agentmods.dev

Security MCP servers

1,865 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 298model-context-protocol 263compliance 76ai-security 74cli 69cursor 68ai-governance 60AI Safety 57LLM 57cybersecurity 46devsecops 45agent-security 41ai-tools 37llm-security 34

Sort RelevanceRecently updatedFewest tokensSecurity gradeRepo starsStars this weekTop rated 1,865 mods

EnterpriseMCP

49

microsoft/EnterpriseMCP

MCP server Claude CodeCodexCursor +2 ✓ vendor

Official Microsoft MCP Server to query Microsoft Entra data using natural language. Remote server at mcp.svc.cloud.microsoft.

not rated 58 4mo ago A tokens not measured CC-BY-4.0

mcp

50

snyk/studio-mcp

MCP server Claude CodeCodexCursor +2

Easily find and fix security issues in your applications leveraging Snyk platform capabilities. Runs locally from the snyk npm package.

not rated 58 +3 4d ago A tokens not measured original Apache-2.0

kali-pentest-mcp-server

51

sfz009900/kalilinuxmcp

MCP server Claude CodeCodexCursor +2

MCP server "kali-pentest-mcp-server" as configured in sfz009900/kalilinuxmcp. Runs locally from the kali-pentest-mcp-server npm package.

not rated 55 1y ago A tokens not measured

vorim-mcp-server

52

Vorim-AI-Labs/vorim-mcp-server

MCP server Claude CodeCodexCursor +2

AI agent identity, permissions, trust scores, and tamper-evident audit trails via Vorim AI. Runs locally from the @vorim/mcp-server npm package. Needs 2 environment variables to run.

not rated 54 2mo ago A tokens not measured original MIT

mcp-server-for-oscal

53

awslabs/mcp-server-for-oscal

MCP server Claude CodeCodexCursor +2 ✓ vendor

AI agent tools for Open Security Controls Assessment Language (OSCAL). Runs locally from the mcp-server-for-oscal Python package. Needs 5 environment variables to run.

not rated 52 3mo ago A tokens not measured original Apache-2.0 archived

mcpcap

54

mcpcap/mcpcap

MCP server Claude CodeCodexCursor +2

A modular Python MCP Server for analyzing PCAP files. Runs locally from the mcpcap Python package.

not rated 51 13d ago A tokens not measured original MIT

codex-security

55

bex-co/bex-security

MCP server Claude CodeCodexCursor +2

MCP server "codex-security" as configured in bex-co/bex-security. Launched with ./scripts/launch_codex_security_mcp --stdio.

not rated 51 changed 16d ago A tokens not measured copy · 98% Apache-2.0

kali-tools

56

zebbern/zebbern-kali-mcp

MCP server Claude CodeCodexCursor +2

Capability-aware MCP client for a Docker-hosted Kali Linux tools API. Runs locally from the zebbern-kali-mcp Python package. Needs 1 environment variable to run.

not rated 49 +1 15d ago A Socket: warn tokens not measured original MIT

codeinspectus

57

Synvoya/codeinspectus

MCP server Claude CodeCodexCursor +2

Local-first MCP security scanner and CLI for AI-generated applications. Runs locally from the codeinspectus npm package.

not rated 48 15d ago A tokens not measured original Apache-2.0

ephemora-cell

58

MichaelS1011/ephemora-cell

MCP server Claude CodeCodexCursor +2

Ephemora Cell — The execution layer for untrusted AI-generated code. Fast, capability-based WASM execution with explicit CPU, memory, time, I/O, and filesystem limits. Runs locally from the ephemora-cell Python package.

not rated 48 3d ago A Socket: warn tokens not measured original

mythos-agent

59

mythos-agent/mythos-agent

MCP server Claude CodeCodexCursor +2

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP. Runs locally from the mythos-agent npm package.

not rated 45 4mo ago A tokens not measured original MIT

vulnmcp

60

vulnerability-lookup/VulnMCP

MCP server Claude CodeCodexCursor +2

MCP server "vulnmcp" as configured in vulnerability-lookup/VulnMCP. Runs locally from the vulnmcp Python package.

not rated 43 +1 17d ago A tokens not measured AGPL-3.0

ludus-mcp

61

NocteDefensor/LudusMCP

MCP server Claude CodeCodexCursor +2

MCP server for managing Ludus cybersecurity training environments through natural language commands. Runs locally from the ludus-mcp npm package.

not rated 41 6mo ago A tokens not measured GPL-3.0

signet-mcp-tools

62

Prismer-AI/signet

MCP server Claude CodeCodexCursor +2

MCP server exposing Signet cryptographic signing, verification, and content hash tools over stdio. Runs locally from the @signet-auth/mcp-tools npm package.

not rated 40 +1 25d ago A tokens not measured original Apache-2.0

malicious

63

AIS2Lab/MCPSecBench

MCP server Claude CodeCodexCursor +2

One of 4 in claude_desktop_config.json

MCP server "malicious" as configured in AIS2Lab/MCPSecBench. Launched with uv --directory /usr/games/mcp/MCPSecCode/mcpbench run maliciousadd.py.

not rated 40 7mo ago A tokens not measured original MIT

firewalla-mcp-server

64

amittell/firewalla-mcp-server

MCP server Claude CodeCodexCursor +2

Model Context Protocol (MCP) server for Firewalla MSP API - Provides real-time network monitoring, security analysis, and firewall management through 24 read-only tools, plus 11 opt-in write tools, compatible with any MCP client. Runs locally from the firewalla-mcp-server npm package.

not rated 39 8d ago A tokens not measured original MIT

fortigate-mcp-server

65

alpadalar/fortigate-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "fortigate-mcp-server" as configured in alpadalar/fortigate-mcp-server. Runs locally from the fortigate-mcp-server Python package.

not rated 37 12d ago A tokens not measured original MIT

presio

66

benedict-armstrong/presio

MCP server Claude CodeCodexCursor +2

Present PDFs from the browser: upload to start a slideshow or validate Presio sidecars. No auth. Remote server at presio.xyz.

not rated 37 +1 yesterday A tokens not measured original MIT

pyghidra-lite

67

johnzfitch/pyghidra-lite

MCP server Claude CodeCodexCursor +2

Lightweight MCP server for Ghidra-based reverse engineering with iOS, Linux, and game file support. Runs locally from the pyghidra-lite Python package. Needs 1 environment variable to run.

not rated 36 9d ago A tokens not measured original MIT

osint-agent-skills

68

frangelbarrera/osint-agent-skills

MCP server Claude CodeCodexCursor +2

OSINT MCP server — 23 tools: DNS, WHOIS, Shodan, breaches, GEOINT, crypto. Works with Claude Code. Runs locally from the @frangelbarrera/osint-agent-skills npm package.

not rated 36 16d ago A tokens not measured original MIT

ya-frida-mcp

69

1shin-7/ya-frida-mcp

MCP server Claude CodeCodexCursor +2

Yet Another Frida MCP Server - Full-featured MCP server for Frida dynamic instrumentation. Runs locally from the ya-frida-mcp Python package.

not rated 35 7d ago A tokens not measured

evil-mcp-server

70

promptfoo/evil-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server that simulates malicious behaviors for security testing. Runs locally from the @promptfoo/evil-mcp-server npm package.

not rated 34 +2 11d ago A tokens not measured original MIT

iso27001-mcp

71

Sushegaad/MCP-Server-for-ISO27001

MCP server Claude CodeCodexCursor +2

ISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows. Runs locally from the iso27001-mcp npm package. Needs 4 environment variables to run.

not rated 34 +2 1mo ago A tokens not measured original MIT

mcp-evernote

72

verygoodplugins/mcp-evernote

MCP server Claude CodeCodexCursor +2

Evernote note management with OAuth and ENML conversion. Runs locally from the @verygoodplugins/mcp-evernote npm package.

not rated 33 3d ago A tokens not measured

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: