Security MCP servers

1,825 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 270model-context-protocol 246compliance 74ai-security 70cli 66ai-governance 61AI Safety 58LLM 54cybersecurity 44devsecops 40agent-security 35agentic-ai 34ai-tools 33audit 32

radmail-mcp

769

radmail-ai/radmail-mcp

MCP server Claude CodeCodexCursor +2

Email OS for agents - real-inbox search, triage, commitments, and a verifiable BEC hard-stop. Runs locally from the radmail-mcp npm package.

not rated 0 6d ago A tokens not measured original MIT

radmail-mcp

770

dougsureel-tech/radmail-mcp

MCP server Claude CodeCodexCursor +2

RadMail MCP server — email operating system for agents: two-axis triage (importance x urgency), a 'Right Now' lane, commitment follow-through, reviewable drafts, and a machine-verifiable BEC hard-stop (money / changed-banking / first-contact / decision /. Runs locally from the radmail-mcp npm package.

not rated 0 2mo ago A tokens not measured copy · 100% MIT

rail-score

771

Responsible-AI-Labs/rail-score-mcp

MCP server Claude CodeCodexCursor +2

Responsible-AI guardrails for agents: scoring with policy, injection & PII detection, DPDP. Remote server at mcp.responsibleailabs.ai.

not rated 0 2mo ago A tokens not measured original MIT

safe4

772

Safe4AI/safe4-mcp

MCP server Claude CodeCodexCursor +2

Tests an AI agent's purchase against the task it was given. Paid per call in USDC via x402. Remote server at api.safe4.ai.

not rated 0 12d ago A tokens not measured original MIT

PabloLec-keyprobe-mcp

773

PabloLec/KeyProbe-MCP

MCP server Claude CodeCodexCursor +2

Audit certificates and keystores to surface expiry risks, weak algorithms, and misconfigurations.… Remote server at server.smithery.ai.

not rated 0 12mo ago A tokens not measured original Apache-2.0

scry

774

TunnelMind/scry-mcp

MCP server Claude CodeCodexCursor +2

Free IPv4 lookups against a distributed attacker-observation corpus. Remote server at mcp.tunnelmind.ai.

not rated 0 3mo ago A tokens not measured archived

vantic

775

vanticlabs/vantic

MCP server Claude CodeCodexCursor +2

Verify an AI agent's payment authority: signed mandates, allowlists, and tamper-proof receipts. Runs locally from the @vantic/sdk npm package.

not rated 0 1mo ago A tokens not measured original Apache-2.0

pseudonym-mcp

776

woladi/pseudonym-mcp

MCP server Claude CodeCodexCursor +2

Locally pseudonymizes sensitive text before cloud LLM work and restores the tokens afterward. Runs locally from the pseudonym-mcp npm package.

not rated 0 4d ago A tokens not measured original MIT

mcp-server

778

blackducksoftware/mcp-server

MCP server Claude CodeCodexCursor +2

AI-powered security scanning using Black Duck Signal for vulnerability detection. Runs locally from the @black-duck/mcp-server npm package.

not rated 0 6d ago A tokens not measured original MIT

blackwall

779

bluetieroperations-create/blackwall-mcp

MCP server Claude CodeCodexCursor +2

API-key pre-action risk gate: any irreversible agent action (money, SQL, delete, email). Runs locally from the blackwall-mcp npm package. Needs 2 environment variables to run.

not rated 0 11d ago A tokens not measured

Checkmarx

780

Checkmarx/cx-agentic-ai

MCP server Claude CodeCodexCursor +2

MCP server "Checkmarx" as configured in Checkmarx/cx-agentic-ai. Launched with sh ${PLUGIN_ROOT}/hooks/cx_run.sh mcp bridge.

not rated 0 yesterday A tokens not measured original Apache-2.0

a2aidentitytoll-mcp

781

clauxel/a2a-identity-toll-mcp

MCP server Claude CodeCodexCursor +2

Remote MCP for A2A caller identity, scope policy, verdict receipts, and audit history. Remote server at a2aidentitytoll.clauxel.com.

not rated 0 3mo ago A tokens not measured original MIT

bumblebeereceipt-mcp

783

clauxel/bumblebee-endpoint-receipt-mcp

MCP server Claude CodeCodexCursor +2

A paid remote MCP for developer endpoint scanner MCP, built to return verdicts, receipts, usage logs. Remote server at bumblebeereceipt.clauxel.com.

not rated 0 3mo ago A tokens not measured

clauxel/copilot-cli-switch-gate-mcp

MCP server Claude CodeCodexCursor +2

Remote MCP for Copilot CLI switch gate MCP, structured receipts, audit logs, and reviewer-ready evid. Remote server at copilotcliswitchgate.clauxel.com.

not rated 0 3mo ago A tokens not measured original MIT

mcpoauthscopegate-mcp

786

clauxel/mcp-oauth-scope-gate-mcp

MCP server Claude CodeCodexCursor +2

OAuth scope approvals and consent receipts for remote MCP servers. Remote server at mcpoauthscopegate.clauxel.com.

not rated 0 3mo ago A tokens not measured

mcpscopeconsent-mcp

787

clauxel/mcp-scope-consent-mcp

MCP server Claude CodeCodexCursor +2

Remote MCP for MCP consent scope receipt, structured receipts, audit logs, and reviewer-ready eviden. Remote server at mcpscopeconsent.clauxel.com.

not rated 0 3mo ago A tokens not measured original MIT

safetyreplay-mcp

788

clauxel/safety-replay-gate-mcp

MCP server Claude CodeCodexCursor +2

Paid remote MCP for safety replays, policy gates, eval receipts, and release evidence. Remote server at safetyreplay.clauxel.com.

not rated 0 3mo ago A tokens not measured

tracepiishield-mcp

789

clauxel/tracepii-shield-mcp

MCP server Claude CodeCodexCursor +2

PII scanning and redaction receipts for LLM traces and tool payloads. Remote server at tracepiishield.clauxel.com.

not rated 0 3mo ago A tokens not measured

demipass

790

bildow/demipass

MCP server Claude CodeCodexCursor +2

Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context. Runs locally from the demipass npm package. Needs 2 environment variables to run.

not rated 0 3d ago A tokens not measured

security-intel-mcp

791

datakoot/security-intel-mcp

MCP server Claude CodeCodexCursor +2

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys. Remote server at security.datakoot.com.

not rated 0 yesterday A tokens not measured original MIT

crypto-safety

792

zvmzaretsky/crypto-safety-mcp

MCP server Claude CodeCodexCursor +2

Read-only crypto safety: token honeypot checks, EIP-712 signature decode, approval scans. Remote server at safe.fabtally.com.

not rated 0 1mo ago A tokens not measured original MIT