Security MCP servers

1,823 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 270model-context-protocol 246compliance 74ai-security 70cli 66ai-governance 61AI Safety 58LLM 54cybersecurity 44devsecops 40agent-security 35agentic-ai 34ai-tools 33audit 32

hackmyip-mcp

817

0xvibly/hackmyip-mcp

MCP server Claude CodeCodexCursor +2

Free no-key IP intelligence: geolocation, VPN detection, DNS, WHOIS, blacklists, breach checks. Remote server at hackmyip.com.

not rated 0 1mo ago A tokens not measured original MIT

ghosthunt

818

78degrees/ghosthunt

MCP server Claude CodeCodexCursor +2

Find every leaked secret on your machine — API keys in .env files, shell history, and configs. Runs locally from the ghosthunt npm package. Needs 1 environment variable to run.

not rated 0 3mo ago A tokens not measured

agent-action-gate

819

AAH20/agent-action-gate

MCP server Claude CodeCodexCursor +2

MCP server "agent-action-gate" as configured in AAH20/agent-action-gate. Launched with https://github.com/AAH20/agent-action-gate/releases/download/v0.2.0/agent-action.

not rated 0 23d ago A tokens not measured original MIT

mcp-server-vault

820

AIWerk/mcp-server-vault

MCP server Claude CodeCodexCursor +2

Bitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets. Runs locally from the @aiwerk/mcp-server-vault npm package. Needs 5 environment variables to run.

not rated 0 29d ago A tokens not measured original MIT

phi-guard-mcp

821

Abidit/phi-guard-mcp

MCP server Claude CodeCodexCursor +2

Local-first PHI detection for source code, LLM prompts, logs, and analytics. Runs locally from the phi-guard-mcp npm package.

not rated 0 5d ago A tokens not measured original MIT

ai-firewall-mcp

822

Akhilucky/AI-firewall

MCP server Claude CodeCodexCursor +2

MCP server for AI Firewall - multi-agent LLM security layer. Runs locally from the ai-firewall-mcp Python package.

not rated 0 3mo ago A tokens not measured original MIT

ci-sentinel

823

Baneado98/ci-sentinel

MCP server Claude CodeCodexCursor +2

Multi-CI security scanner with a live threat-intel feed of compromised CI components. Remote server at ci-sentinel.vercel.app.

not rated 0 2mo ago A tokens not measured original MIT

cloud-pathfinder

824

Baneado98/cloud-pathfinder

MCP server Claude CodeCodexCursor +2

IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s. Remote server at cloud-pathfinder.vercel.app.

not rated 0 2mo ago A tokens not measured original MIT

import-guardian

825

Baneado98/import-guardian

MCP server Claude CodeCodexCursor +2

Catch AI-hallucinated (slopsquatted) npm imports in generated code before npm install. Runs locally from the import-guardian-mcp npm package.

not rated 0 2mo ago A tokens not measured original MIT

domainintel-mcp

826

Bishop81/domainintel-mcp

MCP server Claude CodeCodexCursor +2

Domain intelligence for agents: WHOIS, DNS, SSL/TLS, security headers, reputation, subdomains. Runs locally from the @domainintel/mcp npm package.

not rated 0 1mo ago A tokens not measured original MIT

agent-envelope-mcp

827

BlackBoxEngineering/agent-envelope-mcp

MCP server Claude CodeCodexCursor +2

Neutral MCP server for AgentEnvelope authority: sovereign verify + vault verify/lookup/mint. Runs locally from the agent-envelope-mcp npm package. Needs 1 environment variable to run.

not rated 0 yesterday A tokens not measured original Apache-2.0

email-deliverability

828

Br0ski777/email-deliverability-x402

MCP server Claude CodeCodexCursor +2

Audit email domain deliverability: SPF, DKIM, DMARC, MX. Score 0-100. x402. Remote server at email-deliverability.api.klymax402.com.

not rated 0 6d ago A tokens not measured original MIT

agent-scan

829

BackBond/agent-scan

MCP server Claude CodeCodexCursor +2

Local static screening for MCP and AI-agent tool metadata before attachment. Runs locally from the @backbond/agent-scan npm package.

not rated 0 yesterday A tokens not measured original MIT

email-verification

830

Br0ski777/email-verification-x402

MCP server Claude CodeCodexCursor +2

Verify emails: syntax, MX records, disposable detection, quality score 0-100. x402 USDC. Remote server at email-verification.api.klymax402.com.

not rated 0 6d ago A tokens not measured original MIT

CSOAI-ORG/agent-audit-logger-mcp

MCP server Claude CodeCodexCursor +2

Hash-chained HMAC-signed audit log MCP for A2A (agent-to-agent) calls. Every tool-call, agent-handoff, decision gets a tamper-evident signed record. EU AI Act Art 12 automatic logs, DORA Art 17 ICT incident logs, ISO 42001 clause 9 monitoring — auditor-ready end-of-day attestations. By MEOK AI Labs. Runs locally from…

not rated 0 2mo ago A tokens not measured original MIT

CSOAI-ORG/agent-data-residency-mcp

MCP server Claude CodeCodexCursor +2

Agent data residency + GDPR Chapter V transfer-basis runtime guard. Programmatically answer 'where does this data live?' for agent-to-agent transfers. Adequacy decisions, SCCs, BCRs, EU AI Act Article 10. Runs locally from the agent-data-residency-mcp Python package.

not rated 0 2mo ago A tokens not measured original MIT

CSOAI-ORG/agent-identity-trust-mcp

MCP server Claude CodeCodexCursor +2

Agent Identity Trust tools for AI agents. Capabilities: register agent identity, issue credential, verify credential. Built by MEOK AI Labs. Runs locally from the agent-identity-trust-mcp Python package.

not rated 0 5d ago A tokens not measured original MIT

CSOAI-ORG/agent-incident-relay-mcp

MCP server Claude CodeCodexCursor +2

Agent Incident Relay MCP — Article 73 5-clock broadcaster. One incident → simultaneous signed reports to EU AI Act Art 73, DORA Art 19, NIS2 Art 23, GDPR Art 33, ISO 42001 cl 10.1. By MEOK AI Labs. Runs locally from the agent-incident-relay-mcp Python package.

not rated 0 2mo ago A tokens not measured

CSOAI-ORG/agent-prompt-injection-firewall-mcp

MCP server Claude CodeCodexCursor +2

The WAF for agents. Pattern-based + heuristic firewall scans prompts, RAG documents, tool arguments, A2A payloads for OWASP LLM01 prompt injection BEFORE they reach a downstream agent. Curated from OWASP + academia + production incidents. Runs locally from the agent-prompt-injection-firewall-mcp Python package.

not rated 0 6d ago A tokens not measured original MIT

CSOAI-ORG/agent-policy-enforcement-mcp

MCP server Claude CodeCodexCursor +2

Per-agent-pair IAM for A2A. Define policies ('orchestrator may call billing only when amount<1000'), gate every A2A call via evaluatecall. EU AI Act Art 14 + ISO 42001 Annex A.7 evidence with signed policy-decision attestations. Runs locally from the agent-policy-enforcement-mcp Python package.

not rated 0 2mo ago A tokens not measured original MIT

ai-bom-mcp

837

CSOAI-ORG/ai-bom-mcp

MCP server Claude CodeCodexCursor +2

AI Bill of Materials (AI-BOM) generator + auditor MCP — CycloneDX ML-BOM, SPDX 3.0 AI profile, EU AI Act Annex IV mapping, NIST AI RMF alignment, US EO 14028 federal procurement. By MEOK AI Labs. Runs locally from the ai-bom-mcp Python package.

not rated 0 5d ago A tokens not measured original MIT

CSOAI-ORG/ai-incident-reporting-mcp

MCP server Claude CodeCodexCursor +2

AI Incident Reporting Compliance MCP. Unified classification + reporting-clock tracker across EU AI Act Article 73, DORA Article 19, NIS2 Article 23, GDPR Article 33, ISO/IEC 42001 clause 9, and UK AISI voluntary frontier-model reporting. One incident → all regime clocks in parallel. HMAC-signed post-incident…

not rated 0 2mo ago A tokens not measured original MIT

ai-ops-mcp

839

CSOAI-ORG/ai-ops-mcp

MCP server Claude CodeCodexCursor +2

Ai Ops MCP server. Tools: system health check, check service, security scan. Built by MEOK AI Labs. Runs locally from the ai-ops-mcp Python package.

not rated 0 5d ago A tokens not measured original MIT

blockchain-ai-mcp

840

CSOAI-ORG/blockchain-ai-mcp

MCP server Claude CodeCodexCursor +2

MCP server for blockchain ai. Features wallet analyzer, transaction tracer, smart contract auditor. From MEOK AI Labs. Runs locally from the blockchain-ai-mcp Python package.

not rated 0 5d ago A tokens not measured original MIT