Security MCP servers

1,865 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 298model-context-protocol 263compliance 76ai-security 74cli 69cursor 68ai-governance 60AI Safety 57LLM 57cybersecurity 46devsecops 45agent-security 41ai-tools 37llm-security 34

wstg-pentest

25

bhavsec/autopentest-ai

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "wstg-pentest" as configured in bhavsec/autopentest-ai. Launched with uv --directory ./server run server.py.

not rated 239 +2 7mo ago A tokens not measured original Apache-2.0

reversecore-mcp

26

sjkim1127/Reversecore_MCP

MCP server Claude CodeCodexCursor +2

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more. Runs locally from the reversecore-mcp Python package.

not rated 211 +3 2d ago A tokens not measured original MIT

thomasxm/CrowdSentinels-AI-MCP

MCP server Claude CodeCodexCursor +2

AI-powered threat hunting and incident response MCP server for Elasticsearch/OpenSearch with 139 tools, 6,060 detection rules, and baseline behaviour analysis. Runs locally from the crowdsentinel-mcp-server Python package. Needs 8 environment variables to run.

not rated 204 +5 3mo ago A tokens not measured GPL-3.0

openclaw-mcp

28

freema/openclaw-mcp

MCP server Claude CodeCodexCursor +2

MCP server bridging Claude.ai/Desktop with self-hosted OpenClaw via OAuth 2.1. Runs locally from the openclaw-mcp npm package. Needs 4 environment variables to run.

not rated 188 +2 1mo ago A tokens not measured original MIT

shodan

29

w0h1v/mcp-shodan

MCP server Claude CodeCodexCursor +2

MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries. Runs locally from the @burtthecoder/mcp-shodan npm package. Needs 1 environment variable to run.

not rated 178 +1 6d ago A tokens not measured original MIT

mcp-observatory

30

KryptosAI/mcp-observatory

MCP server Claude CodeCodexCursor +2

MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF. Runs locally from the @kryptosai/mcp-observatory npm package.

not rated 142 yesterday A tokens not measured original MIT

pathfinder

31

shivasurya/code-pathfinder

MCP server Claude CodeCodexCursor +2

Python SDK for code-pathfinder static analysis for modern security teams. Runs locally from the codepathfinder Python package.

not rated 142 3mo ago A tokens not measured original Apache-2.0

shellward

32

jnMetaCode/shellward

MCP server Claude CodeCodexCursor +2

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP. Runs locally from the shellward npm package. Needs 3 environment variables to run.

not rated 139 +1 20d ago A tokens not measured original Apache-2.0

sinewaveai/agent-security-scanner-mcp

MCP server Claude CodeCodexCursor +2

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities. Runs locally from the agent-security-scanner-mcp npm package.

not rated 124 +1 yesterday A tokens not measured original MIT

mcp

34

auth0/auth0-mcp-server

MCP server Claude CodeCodexCursor +2 ✓ vendor

Auth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural language. Runs locally from the @auth0/auth0-mcp-server npm package.

not rated 122 4d ago A tokens not measured original MIT

frida-mcp

35

zhizhuodemao/frida-mcp

MCP server Claude CodeCodexCursor +2

Model Context Protocol implementation for Frida. Runs locally from the frida-mcp Python package.

not rated 121 +1 11mo ago A tokens not measured

dvalincode

36

arthurpanhku/dvalincode

MCP server Claude CodeCodexCursor +2

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked. Runs locally from the dvalincode npm package.

not rated 117 today A tokens not measured original MIT

victoriametrics

37

Smana/cloud-native-ref

MCP server Claude CodeCodexCursor +2

One of 6 in .mcp.json

MCP server "victoriametrics" as configured in Smana/cloud-native-ref. Launched with /usr/local/bin/mcp-victoriametrics. Needs 2 environment variables to run.

not rated 103 today A tokens not measured original Apache-2.0

Pantheon-Security/notebooklm-mcp-secure

MCP server Claude CodeCodexCursor +2

Security-hardened NotebookLM MCP with post-quantum encryption. Runs locally from the @pan-sec/notebooklm-mcp npm package.

not rated 86 +1 1mo ago A tokens not measured original MIT

kali

39

SeaC-25/Kali-Security-MCP

MCP server Claude CodeCodexCursor +2

One of 3 in .mcp.json

MCP server "kali" as configured in SeaC-25/Kali-Security-MCP. Launched with C:\Windows\py.exe -3 mcp_server.py --tool-profile harness. Needs 2 environment variables to run.

not rated 80 2mo ago A tokens not measured original MIT

cloud-audit

41

gebalamariusz/cloud-audit

MCP server Claude CodeCodexCursor +2

Open-source, read-only AWS security scanner. 110 checks across 25 services, 31 attack-chain rules, 64 IAM escalation methods (incl. lateral AssumeRole graph), Proof Mode exploitability verification, data perimeter and Bedrock AgentCore checks, Blast Radius CLI, Threat Feed, What-If simulator, AI-SPM, 6 compliance…

not rated 72 4d ago A tokens not measured original MIT

js-reverse-mcp

42

lwjjike/JSReverser-Strong-MCP

MCP server Claude CodeCodexCursor +2

A local MCP server that gives AI agents tools for investigating web-page JavaScript, including protections against detection by websites.

not rated 70 6mo ago A tokens not measured original Apache-2.0

Snyk

43

snyk/studio-recipes

MCP server Claude CodeCodexCursor +2

snyk library and cli utility. Runs locally from the snyk npm package.

not rated 67 +1 4d ago A tokens not measured original Apache-2.0

sonarqube

44

dismine/valentina

MCP server Claude CodeCodexCursor +2

MCP server "sonarqube" as configured in dismine/valentina. Launched with sonar run mcp --project dismine_valentina.

not rated 67 4d ago A tokens not measured GPL-3.0

depwire

45

depwire/depwire

MCP server Claude CodeCodexCursor +2

Dependency graph + 24 MCP tools. Impact analysis, simulation, security, agent coordination. Runs locally from the depwire-cli npm package.

not rated 64 5d ago A tokens not measured

Snyk Security

46

lirantal/agent-rules

MCP server Gemini CLI

snyk library and cli utility. Runs locally from the snyk npm package.

not rated 64 5d ago A Socket: warn tokens not measured original Apache-2.0

vanta-mcp-server

47

VantaInc/vanta-mcp-server

MCP server Claude CodeCodexCursor +2

Model Context Protocol server for Vanta's security compliance platform. Runs locally from the @vantasdk/vanta-mcp-server npm package.

not rated 63 4mo ago A tokens not measured original MIT archived

deptrust

48

clidey/deptrust

MCP server Claude CodeCodexCursor +2

Install deptrust, a local package vulnerability checker and MCP server for AI agents. Runs locally from the @clidey/deptrust npm package.

not rated 61 8d ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: