Security MCP servers

1,833 tagged Security, measured the same way as everything else here.

Browse within: model-context-protocol 240compliance 74ai-security 70ai-governance 62AI Safety 59cybersecurity 43devsecops 42agent-security 36audit 32llm-security 31pipeworx 31CVE 24Guardrails 24x402 24

fingerprint-mcp

337

badchars/fingerprint-mcp

MCP server Claude CodeCodexCursor +2

Universal digital fingerprinting MCP server — 100 tools for TCP/TLS/SSH/HTTP/DNS/WAF/IoT/SMTP/SMB fingerprinting, infrastructure topology, C2 detection, OSINT enrichment. Runs locally from the fingerprint-mcp npm package.

not rated 4 2d ago A tokens not measured AGPL-3.0

GeniusHu-tgty/Hunter

MCP server Claude CodeCodexCursor +2

MCP server "hunter-security-framework" as configured in GeniusHu-tgty/Hunter. Runs locally from the hunter-security-framework Python package.

not rated 3 1mo ago A tokens not measured GPL-3.0

steganography-mcp

339

badchars/steganography-mcp

MCP server Claude CodeCodexCursor +2

Steganography analysis MCP server — 128 tools, 17 categories. Image steganalysis, JPEG/F5/JSteg detection, audio steganography, video stego, GIF palette analysis, network covert channels, MP3 stego, spread spectrum, BPCS, archive stego, QR code analysis. Runs locally from the steganography-mcp npm package.

not rated 3 4d ago A tokens not measured original MIT

network-scanner-mcp

340

marc-shade/network-scanner-mcp

MCP server Claude CodeCodexCursor +2

MCP server "network-scanner-mcp" as configured in marc-shade/network-scanner-mcp. Runs locally from the network-scanner-mcp Python package.

not rated 2 +1 6mo ago A tokens not measured

enigmagent-mcp

341

Agnuxo1/enigmagent-mcp

MCP server Claude CodeCodexCursor +2

Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys. Runs locally from the enigmagent-mcp npm package. Needs 2 environment variables to run.

not rated 2 4mo ago A tokens not measured original MIT

secure-host-mcp

342

Razewang/secure-host-mcp

MCP server Claude CodeCodexCursor +2

Cross-platform remote terminal MCP server with OAuth, jobs, tunnels, and auditing. Runs locally from the secure-host-mcp npm package.

not rated 2 1mo ago A tokens not measured original MIT

mcp

343

Tuteliq/mcp

MCP server Claude CodeCodexCursor +2

Detect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video. Runs locally from the @tuteliq/mcp npm package. Needs 1 environment variable to run.

not rated 2 yesterday A tokens not measured original MIT

presidio-v/presidio-hardened-x402-mcp

MCP server Claude CodeCodexCursor +2

MCP server exposing presidio-hardened-x402 pre-payment PII screening, policy, and replay-guard tools to autonomous agents. Runs locally from the presidio-hardened-x402-mcp Python package.

not rated 2 4d ago A tokens not measured original MIT

scanner

345

RoscoNL/intodns-mcp-server

MCP server Claude CodeCodexCursor +2

DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools. Runs locally from the intodns-mcp npm package.

not rated 2 14d ago A tokens not measured original MIT

mcp-gateway-scan

346

willianpinho/mcp-gateway-scan

MCP server Claude CodeCodexCursor +2

Read-only MCP/agent-gateway readiness scanner — scores a repo across 7 security dimensions. Runs locally from the mcp-gateway-scan npm package.

not rated 2 1mo ago A tokens not measured original MIT

trestle

347

toro-guapo/trestle

MCP server Claude CodeCodexCursor +2

Detects leaked secrets (API keys, tokens, private keys) in source code. Runs locally from the @trestlescan/mcp npm package.

not rated 2 2mo ago A tokens not measured original Apache-2.0

registry

348

PolicyLayer/mcp

MCP server Claude CodeCodexCursor +2

The MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install. Remote server at api.policylayer.com.

not rated 2 1mo ago A tokens not measured original MIT

xaps

349

APMC1/xaps-sdk

MCP server Claude CodeCodexCursor +2

The Cognitive Circuit Breaker for Autonomous Agents. Runs locally from the xaps-sdk Python package. Needs 2 environment variables to run.

not rated 2 1mo ago A tokens not measured original MIT

agent-trust

350

Garl-Protocol/garl

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Tamper-evident action receipts, trust scoring & capability tokens for AI agents. 29 MCP tools. Runs locally from the @garl-protocol/mcp-server npm package. Needs 3 environment variables to run.

not rated 2 1mo ago A tokens not measured original Apache-2.0

1claw-mcp

351

1clawAI/1claw-mcp

MCP server Claude CodeCodexCursor +2

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning. Runs locally from the @1claw/mcp npm package. Needs 5 environment variables to run.

not rated 2 3d ago A tokens not measured original MIT

kasbah-mcp

352

Al-Adnane/Kasbah-Core

MCP server Claude CodeCodexCursor +2

Governance layer for agentic AI — signed, verifiable receipts for every agent action. Runs locally from the @yobekasbah/mcp-server npm package. Needs 2 environment variables to run.

not rated 2 3mo ago A tokens not measured original MIT

kernel

353

Actenon/actenon-kernel

MCP server Claude CodeCodexCursor +2

Open proof-required execution kernel for consequential actions. Runs locally from the actenon-kernel Python package.

not rated 2 1mo ago A tokens not measured original Apache-2.0

aicraft-code-review

354

GoodJobwilliam/aicraft

MCP server Claude CodeCodexCursor +2

Code review as an MCP server — structured reviews with OWASP security scanning. Runs locally from the aicraft-code-review Python package.

not rated 2 2d ago A tokens not measured original MIT

GDPRShiftLeftMCP

355

KevinRabun/GDPRShiftLeftMCP

MCP server Claude CodeCodexCursor +2

GDPR Shift-Left Compliance MCP Server — Azure-first GDPR guidance, code review, and audit tools. Runs locally from the gdpr-shift-left-mcp Python package.

not rated 2 6mo ago A tokens not measured original MIT

sast-mcp-server

356

Skyrxin/sast-mcp-server

MCP server Claude CodeCodexCursor +2

A standard MCP server for SAST/DAST tools (Bandit, njsscan, Bearer, Semgrep, Trivy, CodeQL, Checkov, Gitleaks, OSV-Scanner, Grype, OWASP ZAP) — scan code for security vulnerabilities from any AI agent. Runs locally from the sast-mcp-server Python package. Needs 4 environment variables to run.

not rated 2 2mo ago A tokens not measured original MIT

calllint

357

calllint/calllint

MCP server Claude CodeCodexCursor +2

Static preflight safety gate for MCP servers — scan configs before you run them. Never executes. Runs locally from the calllint-mcp npm package.

not rated 2 3d ago A tokens not measured original Apache-2.0

ako2345/android-security-analyzer

MCP server Claude CodeCodexCursor +2

MCP server for static security analysis of Android source code. Remote server at android-security-analyzer.ako-labs.workers.dev.

not rated 2 5mo ago A tokens not measured

air-blackbox-mcp

359

airblackbox/air-blackbox-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

MCP server for EU AI Act compliance scanning with GDPR and bias detection - scan, analyze, remediate, and protect AI agent code. Runs locally from the air-blackbox-mcp Python package.

not rated 2 4d ago A tokens not measured original Apache-2.0

taskbounty-check

360

eliottreich/taskbounty-check

MCP server Claude CodeCodexCursor +2

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit. Runs locally from the taskbounty-check npm package.

not rated 2 2mo ago A tokens not measured original MIT