Security MCP servers

1,865 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 298model-context-protocol 263compliance 76ai-security 74cli 69cursor 68ai-governance 60AI Safety 57LLM 57cybersecurity 46devsecops 45agent-security 41ai-tools 37llm-security 34

grantex

73

mishrasanjeev/grantex

MCP server Claude CodeCodexCursor +2

OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation. Runs locally from the @grantex/mcp npm package. Needs 1 environment variable to run.

not rated 33 2d ago A tokens not measured

rapid7/rapid7-bulk-export-mcp

MCP server Claude CodeCodexCursor +2

MCP server "rapid7-vulnerability-export" as configured in rapid7/rapid7-bulk-export-mcp. Runs locally from the rapid7-vulnerability-export Python package.

not rated 33 +1 13d ago A tokens not measured original MIT

januscope

75

giancarloerra/JanuScope

MCP server Claude CodeCodexCursor +2

Local MCP proxy for tool restrictions, response redaction, audit logs, and database schema context. Runs locally from the januscope npm package. Needs 3 environment variables to run.

not rated 32 3d ago A Socket: warn tokens not measured AGPL-3.0

janee

76

rsdouglas/janee

MCP server Claude CodeCodexCursor +2

Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials. Runs locally from the @true-and-useful/janee npm package. Needs 1 environment variable to run.

not rated 31 +1 7mo ago A tokens not measured original MIT

axdithyaxo/mcp-forensic-toolkit

MCP server Claude CodeCodexCursor +2

MCP server "mcp-forensic-toolkit" as configured in axdithyaxo/mcp-forensic-toolkit. Runs locally from the mcp-forensic-toolkit Python package.

not rated 29 1y ago A tokens not measured

gnt

78

gnt-ai/gnt

MCP server Claude CodeCodexCursor +2

Git-native policy layer for AI agents: checkaction verdicts against rules approved via PR. Remote server at api.gntai.dev.

not rated 29 3d ago A tokens not measured original Apache-2.0

humane-proxy

79

Vishisht16/Humane-Proxy

MCP server Claude CodeCodexCursor +2

Lightweight, plug-and-play AI safety middleware that protects humans. Runs locally from the humane-proxy Python package. Needs 2 environment variables to run.

not rated 28 2mo ago A tokens not measured original Apache-2.0

vouch-mcp

80

vouch-protocol/vouch

MCP server Claude CodeCodexCursor +2

Model Context Protocol server that issues and verifies Vouch Credentials to authorize AI agent tool calls. Runs locally from the vouch-mcp Python package. Needs 5 environment variables to run.

not rated 28 6d ago A tokens not measured

memory-shell-mcp

81

RuoJi6/memory-shell-mcp

MCP server Claude CodeCodexCursor +2

A local MCP server for detecting and cleaning memory-resident malware in Java processes. It runs from a Python package using uvx, a tool that downloads and runs Python command-line packages.

not rated 28 9mo ago A tokens not measured original MIT

AynOps

82

AynOps/AynOps

MCP server Claude CodeCodexCursor +2

A Model Context Protocol server that gives AI Clients real-time cybersecurity reconnaissance capabilities — WHOIS, DNS enumeration, port scanning, SSL inspection, CVE lookup, IP reputation, ASN lookup and more. Runs locally from the AynOps Python package. Needs 2 environment variables to run.

not rated 28 5d ago A tokens not measured original MIT

context-firewall

83

nik1t7n/context-firewall

MCP server Claude CodeCodexCursor +2

MCP server "context-firewall" as configured in nik1t7n/context-firewall. Launched with cfw mcp.

not rated 27 2mo ago A tokens not measured

prism-scanner

84

aidongise-cell/prism-scanner

MCP server Claude CodeCodexCursor +2

Security scanner for AI Agent skills, plugins, and MCP servers. Runs locally from the prism-scanner Python package.

not rated 27 6mo ago A tokens not measured original Apache-2.0

omni-lpr

85

habedi/omni-lpr

MCP server Claude CodeCodexCursor +2

An MCP server for automatic license plate recognition. Remote server at {baseurl}.

not rated 26 3mo ago A tokens not measured original MIT

delego

86

Delego-Dev/delego

MCP server Claude CodeCodexCursor +2

Intent-bound action authorization for AI agents — authorise before a credential is used, require human approval for sensitive actions, and prove every action traces back to the instruction that authorised it. Runs locally from the delego Python package. Needs 1 environment variable to run.

not rated 25 4mo ago A tokens not measured original Apache-2.0

eu-regulations-mcp

87

Ansvar-Systems/EU_compliance_MCP

MCP server Claude CodeCodexCursor +2

Query 47 EU regulations (GDPR, NIS2, DORA, AI Act) - 2,438 articles, 3,712 recitals, ISO 27001. Runs locally from the @ansvar/eu-regulations-mcp npm package.

not rated 25 2mo ago A tokens not measured original Apache-2.0 archived

operant-mcp

88

operantlabs/operant-mcp

MCP server Claude CodeCodexCursor +2

Security testing MCP server for penetration testing, forensics, and vulnerability assessment. Runs locally from the operant-mcp npm package.

not rated 25 6mo ago A tokens not measured original MIT

krait-solodit

89

ZealynxSecurity/krait

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "krait-solodit" as configured in ZealynxSecurity/krait. Runs mcp-servers/solodit/build/index.js with node.

not rated 25 +2 19d ago A tokens not measured original MIT

ctfd-mcp

90

umbra2728/ctfd-mcp

MCP server Claude CodeCodexCursor +2

MCP server for CTFd that lets regular users browse challenges, manage dynamic instances, and submit flags. Runs locally from the ctfd-mcp Python package.

not rated 24 8mo ago A tokens not measured original Apache-2.0

mcp

91

kychee-com/run402

MCP server Claude CodeCodexCursor +2

MCP server for Run402 — full-stack backend infrastructure for AI agents: Postgres, auth, storage, serverless functions and atomic deploys. Paid with x402/MPP. Includes $0.03 image generation. Runs locally from the run402-mcp npm package. Needs 2 environment variables to run.

not rated 24 yesterday A tokens not measured original MIT

security_scanner

92

probelabs/visor

MCP server Claude CodeCodexCursor +2

One of 4 in .mcp.json

MCP server "securityscanner" as configured in probelabs/visor. Runs ./mcp/security.js with node. Needs 2 environment variables to run.

not rated 24 +1 16d ago A tokens not measured original MIT

agentlens

93

agentkitai/agentlens

MCP server Claude CodeCodexCursor +2

Tamper-evident, SHA-256 hash-chained audit trail and observability for AI agents. Runs locally from the @agentkitai/agentlens-mcp npm package.

not rated 24 today A tokens not measured original MIT

crowdsec-local-mcp

94

crowdsecurity/crowdsec-local-mcp

MCP server Claude CodeCodexCursor +2

An MCP exposing prompts and tools to help users write WAF rules, scenarios etc. Runs locally from the crowdsec-local-mcp Python package.

not rated 24 2mo ago A tokens not measured original MIT

yaraflux-mcp-server

95

ThreatFlux/YaraFlux

MCP server Claude CodeCodexCursor +2

MCP server "yaraflux-mcp-server" as configured in ThreatFlux/YaraFlux. Runs in Docker (yaraflux-mcp-server:latest).

not rated 23 13d ago A tokens not measured original MIT archived

nslookup

96

NsLookup-io/nslookup-mcp

MCP server Claude CodeCodexCursor +2

DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks. Runs locally from the @nslookup-io/mcp-server npm package.

not rated 22 3mo ago A tokens not measured original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: