Security MCP servers

1,865 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 299model-context-protocol 264compliance 76ai-security 74cli 69cursor 68ai-governance 60AI Safety 57LLM 57cybersecurity 46devsecops 45agent-security 41ai-tools 37llm-security 34

mcp-guard

361

alramalho/mcp-guard

MCP server Claude CodeCodexCursor +2

Simple HTTP proxy that gates MCP servers with block rules. Runs locally from the @alramalho/mcp-guard npm package.

not rated 3 7mo ago A tokens not measured

mcp

362

Tuteliq/mcp

MCP server Claude CodeCodexCursor +2

Detect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video. Runs locally from the @tuteliq/mcp npm package. Needs 1 environment variable to run.

not rated 3 6d ago A tokens not measured original MIT

1claw-mcp

363

1clawAI/1claw-mcp

MCP server Claude CodeCodexCursor +2

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning. Runs locally from the @1claw/mcp npm package. Needs 5 environment variables to run.

not rated 3 +1 yesterday A tokens not measured original MIT

calllint

364

calllint/calllint

MCP server Claude CodeCodexCursor +2

Static preflight safety gate for MCP servers — scan configs before you run them. Never executes. Runs locally from the calllint-mcp npm package.

not rated 3 yesterday A tokens not measured original Apache-2.0

air-blackbox-mcp

365

airblackbox/air-blackbox-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

MCP server for EU AI Act compliance scanning with GDPR and bias detection - scan, analyze, remediate, and protect AI agent code. Runs locally from the air-blackbox-mcp Python package.

not rated 3 5d ago A tokens not measured original Apache-2.0

whisper

366

whisper-sec/whisper-cli

MCP server Claude CodeCodexCursor +2

One routable IPv6 per AI agent, verifiable from the DNS root. Keyless tools need no signup. Runs locally from the @whisper-security/whisper-mcp npm package.

not rated 3 +1 changed 9d ago A tokens not measured original MIT

mcp-code-sanitizer

367

notasandy/mcp-code-sanitizer

MCP server Claude CodeCodexCursor +2

Strict AI code reviewer MCP server powered by Groq — finds bugs, vulnerabilities and security issues. Runs locally from the mcp-code-sanitizer Python package. Needs 1 environment variable to run.

not rated 3 +1 5mo ago A tokens not measured original MIT

yesidleon1393/cybersec-mcp

MCP server Claude CodeCodexCursor +2

MCP server "cybersecurity-professor-mcp" as configured in yesidleon1393/cybersec-mcp. Runs locally from the cybersecurity-professor-mcp npm package.

not rated 3 4mo ago A tokens not measured

enpass-mcp

369

bitterdev/enpass-mcp

MCP server Claude CodeCodexCursor +2

MCP server for Enpass vaults: entries, passwords and TOTP/2FA codes, keychain-backed. Runs locally from the enpass-mcp npm package.

not rated 3 +2 yesterday A tokens not measured original MIT

acunetix-mcp

370

McxM123/acunetix-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "acunetix-mcp" as configured in McxM123/acunetix-mcp-server. Runs locally from the acunetix-mcp Python package.

not rated 3 +1 2mo ago A tokens not measured original MIT

dfx-agentguard

371

dockfixlabs/agentguard

MCP server Claude CodeCodexCursor +2

Autonomous security scanner for AI agents. Detects prompt injection, tool abuse, data exfiltration, and OWASP ASI Top 10 vulnerabilities. Runs locally from the dfx-agentguard Python package.

not rated 3 2mo ago A tokens not measured LGPL-3.0

nightgate-mcp

372

ODATANO/NIGHTGATE-MCP

MCP server Claude CodeCodexCursor +2

MCP server exposing NIGHTGATE (Midnight blockchain attestation layer) to AI agents. Runs locally from the @odatano/nightgate-mcp npm package.

not rated 3 yesterday A tokens not measured original Apache-2.0

jelmervdm/sophos-firewall-mcp

MCP server Claude CodeCodexCursor +2

MCP server "sophos-firewall-mcp-server" as configured in jelmervdm/sophos-firewall-mcp. Runs locally from the sophos-firewall-mcp-server Python package.

not rated 3 yesterday A tokens not measured original Apache-2.0

bi-mcp

374

whoamiTM/bi-mcp

MCP server Claude CodeCodexCursor +2

MCP server for Blue Iris NVR — exposes read-only tools backed by the Blue Iris JSON API. Runs locally from the bi-mcp Python package.

not rated 3 today A tokens not measured original MIT

darknet-mcp-server

375

utrawal9185-cmd/darknet-mcp-server

MCP server Claude CodeCodexCursor +2

Dark web intelligence MCP server — HIBP, ThreatFox, ransomware tracking, Tor .onion access, blockchain intel, exploit search, stealer logs, malware analysis. Runs locally from the darknet-mcp-server npm package.

not rated 3 +2 5d ago A tokens not measured original MIT

security-gate-x402

376

nohosa001-pixel/security-gate-x402

MCP server Cursor

MCP server "security-gate-x402" as configured in nohosa001-pixel/security-gate-x402. Runs mcp_server with python. Needs 1 environment variable to run.

not rated 3 +1 yesterday A tokens not measured original MIT

csoai

377

CSOAI-ORG/councilof-ai

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Council of AI — signed, deterministic AI-governance measurement: CLI + MCP server + agent-callable verifier. Runs locally from the csoai Python package.

not rated 3 today A Socket: warn tokens not measured original MIT

3ilm-mcp

378

holistis/3ilm-mcp

MCP server Claude CodeCodexCursor +2

Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern. Runs locally from the 3ilm-mcp npm package.

not rated 2 1mo ago A tokens not measured original MIT

chaos-mcp

379

AraneaDev/Chaos-MCP

MCP server Claude CodeCodexCursor +2

security holding package. Runs locally from the chaos-mcp npm package.

not rated 2 25d ago A tokens not measured original MIT

secure-host-mcp

380

Razewang/secure-host-mcp

MCP server Claude CodeCodexCursor +2

Cross-platform remote terminal MCP server with OAuth, jobs, tunnels, and auditing. Runs locally from the secure-host-mcp npm package.

not rated 2 2mo ago A tokens not measured original MIT

presidio-v/presidio-hardened-x402-mcp

MCP server Claude CodeCodexCursor +2

MCP server exposing presidio-hardened-x402 pre-payment PII screening, policy, and replay-guard tools to autonomous agents. Runs locally from the presidio-hardened-x402-mcp Python package.

not rated 2 yesterday A tokens not measured original MIT

scanner

382

RoscoNL/intodns-mcp-server

MCP server Claude CodeCodexCursor +2

DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools. Runs locally from the intodns-mcp npm package.

not rated 2 1mo ago A tokens not measured original MIT

mcp-gateway-scan

383

willianpinho/mcp-gateway-scan

MCP server Claude CodeCodexCursor +2

Read-only MCP/agent-gateway readiness scanner — scores a repo across 7 security dimensions. Runs locally from the mcp-gateway-scan npm package.

not rated 2 3mo ago A tokens not measured original MIT

trestle

384

toro-guapo/trestle

MCP server Claude CodeCodexCursor +2

Detects leaked secrets (API keys, tokens, private keys) in source code. Runs locally from the @trestlescan/mcp npm package.

not rated 2 4mo ago A tokens not measured original Apache-2.0