Security mcp servers

1,924 tagged Security, measured the same way as everything else here.

Browse within: compliance 73ai-security 68ai-governance 60AI Safety 57cybersecurity 46devsecops 40agent-security 35audit 32pipeworx 31llm-security 30Guardrails 25fastmcp 24CVE 23ed25519 23

operant-mcp

97

operantlabs/operant-mcp

MCP server Claude CodeCodexCursor +2

Security testing MCP server for penetration testing, forensics, and vulnerability assessment. Runs locally from the operant-mcp npm package.

22 +1 5mo ago A tokens not measured original MIT

krait-solodit

98

ZealynxSecurity/krait

MCP server Claude CodeCodexCursor +2

MCP server "krait-solodit" as configured in ZealynxSecurity/krait. Runs mcp-servers/solodit/build/index.js with node.

22 22d ago A tokens not measured original MIT

agentlens

99

agentkitai/agentlens

MCP server Claude CodeCodexCursor +2

Tamper-evident, SHA-256 hash-chained audit trail and observability for AI agents. Runs locally from the @agentkitai/agentlens-mcp npm package.

22 3d ago A tokens not measured original MIT

crowdsec-local-mcp

100

crowdsecurity/crowdsec-local-mcp

MCP server Claude CodeCodexCursor +2

An MCP exposing prompts and tools to help users write WAF rules, scenarios etc. Runs locally from the crowdsec-local-mcp Python package.

22 21d ago A tokens not measured original MIT

nslookup

101

NsLookup-io/nslookup-mcp

MCP server Claude CodeCodexCursor +2

DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks. Runs locally from the @nslookup-io/mcp-server npm package.

22 1mo ago A tokens not measured original Apache-2.0

sentinel-ai

102

MaxwellCalkin/sentinel-ai

MCP server Claude CodeCodexCursor +2

Part of sentinel-ai

MCP server "sentinel-ai" as configured in MaxwellCalkin/sentinel-ai. Runs sentinel.mcp_server with python.

21 5mo ago A tokens not measured original Apache-2.0

hush

103

royashbrook/hush

MCP server Claude CodeCodexCursor +2

A secret store for AI agents: the agent never sees the plaintext. Remote server at royashbrook.com.

20 19d ago A tokens not measured original MIT

1password

104

CakeRepository/1Password-MCP

MCP server Claude CodeCodexCursor +2

MCP server for 1Password service accounts — tools and resources for vaults and credentials. Runs locally from the @takescake/1password-mcp npm package. Needs 3 environment variables to run.

20 1mo ago A tokens not measured original Apache-2.0

gophish-mcp-server

105

dan1t0/gophish-mcp

MCP server Claude CodeCodexCursor +2

MCP server "gophish-mcp-server" as configured in dan1t0/gophish-mcp. Runs locally from the gophish-mcp-server Python package.

20 2mo ago A tokens not measured original MIT

sonarqube

106

DiegoFleitas/letterboxd-movie-justwatch

MCP server Claude CodeCodexCursor +2

MCP server "sonarqube", hosted remotely at api.sonarcloud.io, as configured in DiegoFleitas/letterboxd-movie-justwatch.

20 15d ago A tokens not measured GPL-3.0

tooltrust-scanner

107

AgentSafe-AI/tooltrust-scanner

MCP server Claude CodeCodexCursor +2

Scans MCP servers for prompt injection, data exfiltration, and privilege escalation. Runs locally from the tooltrust-mcp npm package.

19 8d ago A tokens not measured original MIT

mcp-cyberbro

108

stanfrbd/mcp-cyberbro

MCP server Claude CodeCodexCursor +2

Part of cyberbro

Model Context Protocol server for Cyberbro IOC analysis and enrichment. Runs locally from the mcp-cyberbro Python package. Needs 9 environment variables to run.

19 29d ago A tokens not measured original MIT

mcp-ethical-hacking

109

cmpxchg16/mcp-ethical-hacking

MCP server Claude CodeCodexCursor +2

MCP server "mcp-ethical-hacking" as configured in cmpxchg16/mcp-ethical-hacking. Launched with https://github.com/cmpxchg16/mcp-ethical-hacking/releases/download/v1.4.0/server.

19 11mo ago A tokens not measured

guardlink

110

Bugb-Technologies/guardlink

MCP server Claude CodeCodexCursor +2

MCP server "guardlink" as configured in Bugb-Technologies/guardlink. Launched with guardlink mcp.

19 7d ago A tokens not measured original MIT

mastyf.ai

111

mastyf-ai/mastyf.ai

MCP server Claude CodeCodexCursor +2

Runtime proxy for MCP security, cost governance & audit. Runs locally from the @mastyf_ai/server npm package. Needs 3 environment variables to run.

18 4d ago A tokens not measured AGPL-3.0

Nekzus/npm-sentinel-mcp

MCP server Claude CodeCodexCursor +2

Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend… Remote server at server.smithery.ai.

18 9d ago A tokens not measured original MIT

npm-sentinel-mcp

113

Nekzus/npm-sentinel-mcp

MCP server Claude CodeCodexCursor +2

NPM Sentinel MCP - AI-powered NPM package analysis for security, dependencies, and performance. Runs locally from the @nekzus/mcp-server npm package.

18 9d ago A tokens not measured original MIT

xuanmu-bugbounty-mcp

114

guaidao2/Xuanmu-Bugbounty-mcp

MCP server Claude CodeCodexCursor +2

MCP server "xuanmu-bugbounty-mcp" as configured in guaidao2/Xuanmu-Bugbounty-mcp. Runs locally from the xuanmu-bugbounty-mcp Python package.

18 1mo ago A tokens not measured

mitmproxy-mcp

115

lucasoeth/mitmproxy-mcp

MCP server Claude CodeCodexCursor +2

MITM proxy manager with MCP integration. Runs locally from the mitmproxy-mcp Python package.

18 1y ago A tokens not measured

prism-scanner

116

aidongise-cell/prism-scanner

MCP server Claude CodeCodexCursor +2

Security scanner for AI Agent skills, plugins, and MCP servers. Runs locally from the prism-scanner Python package.

18 +5 4mo ago A tokens not measured original Apache-2.0

attestix

117

VibeTensor/attestix

MCP server Claude CodeCodexCursor +2

Attestix - Attestation Infrastructure for AI Agents. DID-based agent identity, W3C Verifiable Credentials, EU AI Act compliance, delegation chains, and reputation scoring. 47 MCP tools across 9 modules. Runs locally from the attestix Python package.

17 6d ago A tokens not measured original Apache-2.0

frida-agent

118

Gindhar2112/frida-mcp

MCP server Claude CodeCodexCursor +2

MCP server "frida-agent" as configured in Gindhar2112/frida-mcp. Launched with frida-mcp.

16 3d ago A tokens not measured

phantom-secrets-mcp

119

ashlrai/phantom-secrets

MCP server Claude CodeCodexCursor +2

Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm tokens. Runs locally from the phantom-secrets-mcp npm package.

16 14d ago A tokens not measured original MIT

dfir-threatintel

120

samaritan0/dfir-agentic-suite

MCP server Claude CodeCodexCursor +2

MCP server "dfir-threatintel" as configured in samaritan0/dfir-agentic-suite. Runs dfir_threatintel_mcp with python3. Needs 5 environment variables to run.

16 5mo ago A tokens not measured

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: