 3d ago A tokens not measured

infisical

21

theexperiencecompany/gaia

MCP server Claude CodeCodexCursor +2

One of 7 in .mcp.json

MCP server "infisical" as configured in theexperiencecompany/gaia. Launched with sh -c INFISICAL_TOKEN="$(infisical user get token --plain --silent)" exec npx -y. Needs 2 environment variables to run.

not rated 312 +4 changed today A tokens not measured

codex-security

22

vlinx-io/VelaTerm

MCP server Claude CodeCodexCursor +2

MCP server "codex-security" as configured in vlinx-io/VelaTerm. Launched with ./scripts/launch_codex_security_mcp --stdio.

not rated 306 +15 yesterday A tokens not measured original MIT

OpenWorkProof

23

dengyier/OpenWorkProof

MCP server Claude CodeCodexCursor +2

Agent work contracts and verifiable execution protocol — Ed25519-signed, offline-verifiable proof-carrying work for AI agents. Runs locally from the openworkproof Python package.

not rated 287 1mo ago A tokens not measured original Apache-2.0

falcon-mcp

24

CrowdStrike/falcon-mcp

MCP server Claude CodeCodexCursor +2

CrowdStrike Falcon MCP Server. Runs locally from the falcon-mcp Python package. Needs 12 environment variables to run.

not rated 270 +3 10d ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: