Security MCP servers

1,865 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 299model-context-protocol 264compliance 76ai-security 74cli 69cursor 68ai-governance 60AI Safety 57LLM 57cybersecurity 46devsecops 45agent-security 41ai-tools 37llm-security 34

registry

385

PolicyLayer/mcp

MCP server Claude CodeCodexCursor +2

The MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install. Remote server at api.policylayer.com.

not rated 2 3mo ago A tokens not measured original MIT

xaps

386

APMC1/xaps-sdk

MCP server Claude CodeCodexCursor +2

The Cognitive Circuit Breaker for Autonomous Agents. Runs locally from the xaps-sdk Python package. Needs 2 environment variables to run.

not rated 2 1mo ago A tokens not measured original MIT

agent-trust

387

Garl-Protocol/garl

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Tamper-evident action receipts, trust scoring & capability tokens for AI agents. 29 MCP tools. Runs locally from the @garl-protocol/mcp-server npm package. Needs 3 environment variables to run.

not rated 2 26d ago A tokens not measured original Apache-2.0 archived

kasbah-mcp

388

Al-Adnane/Kasbah-Core

MCP server Claude CodeCodexCursor +2

Governance layer for agentic AI — signed, verifiable receipts for every agent action. Runs locally from the @yobekasbah/mcp-server npm package. Needs 2 environment variables to run.

not rated 2 9d ago A tokens not measured original MIT

kernel

389

Actenon/actenon-kernel

MCP server Claude CodeCodexCursor +2

Open proof-required execution kernel for consequential actions. Runs locally from the actenon-kernel Python package.

not rated 2 12d ago A tokens not measured original Apache-2.0

mcp-code-review

390

GoodJobwilliam/aicraft

MCP server Claude CodeCodexCursor +2

Code review as an MCP server — structured reviews with OWASP security scanning. Runs locally from the aicraft-code-review Python package.

not rated 2 1mo ago A tokens not measured original MIT

GDPRShiftLeftMCP

391

KevinRabun/GDPRShiftLeftMCP

MCP server Claude CodeCodexCursor +2

GDPR Shift-Left Compliance MCP Server — Azure-first GDPR guidance, code review, and audit tools. Runs locally from the gdpr-shift-left-mcp Python package.

not rated 2 8mo ago A tokens not measured original MIT

ako2345/android-security-analyzer

MCP server Claude CodeCodexCursor +2

MCP server for static security analysis of Android source code. Remote server at android-security-analyzer.ako-labs.workers.dev.

not rated 2 7mo ago A tokens not measured

taskbounty-check

393

eliottreich/taskbounty-check

MCP server Claude CodeCodexCursor +2

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit. Runs locally from the taskbounty-check npm package.

not rated 2 4mo ago A tokens not measured original MIT

octowatch-mcp

394

extralabs/octowatch-mcp-server

MCP server Claude CodeCodexCursor +2

Read-only MCP server for OctoWatch DLP Cloud (console analytics, monitoring, risks, productivity). Runs locally from the octowatch-mcp Python package. Needs 4 environment variables to run.

not rated 2 1mo ago A tokens not measured original MIT

mcpampel

395

MCPAmpel/mcpampel

MCP server Claude CodeCodexCursor +2

MCP security scanner plugin - scan your installed MCP servers with 16 engines. Runs locally from the mcpampel Python package. Needs 1 environment variable to run.

not rated 2 6mo ago A tokens not measured original Apache-2.0

qorami

396

loicfontaine-max/qorami-sdk

MCP server Claude CodeCodexCursor +2

Check an email before an AI agent sends it: send / ask a human / block. Detects prompt injection. Runs locally from the qorami-mcp npm package. Needs 1 environment variable to run.

not rated 2 3mo ago A tokens not measured original MIT

aishield

397

lm203688/aishield

MCP server Claude CodeCodexCursor +2

MCP server "aishield" as configured in lm203688/aishield. Runs api.mcp_server with python.

not rated 2 changed 16d ago A Socket: warn tokens not measured original MIT

mcp-audit-proxy

398

firatmio/mcp-audit-proxy

MCP server Claude CodeCodexCursor +2

Transparent audit proxy for MCP servers: logs every tool call, flags poisoning and rug pulls. Runs locally from the mcp-audit-proxy npm package.

not rated 2 2mo ago A tokens not measured original Apache-2.0

flagrix

399

flagrix-io/flagrix-cli

MCP server Claude CodeCodexCursor +2

Scan GitHub repos and profiles for malware before cloning — commit-pinned risk verdicts for agents. Runs locally from the flagrix npm package. Needs 1 environment variable to run.

not rated 2 3mo ago A tokens not measured original MIT

dugganusa-cli

400

pduggusa/dugganusa-cli

MCP server Claude CodeCodexCursor +2

Local STDIO MCP for DugganUSA threat intel. 1.13M IOCs. Read-only. npm: dugganusa-cli. Runs locally from the dugganusa-cli npm package. Needs 1 environment variable to run.

not rated 2 5d ago A tokens not measured original MIT

zyrax-guard

401

tiagosilva07/zyrax-guard

MCP server Claude CodeCodexCursor +2

Audit AI agent configs for prompt injection & rogue MCP servers; vet packages. Runs locally from the zyrax-guard npm package.

not rated 2 2mo ago A tokens not measured original MIT

promptrejectormcp

402

revsmoke/promptrejectormcp

MCP server Claude CodeCodexCursor +2

Security gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities. Runs locally from the prompt-rejector npm package. Needs 1 environment variable to run.

not rated 2 19d ago A tokens not measured original ISC

wundervault-mcp

403

wundervault/wundervault-mcp

MCP server Claude CodeCodexCursor +2

Zero-knowledge MCP secrets vault for AI agents: secrets injected at runtime, never seen by the model. Runs locally from the @wundervault/mcp-server npm package. Needs 2 environment variables to run.

not rated 2 1mo ago A tokens not measured AGPL-3.0

tablecloth-mcp

404

yourtablecloth/TableClothMcp

MCP server Claude CodeCodexCursor +2

Open Korean e-Gov and finance sites in a clean, disposable Windows Sandbox with security programs. Runs locally from the tablecloth-mcp npm package.

not rated 2 2mo ago A tokens not measured AGPL-3.0

mcp

405

honeylabshq/honeylabs-mcp

MCP server Claude CodeCodexCursor +2

Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints. Remote server at mcp.honeylabs.net.

not rated 2 2d ago A tokens not measured original MIT

veriswarm-mcp

406

veriswarm/veriswarm-sdk

MCP server Claude CodeCodexCursor +2

VeriSwarm MCP Server — Trust infrastructure for AI agents via Model Context Protocol. Runs locally from the veriswarm-mcp Python package.

not rated 2 2d ago A tokens not measured original MIT

privacyscrubber-mcp

407

moxno/privacyscrubber-mcp

MCP server Claude CodeCodexCursor +2

Zero-Trust PII & secrets sanitizer for AI agents with in-memory local redaction. Runs locally from the @privacyscrubber/mcp-server npm package. Needs 1 environment variable to run.

not rated 2 yesterday A tokens not measured original

verification

408

Cybercentry/verification-mcp

MCP server Claude CodeCodexCursor +2

Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402. Remote server at centry.cybercentry.co.uk.

not rated 2 1mo ago A tokens not measured original MIT