Security MCP servers

1,865 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 299model-context-protocol 264compliance 76ai-security 74cli 69cursor 68ai-governance 60AI Safety 57LLM 57cybersecurity 46devsecops 45agent-security 41ai-tools 37llm-security 34

malskanner

241

Octolabo/malskanner

MCP server Claude CodeCodexCursor +2

Scan a repo for hidden prompt-injection payloads before your AI agent trusts it. Runs locally from the malskanner npm package.

not rated 5 3mo ago A tokens not measured original MIT

bugbounty-mcp-server

242

akinabudu/bug-bounty-mcp

MCP server Claude CodeCodexCursor +2

MCP server "bugbounty-mcp-server" as configured in akinabudu/bug-bounty-mcp. Runs locally from the bugbounty-mcp-server Python package.

not rated 5 1y ago A tokens not measured

tenable-tie-mcp

243

knethteo/tenable-identity-exposure-mcp

MCP server Claude CodeCodexCursor +2

MCP server "tenable-tie-mcp" as configured in knethteo/tenable-identity-exposure-mcp. Runs locally from the tenable-tie-mcp Python package.

not rated 5 2mo ago A tokens not measured original MIT

appium-mcp-auth

244

appclawhq/appium-mcp-auth

MCP server Claude CodeCodexCursor +2

Authentication & authorization for appium-mcp when hosted over SSE / HTTP Stream. Bearer API keys + OAuth JWT, scope-based authorization, per-caller session ownership — built entirely on the appium-mcp Plugin API (no core changes). Runs locally from the @appclaw/appium-mcp-auth npm package.

not rated 5 3mo ago A tokens not measured original Apache-2.0

matrixscroll

245

SSX360/matrixscroll

MCP server Claude CodeCodexCursor +2

MCP server for signed machine-action records, offline tool-surface checks, with device-agnostic custody and CNSA 2.0 Category 5 crypto (ML-DSA-87, ML-KEM-1024). Runs locally from the matrixscroll Python package.

not rated 5 14d ago A tokens not measured original Apache-2.0

ghas-mcp-server

246

rajbos/ghas-mcp-server

MCP server Claude CodeCodexCursor +2

GitHub Advanced Security MCP server. Runs locally from the @rajbos/ghas-mcp-server npm package.

not rated 5 1y ago A tokens not measured archived

kdbx

247

yarrasys/kdbx

MCP server Claude CodeCodexCursor +2

MCP server "kdbx" as configured in yarrasys/kdbx. Runs in Docker (ghcr.io/yarrasys/kdbx:0.3.1). Needs 2 environment variables to run.

not rated 5 5d ago A tokens not measured original MIT

midplane

248

midplaneai/midplane

MCP server Claude CodeCodexCursor +2

Safe-by-default SQL guardrails for AI agents: AST-checked queries, per-table policy, audit log. Runs locally from the midplane npm package. Needs 4 environment variables to run.

not rated 5 17d ago A tokens not measured original MIT

savvydfir

249

kismatkunwar89/SAVVYDFIR-MCP

MCP server Claude CodeCodexCursor +2

MCP server "savvydfir" as configured in kismatkunwar89/SAVVYDFIR-MCP. Runs sift_mcp.server with ./venv/bin/python3. Needs 4 environment variables to run.

not rated 5 25d ago A tokens not measured original MIT

stepsecurity-mcp

250

step-security/stepsecurity-mcp

MCP server Claude CodeCodexCursor +2

Model Context Protocol server for StepSecurity APIs. Runs locally from the @stepsecurity/stepsecurity-mcp npm package.

not rated 5 5mo ago A tokens not measured copy · 86% Apache-2.0

network-mcp

251

labeveryday/network-mcp

MCP server Claude CodeCodexCursor +2

Network MCP Server for AI Agents - Connectivity testing and pcap analysis. Runs locally from the network-mcp Python package.

not rated 5 9mo ago A tokens not measured original MIT

skillaudit

252

megamind-0x/skillaudit

MCP server Claude CodeCodexCursor +2

Security scanner for AI agent skills — scan SKILL.md files for threats, exfiltration, and malicious patterns. Runs locally from the skillaudit npm package.

not rated 5 7mo ago A tokens not measured

knowbe4-mcp-server

253

mirage-security/knowbe4-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server for KnowBe4 Reporting REST API. Runs locally from the knowbe4-mcp-server npm package.

not rated 5 3mo ago A tokens not measured original MIT

hunter-mcp

254

PiggyHurry/hunter-mcp

MCP server Claude CodeCodexCursor +2

MCP Server for Qianxin Hunter cyberspace mapping. Runs locally from the hunter-mcp Python package.

not rated 5 4mo ago A tokens not measured copy · 100% MIT

secure-ai-application

255

AIwithhassan/agentic-ai-security

MCP server Claude CodeCodexCursor +2

MCP server "secure-ai-application" as configured in AIwithhassan/agentic-ai-security. Runs locally from the secure-ai-application Python package.

not rated 5 2mo ago A tokens not measured

pci-dss-mcp

256

shyshlakov/pci-dss-mcp

MCP server Claude CodeCodexCursor +2

MCP server "pci-dss-mcp" as configured in shyshlakov/pci-dss-mcp. Launched with /path/to/pci-dss-mcp.

not rated 5 yesterday A tokens not measured original MIT

eset-mcp

257

maciekaz/ESET-MCP

MCP server Claude CodeCodexCursor +2

MCP server "eset-mcp" as configured in maciekaz/ESET-MCP. Runs in Docker (ghcr.io/maciekaz/eset-mcp:1.0.3).

not rated 5 +1 2mo ago A tokens not measured original MIT

kali

258

Hannes221/kali-mcp

MCP server Claude CodeCodexCursor +2

MCP server "kali" as configured in Hannes221/kali-mcp. Runs dist/index.js with node.

not rated 5 7mo ago A tokens not measured copy · 83% MIT

log-essence

259

petebytes/log-essence

MCP server Claude CodeCodexCursor +2

Intelligent log analysis for LLMs - extract patterns, redact secrets, compress 50%+. Runs locally from the log-essence Python package.

not rated 5 15d ago A tokens not measured original MIT

onelogin-mcp

260

onelogin/onelogin-mcp

MCP server Claude CodeCodexCursor +2

MCP server for OneLogin API - manage users, apps, roles, and authentication. Runs locally from the @onelogin/onelogin-mcp npm package. Needs 3 environment variables to run.

not rated 5 1mo ago A tokens not measured original MIT

wormhole-x402

261

runningoffcode/agent-wormhole

MCP server Claude CodeCodexCursor +2

Check tokens, pages and x402 payments before your agent trusts them. Offline verdicts. Runs locally from the wormhole-x402 npm package. Needs 3 environment variables to run.

not rated 5 25d ago A Socket: warn tokens not measured original Apache-2.0

moltbridge

262

SageMindAI/moltbridge

MCP server Claude CodeCodexCursor +2

Agent network intelligence for AI agents. Trust scoring, broker discovery, and Ed25519 identity. Runs locally from the moltbridge npm package. Needs 3 environment variables to run.

not rated 5 11d ago A Socket: warn tokens not measured original Apache-2.0

warrant

263

s0fractal/warrant

MCP server Claude CodeCodexCursor +2

Verify what an AI agent decided — signed, hash-addressed decision records with reasons you can re-run on your own machine. Runs locally from the warrant-verify Python package. Needs 3 environment variables to run.

not rated 5 today A Socket: warn tokens not measured original MIT

leakferret

264

leakferrethq/leakferret

MCP server Claude CodeCodexCursor +2

Context-aware secret scanner: lets an AI agent scan, verify, and rewrite secrets before committing. Runs locally from the @leakferret/mcp npm package.

not rated 4 1mo ago A tokens not measured original MIT