Security MCP servers

1,865 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 299model-context-protocol 264compliance 76ai-security 74cli 69cursor 68ai-governance 60AI Safety 57LLM 57cybersecurity 46devsecops 45agent-security 41ai-tools 37llm-security 34

preclick-mcp

217

cybrlab-ai/preclick-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

PreClick scans links for threats and confirms intent match with high accuracy before agents click. Remote server at preclick.ai.

not rated 6 6mo ago A tokens not measured original Apache-2.0

mcp-pfsense

218

antonio-mello-ai/mcp-pfsense

MCP server Claude CodeCodexCursor +2

MCP server for managing pfSense firewalls through AI assistants. Runs locally from the mcp-pfsense Python package.

not rated 6 29d ago A tokens not measured original MIT

rapid7-mcp-server

219

el95149/rapid7-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "rapid7-mcp-server" as configured in el95149/rapid7-mcp-server. Runs locally from the rapid7-mcp-server npm package.

not rated 6 1y ago A tokens not measured

apimesh

220

mbeato/APIMesh

MCP server Claude CodeCodexCursor +2

MCP server for APIMesh — 76 x402-payable tools for AI agents (74 APIs + wallet usage + spend caps). Covers web vitals, security headers, SEO audits, email security and verification, tech-stack detection, brand assets, redirect chains, indexability, brand. Runs locally from the @mbeato/apimesh-mcp-server npm package.…

not rated 6 5mo ago A tokens not measured original MIT

liangjunyu2010/mcp_server_safe_content_check

MCP server Claude CodeCodexCursor +2

MCP server "mcp-server-safe-content-check" as configured in liangjunyu2010/mcpserversafecontentcheck. Runs locally from the mcp-server-safe-content-check Python package.

not rated 6 1y ago A tokens not measured original Apache-2.0

claude-secrets

222

vaultry/claude-secrets

MCP server Claude CodeCodexCursor +2

Encrypted secrets store for Claude Code (MCP) + CLI + .env placeholder expansion. macOS Keychain backed. Runs locally from the @vaultry/claude-secrets npm package.

not rated 6 6mo ago A tokens not measured

mem-forensics-mcp

223

x746b/mem_forensics-mcp

MCP server Claude CodeCodexCursor +2

Unified Memory Forensics MCP Server - Multi-tier engine (Rust + Python + Vol3). Runs locally from the mem-forensics-mcp Python package.

not rated 6 21d ago A tokens not measured original MIT

mcp-guardian

224

alexandriashai/mcp-guardian

MCP server Claude CodeCodexCursor +2

MCP security scanner - detect prompt injection in tool descriptions. Runs locally from the mcp-guardian npm package.

not rated 6 2mo ago A tokens not measured original MIT

hackerone-mcp

225

abdugafforov-bobur/hackerone-mcp

MCP server Claude CodeCodexCursor +2

MCP server "hackerone-mcp" as configured in abdugafforov-bobur/hackerone-mcp. Runs locally from the hackerone-mcp Python package.

not rated 6 3mo ago A tokens not measured

FedRAMP20xMCP

226

KevinRabun/FedRAMP20xMCP

MCP server Claude CodeCodexCursor +2

MCP server for querying FedRAMP 20x requirements. Runs locally from the fedramp-20x-mcp Python package.

not rated 6 8mo ago A tokens not measured

guardvibe

227

goklab/guardvibe

MCP server Claude CodeCodexCursor +2

Deterministic security layer your AI can't be. 441 rules, 37 tools, CLI + doctor + host audit. Runs locally from the guardvibe npm package.

not rated 6 2d ago A tokens not measured original Apache-2.0

raze-security

228

xhulz/raze

MCP server Claude CodeCodexCursor +2

MCP-first smart contract attack engine for AI developer tools. Runs locally from the raze-security npm package.

not rated 6 6mo ago A tokens not measured original MIT

drata-mcp

229

sderosiaux/drata-mcp

MCP server Claude CodeCodexCursor +2

MCP server "drata-mcp" as configured in sderosiaux/drata-mcp. Runs locally from the drata-mcp Python package.

not rated 6 8d ago A tokens not measured

husk

230

husk-security/husk

MCP server Claude CodeCodexCursor +2

Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs. Runs locally from the husk-sec npm package.

not rated 6 yesterday A tokens not measured original MIT

lachesis

231

UnboundCompute/lachesis

MCP server Claude CodeCodexCursor +2

A compiler-precise code property graph with an embedded columnar store and a navigation layer for security reasoning over source code. Runs locally from the lachesis-cpg Python package.

not rated 6 4d ago A tokens not measured AGPL-3.0

fingerprint-mcp

232

badchars/fingerprint-mcp

MCP server Claude CodeCodexCursor +2

Universal digital fingerprinting MCP server — 100 tools for TCP/TLS/SSH/HTTP/DNS/WAF/IoT/SMTP/SMB fingerprinting, infrastructure topology, C2 detection, OSINT enrichment. Runs locally from the fingerprint-mcp npm package.

not rated 6 27d ago A tokens not measured AGPL-3.0

enigmagent-mcp

233

Agnuxo1/enigmagent-mcp

MCP server Claude CodeCodexCursor +2

Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys. Runs locally from the enigmagent-mcp npm package. Needs 2 environment variables to run.

not rated 6 29d ago A tokens not measured original MIT

argus

234

ironclawdevs27/Argus

MCP server Claude CodeCodexCursor +2

Argus — the QA layer for AI-assisted development. Claude-native (MCP) Chrome audits across 67 categories — errors, visual regressions, a11y, security, performance — no test files, secrets redacted by default (Aegis). Runs locally from the argusqa-os npm package.

not rated 5 2mo ago A tokens not measured original MIT

hibp

235

darrenjrobinson/HIBP-MCP-Server

MCP server Claude CodeCodexCursor +2

A Model Context Protocol (MCP) server for the Have I Been Pwned (HIBP) API. Runs locally from the @darrenjrobinson/hibp-mcp npm package. Needs 2 environment variables to run.

not rated 5 6d ago A tokens not measured original MIT

imouiche/complete-mitre-attack-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server providing 50+ tools for MITRE ATT&CK techniques, groups, and mitigations. Runs locally from the @imouiche/mitre-attack-mcp-server npm package.

not rated 5 10mo ago A tokens not measured

skill-audit-mcp

237

eltociear/skill-audit-mcp

MCP server Claude CodeCodexCursor +2

Scan agent skills and MCP servers for malicious patterns before you load them. Remote server at eltociear-skill-audit.hf.space.

not rated 5 20d ago A tokens not measured original MIT

siteaudit-mcp

238

vdalhambra/siteaudit-mcp

MCP server Claude CodeCodexCursor +2

Instant SEO, performance, and security audits for any URL — an MCP server for AI agents. Runs locally from the siteaudit-mcp Python package.

not rated 5 6mo ago A tokens not measured original MIT

kali-lab

239

andrescaicedom/tribuia-taller-seguridad

MCP server Claude Code

One of 2 in .mcp.json

MCP server "kali-lab" as configured in andrescaicedom/tribuia-taller-seguridad. Runs /workspace/docker/operator/tools/mcp-kali.py with python3. Needs 1 environment variable to run.

not rated 5 5mo ago A tokens not measured

hacking-buddy-mcp

240

ManuelBerrueta/hacking-buddy-mcp

MCP server Claude CodeCodexCursor +2

MCP server "hacking-buddy-mcp" as configured in ManuelBerrueta/hacking-buddy-mcp. Runs locally from the hacking-buddy-mcp Python package.

not rated 5 1y ago A tokens not measured original Apache-2.0