Security MCP servers

1,825 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 270model-context-protocol 246compliance 74ai-security 70cli 66ai-governance 61AI Safety 58LLM 54cybersecurity 44devsecops 40agent-security 35agentic-ai 34ai-tools 33audit 32

mcpsharksec

649

mcp-shark/MCPSec

MCP server Claude CodeCodexCursor +2

The security linter for MCP — scan any server for compliance with the MCP spec, OWASP MCP Top 10, and FastMCP baseline. Runs locally from the mcpsharksec Python package.

not rated 1 6mo ago A tokens not measured

Hackerobi/velociraptor-forensic-mcp

MCP server Claude CodeCodexCursor +2

MCP server "velociraptor-forensic-mcp" as configured in Hackerobi/velociraptor-forensic-mcp. Runs locally from the velociraptor-forensic-mcp Python package.

not rated 1 6mo ago A tokens not measured original MIT

sec-mcp

651

Aomala/SEC-MCP

MCP server Claude CodeCodexCursor +2

Python toolkit providing security checks for domains, URLs, IPs, and more. Runs locally from the sec-mcp Python package.

not rated 1 9d ago A tokens not measured

sliver-mcp

652

v0idravl/sliver-mcp

MCP server Claude CodeCodexCursor +2

MCP server for Sliver C2 — AI agent automation for post-exploitation. Runs locally from the sliver-mcp Python package.

not rated 1 17d ago A tokens not measured original MIT

mcp-server

653

vorionsys/mcp-server

MCP server Claude CodeCodexCursor +2

MCP server for Vorion audit and trust primitives — pre-flight trust checks for tool execution, proof logging, tier lookup, and remote Cognigate Runtime tools. Runs locally from the @vorionsys/mcp-server npm package.

not rated 1 1mo ago A tokens not measured original Apache-2.0

selfhosted-doctor

654

Kevin9703/selfhosted-doctor

MCP server Claude CodeCodexCursor +2

AI-ready security checks for self-hosted homelabs, starting with Docker Compose. Runs locally from the selfhosted-doctor npm package.

not rated 1 2mo ago A tokens not measured original MIT

vuln-intel-mcp

655

rohanrajnist/vuln-intel-mcp

MCP server Claude CodeCodexCursor +2

Local MCP server for CVE remediation intelligence from public sources (NVD, CISA KEV, FIRST EPSS). Your model does the reasoning — no API keys, no external LLM calls, no data leaves your machine. Runs locally from the vuln-intel-mcp Python package.

not rated 1 2mo ago A tokens not measured original MIT

mcp-guardian

656

nerin81-netizen/mcp-guardian

MCP server Claude CodeCodexCursor +2

A lightweight guardian/middleware for MCP servers (auth, rate-limiting, logging, WAF, etc.). Runs locally from the mcp-guardian Python package.

not rated 1 2mo ago A tokens not measured original MIT

zero-harm-ai-mcp

657

Zero-Harm-AI/zero-harm-ai-mcp

MCP server Claude CodeCodexCursor +2

MCP server for Zero Harm AI safety checks powered by zero-harm-ai-detectors. Runs locally from the zero-harm-ai-mcp Python package.

not rated 1 26d ago A tokens not measured original MIT

vulnpilot-mcp

658

arojit/vulnpilot-mcp

MCP server Claude CodeCodexCursor +2

MCP server "vulnpilot-mcp" as configured in arojit/vulnpilot-mcp. Runs locally from the vulnpilot-mcp Python package.

not rated 1 1mo ago A tokens not measured original Apache-2.0

badchars/living-off-the-land-lolbins-mcp-server

MCP server Claude CodeCodexCursor +2

Living off the Land binaries MCP server — GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, LOLESXi, LOTP, LOLC2, WADComs intelligence with attack graph reasoning, privilege escalation paths, defense evasion, detection engineering. Runs locally from the living-off-the-land-lolbins-mcp-server npm package.

not rated 1 3d ago A tokens not measured original MIT

mcp-secure-env-elicit

660

gcorroto/mcp-secure-env-elicit

MCP server Claude CodeCodexCursor +2

MCP wrapper that launches other MCP servers with secret env vars collected interactively via elicitation — placeholders in config, values held AES-encrypted in memory, never on disk. Runs locally from the @grec0/mcp-secure-env-elicit npm package.

not rated 1 2d ago A tokens not measured original MIT

secure-telegram-mcp

661

antonorlov/secure-telegram-mcp

MCP server Claude CodeCodexCursor +2

The secure Telegram MCP server: encrypted sessions, folder-scoped access, read-only by default. Per-endpoint API keys. Runs locally from the secure-telegram-mcp npm package.

not rated 1 1mo ago A tokens not measured original MIT

mcp-tools

662

ekaone/mcp-tools

MCP server Claude CodeCodexCursor +2

MCP server exposing @ekaone utility tools for AI-assisted data masking. Runs locally from the @ekaone/mcp-tools npm package.

not rated 1 5mo ago A tokens not measured original MIT

easygoingcoder/blackduck-polaris-mcp-server

MCP server Claude CodeCodexCursor +2

Feature-rich MCP server for Black Duck Polaris — trigger SAST/SCA/DAST scans, query findings, generate reports (SBOM, SPDX, CycloneDX), manage policies, triage issues, and more. Works with Claude Code, Claude Desktop, GitHub Copilot, Cursor, and any MCP-c. Runs locally from the blackduck-polaris-mcp-server npm package.

not rated 1 5mo ago A tokens not measured original MIT

mcp-shield-runtime

664

samsgates/mcp-shield-runtime

MCP server Claude CodeCodexCursor +2

MCP server "mcp-shield-runtime" as configured in samsgates/mcp-shield-runtime. Runs locally from the mcp-shield-runtime npm package.

not rated 1 1mo ago A tokens not measured original Apache-2.0

dynamic-db-mcp-server

665

hand-by-hand/dynamic-db-mcp-server

MCP server Claude CodeCodexCursor +2

Turn any relational database into a secure MCP server by configuration: API Key auth, table ACL, SQL AST validation, audit log and a web admin console. Runs locally from the dynamic-db-mcp-server npm package.

not rated 1 22d ago A tokens not measured copy · 86% MIT

CedricG-dev/nvd-mcp

MCP server Claude CodeCodexCursor +2

MCP server "vulnerability-mcp-server" as configured in CedricG-dev/nvd-mcp. Runs locally from the vulnerability-mcp-server Python package.

not rated 1 21d ago A tokens not measured

nightgate-mcp

667

ODATANO/NIGHTGATE-MCP

MCP server Claude CodeCodexCursor +2

MCP server exposing NIGHTGATE (Midnight blockchain attestation layer) to AI agents. Runs locally from the @odatano/nightgate-mcp npm package.

not rated 1 15d ago A tokens not measured original Apache-2.0

mcp-server

668

cqnce-app/cqnce-mcp

MCP server Claude CodeCodexCursor +2

MCP server exposing cQnce human-in-the-loop authorization as AI-callable tools. Runs locally from the @cqnce/mcp-server npm package.

not rated 1 7d ago A tokens not measured original MIT

Ylyass/mcp-privilege-profiler

MCP server Claude CodeCodexCursor +2

MCP server "mcp-privilege-profiler" as configured in Ylyass/mcp-privilege-profiler. Runs locally from the mcp-privilege-profiler Python package.

not rated 1 8d ago A tokens not measured

sec-intelligence-mcp

670

jahanv01/sec-intelligence-mcp

MCP server Claude CodeCodexCursor +2

MCP server "sec-intelligence-mcp" as configured in jahanv01/sec-intelligence-mcp. Runs locally from the sec-intelligence-mcp Python package.

not rated 1 5d ago A tokens not measured original MIT

forensic-analyzer

671

Ghosthunter5599/Forensics-MCP-Server-FastMCP-Ollama

MCP server Claude CodeCodexCursor +2

MCP server "forensic-analyzer" as configured in Ghosthunter5599/Forensics-MCP-Server-FastMCP-Ollama. Launched with uv --directory /home/b47m4n/Projects/forensics-mcp-framework run src/server.py.

not rated 1 10d ago A tokens not measured

pentool-mcp-server

672

DrXOps/pentool-mcp-server

MCP server Claude CodeCodexCursor +2

MCP (stdio JSON-RPC) server for Pentool AI — local LLM assistant for pentest. Runs locally from the pentool-mcp-server Python package.

not rated 1 18d ago A tokens not measured