Security MCP servers

1,818 tagged Security, measured the same way as everything else here.

Browse within: model-context-protocol 229compliance 73ai-security 68ai-governance 57AI Safety 55cybersecurity 45devsecops 40agent-security 33audit 32pipeworx 31llm-security 30Guardrails 24fastmcp 24CVE 23

fofa-quake-hunter-mcp

217

RuoJi6/fofa_quake_hunter_mcp

MCP server Claude CodeCodexCursor +2

MCP server for FOFA, Quake, Hunter, and DayDayMap cyberspace mapping platforms. Runs locally from the fofa-quake-hunter-mcp Python package.

not rated 6 21d ago A tokens not measured original MIT

FedRAMP20xMCP

218

KevinRabun/FedRAMP20xMCP

MCP server Claude CodeCodexCursor +2

MCP server for querying FedRAMP 20x requirements. Runs locally from the fedramp-20x-mcp Python package.

not rated 5 6mo ago A tokens not measured

guardvibe

219

goklab/guardvibe

MCP server Claude CodeCodexCursor +2

Deterministic security layer your AI can't be. 441 rules, 37 tools, CLI + doctor + host audit. Runs locally from the guardvibe npm package.

not rated 5 20d ago A tokens not measured original Apache-2.0

mcp-bastion

220

vaquarkhan/MCP-Bastion

MCP server Claude CodeCodexCursor +2

Security middleware for MCP servers protecting LLM agents from prompt injection, resource exhaustion, and PII leakage. Runs locally from the mcp-bastion-python Python package.

not rated 5 4d ago A tokens not measured

mcp-server

221

WasmAgent/wasmagent-js

MCP server Claude CodeCodexCursor +2

WasmAgent MCP server — WASM-sandboxed code execution with capability manifests and Tasks API. Runs locally from the @wasmagent/mcp-server npm package.

not rated 5 6d ago A tokens not measured original Apache-2.0

argus

222

ironclawdevs27/Argus

MCP server Claude CodeCodexCursor +2

Argus — the QA layer for AI-assisted development. Claude-native (MCP) Chrome audits across 67 categories — errors, visual regressions, a11y, security, performance — no test files, secrets redacted by default (Aegis). Runs locally from the argusqa-os npm package.

not rated 5 24d ago A tokens not measured original MIT

hibp

223

darrenjrobinson/HIBP-MCP-Server

MCP server Claude CodeCodexCursor +2

A Model Context Protocol (MCP) server for the Have I Been Pwned (HIBP) API. Runs locally from the @darrenjrobinson/hibp-mcp npm package. Needs 2 environment variables to run.

not rated 5 5mo ago A tokens not measured original MIT

imouiche/complete-mitre-attack-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server providing 50+ tools for MITRE ATT&CK techniques, groups, and mitigations. Runs locally from the @imouiche/mitre-attack-mcp-server npm package.

not rated 5 8mo ago A tokens not measured

skill-audit-mcp

225

eltociear/skill-audit-mcp

MCP server Claude CodeCodexCursor +2

Scan agent skills and MCP servers for malicious patterns before you load them. Remote server at eltociear-skill-audit.hf.space.

not rated 5 15d ago A tokens not measured

leakferret

226

leakferrethq/leakferret

MCP server Claude CodeCodexCursor +2

Context-aware secret scanner: lets an AI agent scan, verify, and rewrite secrets before committing. Runs locally from the @leakferret/mcp npm package.

not rated 5 1mo ago A tokens not measured original MIT

siteaudit-mcp

227

vdalhambra/siteaudit-mcp

MCP server Claude CodeCodexCursor +2

Instant SEO, performance, and security audits for any URL — an MCP server for AI agents. Runs locally from the siteaudit-mcp Python package.

not rated 5 4mo ago A tokens not measured original MIT

kali-lab

228

andrescaicedom/tribuia-taller-seguridad

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "kali-lab" as configured in andrescaicedom/tribuia-taller-seguridad. Runs /workspace/docker/operator/tools/mcp-kali.py with python3. Needs 1 environment variable to run.

not rated 5 4mo ago A tokens not measured

zap-lab

229

andrescaicedom/tribuia-taller-seguridad

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "zap-lab" as configured in andrescaicedom/tribuia-taller-seguridad. Runs /workspace/docker/operator/tools/mcp-zap.py with python3. Needs 1 environment variable to run.

not rated 5 4mo ago A tokens not measured

hacking-buddy-mcp

230

ManuelBerrueta/hacking-buddy-mcp

MCP server Claude CodeCodexCursor +2

MCP server "hacking-buddy-mcp" as configured in ManuelBerrueta/hacking-buddy-mcp. Runs locally from the hacking-buddy-mcp Python package.

not rated 5 1y ago A tokens not measured original Apache-2.0

malskanner

231

Octolabo/malskanner

MCP server Claude CodeCodexCursor +2

Scan a repo for hidden prompt-injection payloads before your AI agent trusts it. Runs locally from the malskanner npm package.

not rated 5 1mo ago A tokens not measured original MIT

bugbounty-mcp-server

232

akinabudu/bug-bounty-mcp

MCP server Claude CodeCodexCursor +2

MCP server "bugbounty-mcp-server" as configured in akinabudu/bug-bounty-mcp. Runs locally from the bugbounty-mcp-server Python package.

not rated 5 10mo ago A tokens not measured

raze-security

233

xhulz/raze

MCP server Claude CodeCodexCursor +2

MCP-first smart contract attack engine for AI developer tools. Runs locally from the raze-security npm package.

not rated 5 5mo ago A tokens not measured original MIT

tenable-tie-mcp

234

knethteo/tenable-identity-exposure-mcp

MCP server Claude CodeCodexCursor +2

MCP server "tenable-tie-mcp" as configured in knethteo/tenable-identity-exposure-mcp. Runs locally from the tenable-tie-mcp Python package.

not rated 5 28d ago A tokens not measured original MIT

drata-mcp

235

sderosiaux/drata-mcp

MCP server Claude CodeCodexCursor +2

MCP server "drata-mcp" as configured in sderosiaux/drata-mcp. Runs locally from the drata-mcp Python package.

not rated 5 7mo ago A tokens not measured

appium-mcp-auth

236

appclawhq/appium-mcp-auth

MCP server Claude CodeCodexCursor +2

Authentication & authorization for appium-mcp when hosted over SSE / HTTP Stream. Bearer API keys + OAuth JWT, scope-based authorization, per-caller session ownership — built entirely on the appium-mcp Plugin API (no core changes). Runs locally from the @appclaw/appium-mcp-auth npm package.

not rated 5 1mo ago A tokens not measured original Apache-2.0

matrixscroll

237

SSX360/matrixscroll

MCP server Claude CodeCodexCursor +2

MCP server for signed machine-action records, offline tool-surface checks, and SSX360 USB signer support. Runs locally from the matrixscroll Python package.

not rated 5 11d ago A tokens not measured original Apache-2.0

ghas-mcp-server

238

rajbos/ghas-mcp-server

MCP server Claude CodeCodexCursor +2

GitHub Advanced Security MCP server. Runs locally from the @rajbos/ghas-mcp-server npm package.

not rated 5 1y ago A tokens not measured archived

knowbe4-mcp-server

239

mirage-security/knowbe4-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server for KnowBe4 Reporting REST API. Runs locally from the knowbe4-mcp-server npm package.

not rated 5 +1 2mo ago A tokens not measured original MIT

onelogin-mcp

240

onelogin/onelogin-mcp

MCP server Claude CodeCodexCursor +2

MCP server for OneLogin API - manage users, apps, roles, and authentication. Runs locally from the @onelogin/onelogin-mcp npm package. Needs 3 environment variables to run.

not rated 5 9d ago A tokens not measured original MIT