Security MCP servers

Vip3r-MC/pwncat-mcp

MCP server Claude CodeCodexCursor +2

Reverse and bind shell automation framework with MCP server. Runs locally from the pwncat-mcp Python package.

ashishgituser/bunkervm

MCP server Claude CodeCodexCursor +2

Hardware-isolated Linux sandbox for AI agents — Firecracker MicroVM + MCP. Runs locally from the bunkervm Python package.

wildfirebill-ai/git-org-group-cred-vault

MCP server Claude CodeCodexCursor +2

MCP server "git-org-group-cred-vault" as configured in wildfirebill-ai/git-org-group-cred-vault. Runs locally from the git-org-group-cred-vault npm package.

Spuddy10345/mcp-policy-gateway

MCP server Claude CodeCodexCursor +2

An authorising reverse proxy for MCP servers: capability-scoped tokens, per-tool and per-argument policy, rate limits, dry-run, and a tamper-evident audit log. Runs locally from the mcp-policy-gateway Python package.

blackhole8080-darkmatter/urlscan-mcp

MCP server Claude CodeCodexCursor +2

MCP server "urlscan-mcp" as configured in blackhole8080-darkmatter/urlscan-mcp. Runs locally from the urlscan-mcp Python package.

drummer475-94/secops-agent-triage

MCP server Claude CodeCodexCursor +2

MCP server "secops-agent-triage" as configured in drummer475-94/secops-agent-triage. Runs locally from the secops-agent-triage Python package.

thebylito/keycloak-mcp-server

MCP server Claude CodeCodexCursor +2

A comprehensive Model Context Protocol server for Keycloak administration, providing 80+ tools to manage users, realms, clients, roles, groups, sessions, events, organizations, protocol mappers, user attributes, client scopes, and identity providers direc. Runs locally from the keycloak-mcp-server npm package.

GlaserIngo/stript-mcp

MCP server Claude CodeCodexCursor +2

Stript MCP bridge. Anonymize documents with the local Stript app and restore AI answers without PII ever entering the chat. Runs locally from the @stript/mcp npm package.

JoaquinHernandez/soc-siem-mcp-

MCP server Claude CodeCodexCursor +2

MCP server "soc-siem-hunter" as configured in JoaquinHernandez/soc-siem-mcp. Runs src.server with python. Needs 5 environment variables to run.

Gentle-bae/dfir-pcap-mcp

MCP server Claude CodeCodexCursor +2

MCP server "dfir-pcap-mcp" as configured in Gentle-bae/dfir-pcap-mcp. Runs locally from the dfir-pcap-mcp Python package.

Demi8-patch/aegis

MCP server Claude CodeCodexCursor +2

Authentication library for aiohttp. Runs locally from the aegis Python package.

Cgisclair29/Rapid7-MCP

MCP server Claude CodeCodexCursor +2

MCP server "rapid7-vulnerability-export" as configured in Cgisclair29/Rapid7-MCP. Runs locally from the rapid7-vulnerability-export Python package.

layermedya/Critic-MCP

MCP server Claude CodeCodexCursor +2

A Model Context Protocol (MCP) server providing automated, read-only code review and vulnerability analysis using LLMs. Runs locally from the critic-mcp npm package.

TLB-STATION/apivault-mcp

MCP server Claude CodeCodexCursor +2

MCP server "apivault", hosted remotely at mcp.apivault.tech, as configured in TLB-STATION/apivault-mcp.

actions-marketplace-validations/subodhkc_mcp-tenant-isolation

MCP server Claude CodeCodexCursor +2

Static analysis scanner for MCP server code and multi-tenant SaaS applications. 57 deterministic rules covering tenant isolation, tool visibility, cache key scoping, RLS, IDOR, and credential vault isolation. MCP server for AI agent integration. Runs locally from the mcp-tenant-isolation npm package.

andreolf/mcp-audit

MCP server Claude CodeCodexCursor +2

npm audit for MCP servers — grade any MCP server A–F on auth, SSRF, static keys, and prompt-injection surface. Runs locally from the @andreolf/mcpaudit npm package.

atlan-it-masters/NC_sophos-central-mcp

MCP server Claude CodeCodexCursor +2

MCP server "sophos-central-mcp" as configured in atlan-it-masters/NCsophos-central-mcp. Runs locally from the sophos-central-mcp npm package.

fc0web/rei-verify

MCP server Claude CodeCodexCursor +2

A locally run MCP server that wraps four verification building blocks: verdicts, incomplete markers, audit chains, and verified execution. The name and description indicate a focus on checking and recording whether work can be trusted.

sn391/kurd

MCP server Claude CodeCodexCursor +2

Enterprise Model Context Protocol gateway with multi-tenancy, billing, RBAC, DLQ, idempotency, and secrets management. Runs locally from the kurd Python package.

brianShih/ssh-mcp-secure

MCP server Claude CodeCodexCursor +2

MCP server "ssh-mcp-secure" as configured in brianShih/ssh-mcp-secure. Runs locally from the ssh-mcp-secure npm package.

perhamm/ssh-mcp-server

MCP server Claude CodeCodexCursor +2

SSH MCP server with guard profiles, sudo from the environment, knownhosts verification and tunnels. Runs locally from the @perhamm/ssh-mcp-server npm package.

haisamar/agentguard-mcp

MCP server Claude CodeCodexCursor +2

A minimal-privilege proxy for MCP tool calls. Runs locally from the agentguard-mcp Python package.

ola-krutrim/Krutrim-MCP

MCP server Claude CodeCodexCursor +2

MCP server for Krutrim Cloud core infrastructure (VPC, compute, storage, security). Runs locally from the krutrim-mcp-server Python package.

Serrinho02/fortigate-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "fortigate-mcp-server" as configured in Serrinho02/fortigate-mcp-server. Runs locally from the fortigate-mcp-server Python package.