Security mcp servers

1,924 tagged Security, measured the same way as everything else here.

Browse within: compliance 73ai-security 68ai-governance 60AI Safety 57cybersecurity 46devsecops 40agent-security 35audit 32pipeworx 31llm-security 30Guardrails 25fastmcp 24CVE 23ed25519 23

mcp

49

snyk/studio-mcp

MCP server Claude CodeCodexCursor +2

Easily find and fix security issues in your applications leveraging Snyk platform capabilities. Runs locally from the snyk npm package.

54 14d ago A tokens not measured original Apache-2.0

awslabs/mcp-server-for-oscal

MCP server Claude CodeCodexCursor +2 ✓ vendor

AI agent tools for Open Security Controls Assessment Language (OSCAL). Runs locally from the mcp-server-for-oscal Python package. Needs 5 environment variables to run.

53 2mo ago A tokens not measured original Apache-2.0

EnterpriseMCP

51

microsoft/EnterpriseMCP

MCP server Claude CodeCodexCursor +2 ✓ vendor

Official Microsoft MCP Server to query Microsoft Entra data using natural language. Remote server at mcp.svc.cloud.microsoft.

52 2mo ago A tokens not measured CC-BY-4.0

mcpcap

52

mcpcap/mcpcap

MCP server Claude CodeCodexCursor +2

A modular Python MCP Server for analyzing PCAP files. Runs locally from the mcpcap Python package.

51 1mo ago A tokens not measured original MIT

zscaler-mcp-server

53

zscaler/zscaler-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "zscaler-mcp-server" as configured in zscaler/zscaler-mcp-server. Runs locally from the ${CLAUDE_PLUGIN_ROOT}/.env Python package.

50 9d ago A tokens not measured original MIT

drbinary

54

DeepBitsTechnology/claude-plugins

MCP server Claude CodeCodexCursor +2

MCP server "drbinary", hosted remotely at mcp.deepbits.com, as configured in DeepBitsTechnology/claude-plugins.

47 +1 1mo ago A tokens not measured original Apache-2.0

cybersec-toolkit

55

26zl/cybersec-toolkit

MCP server Claude CodeCodexCursor +2

MCP server "cybersec-toolkit" as configured in 26zl/cybersec-toolkit. Runs in Docker (ghcr.io/26zl/cybersec-toolkit:1.1.1). Needs 2 environment variables to run.

46 5d ago A tokens not measured original MIT

armorclaude-policy

56

armoriq/armorClaude

MCP server Claude CodeCodexCursor +2

MCP server "armorclaude-policy" as configured in armoriq/armorClaude. Runs ${CLAUDE_PLUGIN_ROOT}/scripts/bootstrap.mjs with node.

46 12d ago A tokens not measured original MIT

codeinspectus

57

Synvoya/codeinspectus

MCP server Claude CodeCodexCursor +2

Local-first MCP security scanner and CLI for AI-generated applications. Runs locally from the codeinspectus npm package.

44 8d ago A tokens not measured original Apache-2.0

mythos-agent

58

mythos-agent/mythos-agent

MCP server Claude CodeCodexCursor +2

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP. Runs locally from the mythos-agent npm package.

43 3mo ago A tokens not measured original MIT

ludus-mcp

59

NocteDefensor/LudusMCP

MCP server Claude CodeCodexCursor +2

MCP server for managing Ludus cybersecurity training environments through natural language commands. Runs locally from the ludus-mcp npm package.

41 4mo ago A tokens not measured GPL-3.0

vulnmcp

60

vulnerability-lookup/VulnMCP

MCP server Claude CodeCodexCursor +2

MCP server "vulnmcp" as configured in vulnerability-lookup/VulnMCP. Runs locally from the vulnmcp Python package.

41 +5 3d ago A tokens not measured AGPL-3.0

codex-security

61

bex-co/bex-security

MCP server Claude CodeCodexCursor +2

MCP server "codex-security" as configured in bex-co/bex-security. Launched with ./scripts/launch_codex_security_mcp --stdio.

40 3d ago A tokens not measured original Apache-2.0

signet-mcp-tools

62

Prismer-AI/signet

MCP server Claude CodeCodexCursor +2

MCP server exposing Signet cryptographic signing, verification, and content hash tools over stdio. Runs locally from the @signet-auth/mcp-tools npm package.

38 3mo ago A tokens not measured original Apache-2.0

Copenhagen0x/solana-security-standard

MCP server Claude CodeCodexCursor +2

MCP server for the Solana Security Standard (SOL-0XX): scan Solana/Anchor Rust and serve the rules to any MCP client (Cline, Copilot, Cursor, Claude, Windsurf). Runs locally from the @jelleo/solana-security-mcp npm package.

37 14d ago A tokens not measured original MIT

solana-security-mcp

64

Copenhagen0x/solana-security-standard

MCP server Claude CodeCodexCursor +2

Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients. Runs locally from the @jelleo/solana-security-mcp npm package.

37 14d ago A tokens not measured original MIT

malicious

65

AIS2Lab/MCPSecBench

MCP server Claude CodeCodexCursor +2

MCP server "malicious" as configured in AIS2Lab/MCPSecBench. Launched with uv --directory /usr/games/mcp/MCPSecCode/mcpbench run maliciousadd.py.

35 6mo ago A tokens not measured original MIT

pyghidra-lite

66

johnzfitch/pyghidra-lite

MCP server Claude CodeCodexCursor +2

Lightweight MCP server for Ghidra-based reverse engineering with iOS, Linux, and game file support. Runs locally from the pyghidra-lite Python package. Needs 1 environment variable to run.

35 2mo ago A tokens not measured original MIT

alpadalar/fortigate-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "fortigate-mcp-server" as configured in alpadalar/fortigate-mcp-server. Runs locally from the fortigate-mcp-server Python package.

34 1mo ago A tokens not measured original MIT

api

68

UPinar/contrastapi

MCP server Claude CodeCodexCursor +2

31 tools: CVE (340K+ EPSS/KEV), OSINT, threat intel, dep audit, code sec. No API key needed. Remote server at api.contrastcyber.com.

33 8d ago A tokens not measured original MIT

amittell/firewalla-mcp-server

MCP server Claude CodeCodexCursor +2

Model Context Protocol (MCP) server for Firewalla MSP API - Provides real-time network monitoring, security analysis, and firewall management through 28 specialized tools compatible with any MCP client. Runs locally from the firewalla-mcp-server npm package.

32 7d ago A tokens not measured original MIT

agent-bom

70

msaad00/agent-bom

MCP server Claude CodeCodexCursor +2

Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. Runs locally from the agent-bom Python package. Needs 1 environment variable to run.

31 2d ago A tokens not measured original Apache-2.0

evil-mcp-server

71

promptfoo/evil-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server that simulates malicious behaviors for security testing. Runs locally from the @promptfoo/evil-mcp-server npm package.

31 6d ago A tokens not measured original MIT

grantex

72

mishrasanjeev/grantex

MCP server Claude CodeCodexCursor +2

OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation. Runs locally from the @grantex/mcp npm package. Needs 1 environment variable to run.

31 3d ago A tokens not measured