Security MCP servers

1,865 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 299model-context-protocol 264compliance 76ai-security 74cli 69cursor 68ai-governance 60AI Safety 57LLM 57cybersecurity 46devsecops 45agent-security 41ai-tools 37llm-security 34

rapid7-mcp

289

solomonneas/rapid7-mcp

MCP server Claude CodeCodexCursor +2

Model Context Protocol server for the Rapid7 InsightIDR SIEM platform. Runs locally from the rapid7-mcp npm package.

not rated 4 4mo ago A tokens not measured original MIT archived

okta-auth-cli

290

bunizao/okta-auth

MCP server Claude CodeCodexCursor +2

Okta login toolkit with an interactive CLI and MCP session reuse. Runs locally from the okta-auth-cli Python package.

not rated 4 2mo ago A tokens not measured original MIT

qurl-mcp

291

layervai/qurl-mcp

MCP server Claude CodeCodexCursor +2

Mint, resolve, audit, and rotate scope-limited expiring access links (qURLs) for AI agents. Runs locally from the @layervai/qurl-mcp npm package. Needs 16 environment variables to run.

not rated 4 changed 28d ago A tokens not measured original MIT

github-oauth

292

Nikhil-Patil-RI/MCP-Github-Oauth

MCP server Claude CodeCodexCursor +2

MCP server "github-oauth" as configured in Nikhil-Patil-RI/MCP-Github-Oauth. Runs locally from the github-oauth Python package.

not rated 4 1y ago A tokens not measured

hackerone-mcp

293

AxiomSec/hackerone-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "hackerone-mcp" as configured in AxiomSec/hackerone-mcp-server. Runs locally from the hackerone-mcp Python package.

not rated 4 3mo ago A tokens not measured

ctf-times-mcp

294

0x-Professor/CTF-time-mcp

MCP server Claude CodeCodexCursor +2

MCP server "ctf-times-mcp" as configured in 0x-Professor/CTF-time-mcp. Runs locally from the ctf-times-mcp Python package.

not rated 4 9mo ago A tokens not measured

anonymize-mcp

295

Buggy1111/anonymize-mcp

MCP server Claude CodeCodexCursor +2

MCP server wrapping LINDAT NLP tools — production-grade anonymization, multilingual NER (35 languages), UDPipe (961 models), Charles Translator (8 languages), PONK readability, Korektor spellcheck. Non-commercial use only. Runs locally from the anonymize-mcp Python package.

not rated 4 2mo ago A tokens not measured

mcp-guardian

296

rudraneel93/mcp-guardian

MCP server Claude CodeCodexCursor +2

Security, cost, and health governance proxy for MCP infrastructure. Runs locally from the @mcp-guardian/server npm package. Needs 3 environment variables to run.

not rated 4 4mo ago A tokens not measured original MIT

agentseal-mcp-intel

297

getagentseal/agentseal-mcp-intel

MCP server Claude CodeCodexCursor +2

MCP server for AgentSeal — find safe MCP servers, check security before installing, and scan your AI dev environment from inside your AI coding assistant. Runs locally from the agentseal-mcp-intel npm package.

not rated 4 7mo ago A tokens not measured

shuttle-mcp

298

enwaiax/shuttle

MCP server Claude CodeCodexCursor +2

Secure SSH gateway for AI assistants — MCP server with connection pooling, session isolation, and command safety. Runs locally from the shuttle-mcp Python package.

not rated 4 1mo ago A tokens not measured original MIT

openvas-mcp

299

CyberSecAuto-Labs/OpenVAS-MCP

MCP server Claude CodeCodexCursor +2

MCP server "openvas-mcp" as configured in CyberSecAuto-Labs/OpenVAS-MCP. Runs locally from the openvas-mcp Python package.

not rated 4 17d ago A tokens not measured original Apache-2.0

fuzzmind-frida-mcp

300

fuzzmind/frida-mcp

MCP server Claude CodeCodexCursor +2

Frida MCP server for authorized dynamic analysis and application security research. Runs locally from the fuzzmind-frida-mcp Python package.

not rated 4 5mo ago A tokens not measured original MIT

read-no-evil-mcp

301

thekie/read-no-evil-mcp

MCP server Claude CodeCodexCursor +2

A secure email gateway MCP server that protects AI agents from prompt injection attacks in emails. Runs locally from the read-no-evil-mcp Python package.

not rated 4 6mo ago A tokens not measured original Apache-2.0

phishtank-mcp-server

302

Cyreslab-AI/phishtank-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "phishtank-mcp-server" as configured in Cyreslab-AI/phishtank-mcp-server. Runs locally from the phishtank-mcp-server npm package.

not rated 4 1mo ago A tokens not measured original MIT

badchars/supply-chain-mcp-server

MCP server Claude CodeCodexCursor +2

Software supply chain security MCP server — vulnerability scanning, package analysis, provenance verification, typosquatting detection, dependency intelligence across npm, PyPI, crates.io, Go, and more. Runs locally from the supply-chain-mcp-server npm package.

not rated 4 27d ago A tokens not measured original MIT

agent-passport-mcp

304

aeoess/agent-passport-mcp

MCP server Claude CodeCodexCursor +2

Cryptographic identity, delegation, governance, and commerce for AI agents. 152 tools. Runs locally from the agent-passport-system-mcp npm package.

not rated 4 27d ago A tokens not measured original Apache-2.0

GeniusHu-tgty/Hunter

MCP server Claude CodeCodexCursor +2

MCP server "hunter-security-framework" as configured in GeniusHu-tgty/Hunter. Runs locally from the hunter-security-framework Python package.

not rated 4 +1 2mo ago A tokens not measured GPL-3.0

sast-mcp-server

306

Skyrxin/sast-mcp-server

MCP server Claude CodeCodexCursor +2

A standard MCP server for SAST/DAST tools (Bandit, njsscan, Bearer, Semgrep, Trivy, CodeQL, Checkov, Gitleaks, OSV-Scanner, Grype, OWASP ZAP) — scan code for security vulnerabilities from any AI agent. Runs locally from the sast-mcp-server Python package. Needs 4 environment variables to run.

not rated 4 3mo ago A tokens not measured original MIT

hackerone

307

ASK191225/bugbounty-kit

MCP server Claude CodeCodexCursor +2

One of 5 in .mcp.json

MCP server "hackerone" as configured in ASK191225/bugbounty-kit. Runs C:\Users\ask92\Downloads\bugbounty-kit\scripts\hackerone_mcp.py with python. Needs 2 environment variables to run.

not rated 4 2mo ago A tokens not measured

github

308

adudley78/mcp-audit

MCP server Claude CodeCodexCursor +2

One of 3 in claude_desktop_config.json

Lets the agent work with GitHub: search code, read and create issues and pull requests, and manage repositories through the GitHub API. Runs locally from the @modelcontextprotocol/server-github npm package. Needs 1 environment variable to run.

not rated 4 2d ago A tokens not measured copy · 89% Apache-2.0

mobsf-mcp

309

plur1bu5/mobsf-mcp

MCP server Claude CodeCodexCursor +2

MCP server "mobsf-mcp" as configured in plur1bu5/mobsf-mcp. Runs locally from the mobsf-mcp Python package.

not rated 4 2mo ago A tokens not measured original MIT

agentguards

310

alelaguard/agentguards-plugins

MCP server Claude CodeCodexCursor +2

MCP server "agentguards", hosted remotely at prod.agentguards.co, as configured in alelaguard/agentguards-plugins.

not rated 4 3d ago A tokens not measured original MIT

intigriti-mcp-server

311

alpernae/intigriti-mcp

MCP server Claude CodeCodexCursor +2

MCP server "intigriti-mcp-server" as configured in alpernae/intigriti-mcp. Runs locally from the intigriti-mcp-server npm package.

not rated 4 7mo ago A tokens not measured original MIT

mcp-server

312

pentesttoolscom/pentesttools-pypi

MCP server Claude CodeCodexCursor +2

MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM. Remote server at mcp.pentest-tools.com.

not rated 3 2mo ago A tokens not measured GPL-3.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: