Security MCP servers

1,825 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 273model-context-protocol 248compliance 75ai-security 70cli 66ai-governance 61AI Safety 58LLM 54cybersecurity 44devsecops 40agent-security 35agentic-ai 34ai-tools 33audit 32

hares

937

alialrikabi313/hares

MCP server Claude CodeCodexCursor +2

Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration). Runs locally from the @alihashim313/hares npm package.

not rated 0 5d ago A tokens not measured original MIT

altr-mcp-server

938

altrsoftware/altr-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server for ALTR data security — tag-based masking, access governance, and classification, with structured responses, middleware, and multi-transport support. Runs locally from the altr-mcp Python package. Needs 3 environment variables to run.

not rated 0 17d ago A tokens not measured

safeselect

939

antonillos/safeselect

MCP server Claude CodeCodexCursor +2

MCP server "safeselect" as configured in antonillos/safeselect. Launched with https://github.com/antonillos/safeselect/releases/download/v0.7.6/safeselect-v0..

not rated 0 today A tokens not measured original MIT

mcp-blast-radius

940

aos-standard/mcp-blast-radius

MCP server Claude CodeCodexCursor +2

See what any MCP server can touch — static blast-radius report for every target; manifest optional for divergence detection. Runs locally from the mcp-blast-radius Python package.

not rated 0 1mo ago A tokens not measured original MIT

provenance-mcp

941

apeirontrade/provenance-mcp

MCP server Claude CodeCodexCursor +2

Wash-traffic risk checks for Algorand x402 endpoints before your agent trusts or pays them. Runs locally from the provenance-mcp npm package. Needs 1 environment variable to run.

not rated 0 2mo ago A tokens not measured

attestd-mcp

942

attestd-io/attestd-mcp

MCP server Claude CodeCodexCursor +2

CVE and supply chain checks for MCP clients. Covers infrastructure, PyPI, and npm packages. Runs locally from the @attestd/mcp npm package. Needs 2 environment variables to run.

not rated 0 2mo ago A tokens not measured original MIT

seal

943

aurumflux20/seal

MCP server Claude CodeCodexCursor +2

Exactly-once admission for irreversible agent actions, world-confirmed settlement, and effect graphs with compensating seals — on a shared Postgres, with a tamper-evident certificate chain. Runs locally from the seal-kernel Python package.

not rated 0 4d ago A tokens not measured

agentvault

944

bch1212/agentvault

MCP server Claude CodeCodexCursor +2

Credential vault for AI agents — Fernet-encrypted keys, per-agent budgets, audit logs. Runs locally from the agentvault-mcp npm package. Needs 2 environment variables to run.

not rated 0 3mo ago A tokens not measured original MIT

injectshield

945

bch1212/injectshield

MCP server Claude CodeCodexCursor +2

Prompt-injection firewall for AI agents — scan untrusted text before LLM calls. Runs locally from the @injectshield/mcp npm package. Needs 2 environment variables to run.

not rated 0 3mo ago A tokens not measured original MIT

attestify-mcp

946

attestifyagent/attestify-mcp

MCP server Claude CodeCodexCursor +2

MCP stdio server for Attestify OS — governed agent execution and Attestify Trust signed evidence. Runs locally from the attestify-mcp npm package. Needs 4 environment variables to run.

not rated 0 14d ago A tokens not measured

blackdome

947

blackdome-ai/blackdome-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

BlackDome MCP Server — AI agent access to live honeypot threat intelligence, attacker IPs, IOCs, and credential intel. Runs locally from the blackdome-mcp Python package. Needs 3 environment variables to run.

not rated 0 1mo ago A tokens not measured original MIT

shield

948

bolyra/bolyra

MCP server Claude CodeCodexCursor +2

One of 4 in server.json

Stdio MCP auth proxy: wrap any MCP server with per-tool permission enforcement. Runs locally from the @bolyra/shield npm package.

not rated 0 today A tokens not measured original Apache-2.0

bounded-tools-mcp

949

bounded-systems/bounded-tools-mcp

MCP server Claude CodeCodexCursor +2

Read-only MCP server over bounded.tools's Sigstore-verified static API (stdio). Runs locally from the @bounded-systems/bounded-tools-mcp npm package. Needs 1 environment variable to run.

not rated 0 2d ago A tokens not measured original MIT

cipherhub

950

bowenerchen/CipherHUB-MCP-Server

MCP server Claude CodeCodexCursor +2

Production-grade cryptography toolkit with 31 MCP tools for classical, PQC, and KMS workflows. Remote server at tools.cipherhub.cloud.

not rated 0 4mo ago A tokens not measured

aethereum

951

br9704/aethereum

MCP server Claude CodeCodexCursor +2

The team layer for AI coding agents: shared contracts, collision alerts, E2EE sessions. Runs locally from the aethereum npm package.

not rated 0 yesterday A tokens not measured

legacy-mcp

952

harsha-moparthy/legacy-mcp

MCP server Claude CodeCodexCursor +2

Active Directory MCP Server for AI-powered assessment. Runs locally from the legacy-mcp Python package.

not rated 0 1mo ago A tokens not measured

blocktrust-trustscan

953

brnbtech770/blocktrust

MCP server Claude CodeCodexCursor +2

Trust verification for AI agents: identities, domains, phishing, contacts, Trust Circle, Vault. Remote server at blocktrust.tech.

not rated 0 5d ago A tokens not measured

brunovicco/mcp-server-auth-template

MCP server Claude CodeCodexCursor +2

MCP server "mcp-server-auth-template" as configured in brunovicco/mcp-server-auth-template. Runs in Docker (ghcr.io/brunovicco/mcp-server-auth-template:v0.6.2). Needs 10 environment variables to run.

not rated 0 5d ago A tokens not measured original MIT

heimdall

955

caglarbozkurt/mcp-heimdall

MCP server Claude CodeCodexCursor +2

Scan an MCP server or agent config for injection, exfiltration, and risky capabilities. Runs locally from the mcp-heimdall-scan npm package.

not rated 0 2mo ago A tokens not measured original MIT

sitehealth-mcp

956

carsonroell-debug/sitehealth-mcp

MCP server Claude CodeCodexCursor +2

Full website health audit — SSL, DNS, DMARC/SPF/DKIM, performance, uptime, links. Runs locally from the sitehealth-mcp npm package.

not rated 0 4mo ago A tokens not measured

filewash

957

cassilup/filewash-api

MCP server Claude CodeCodexCursor +2

Privacy-first file tools for AI agents — PDF & image ops, metadata scrubbing, background removal. Runs locally from the @fixpixel/filewash-api npm package.

not rated 0 3mo ago A tokens not measured original MIT

certindex-mcp

958

certindex/certindex-mcp

MCP server Claude CodeCodexCursor +2

MCP server exposing CertIndex's Certificate Transparency search tools to any MCP-compatible client. Runs locally from the certindex-mcp Python package. Needs 1 environment variable to run.

not rated 0 1mo ago A tokens not measured original MIT

klanex

959

chrassy/klanex-mcp

MCP server Claude CodeCodexCursor +2

Reliable async execution for agent tool calls: schema gating, retries, idempotency, audit trail. Runs locally from the klanex-mcp npm package. Needs 1 environment variable to run.

not rated 0 1mo ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: