Security MCP servers

1,825 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 273model-context-protocol 248compliance 75ai-security 69cli 66ai-governance 61AI Safety 58LLM 54cybersecurity 44devsecops 41agent-security 34agentic-ai 33ai-tools 33audit 32

safe-audit-fix

1561

pasindudilshan1/safe-audit-fix

MCP server Claude CodeCodexCursor +2

Safely fix npm audit vulnerabilities: one fix at a time, test after each, auto-revert anything that breaks. Usable as a CLI or as an MCP server for AI assistants. Runs locally from the safe-audit-fix npm package.

not rated 0 21d ago A tokens not measured original MIT

mcp-server-monitor

1562

nikolapP1/mcp-server-monitor

MCP server Claude CodeCodexCursor +2

A local server-monitoring tool for checking remote machines, their operating systems, services, security settings, networks, logs, and Docker resources.

not rated 0 23d ago A tokens not measured

vuln-mcp-app

1563

arrugit/vuln_mcp_app

MCP server Claude CodeCodexCursor +2

MCP server "vuln-mcp-app" as configured in arrugit/vulnmcpapp. Runs locally from the vuln-mcp-app Python package.

not rated 0 22d ago A tokens not measured

mcpsentry

1564

Roshan6335/mcpsentry

MCP server Claude CodeCodexCursor +2

Security scanner and runtime proxy for MCP servers. Runs locally from the @roshan6335/mcpsentry npm package.

not rated 0 23d ago A tokens not measured original MIT

sentinel-mcp

1565

ateeqdesktop-dot/sentinel-mcp

MCP server Claude CodeCodexCursor +2

SENTINEL MCP server — pre-execution transaction safety oracle for AI agents, paid autonomously via x402 on Base. Runs locally from the sentinel-mcp Python package.

not rated 0 22d ago A tokens not measured

agentlock-browser

1566

webpro255/agentlock-browser

MCP server Claude CodeCodexCursor +2

Provenance-gated browsing tools for AI agents, over MCP. AgentLock enforces which channel a value came from before the browser acts on it. Runs locally from the agentlock-browser Python package.

not rated 0 17d ago A tokens not measured AGPL-3.0

mcp-agent-firewall

1567

zubairz4far/mcp-agent-firewall

MCP server Claude CodeCodexCursor +2

MCP server "mcp-agent-firewall" as configured in zubairz4far/mcp-agent-firewall. Runs locally from the mcp-agent-firewall Python package.

not rated 0 22d ago A tokens not measured

mcpnewcli

1568

stealth-alpha/mcpnew

MCP server Claude CodeCodexCursor +2

Scaffold secure-by-default MCP servers (TypeScript or JavaScript) with deny-all permissions, typed tool stubs, and audit hooks pre-wired. Runs locally from the mcpnewcli npm package.

not rated 0 21d ago A tokens not measured original MIT

trmm-mcp

1569

JohnGilligan2/tactical-rmm-mcp

MCP server Claude CodeCodexCursor +2

An MCP server for TacticalRMM, with an out-of-band human approval gate for privileged actions. Runs locally from the trmm-mcp Python package.

not rated 0 22d ago A tokens not measured

mailbridge-mcp

1570

gexiro-global/mailbridge-mcp

MCP server Claude CodeCodexCursor +2

MCP server "mailbridge-mcp" as configured in gexiro-global/mailbridge-mcp. Runs locally from the @gexiro/mailbridge-mcp npm package.

not rated 0 3d ago A tokens not measured original Apache-2.0

caido-screenshot-mcp

1571

jayjpatel9717/caido-screenshot

MCP server Claude CodeCodexCursor +2

MCP server "caido-screenshot-mcp" as configured in jayjpatel9717/caido-screenshot. Runs locally from the caido-screenshot-mcp npm package.

not rated 0 21d ago A tokens not measured original MIT

copilot-datagate

1572

Caucus-Race/copilot-datagate

MCP server Claude CodeCodexCursor +2

Policy-driven, read-only MCP server for safe database access from AI tools. Runs locally from the @copilot-datagate/cli npm package. Needs 1 environment variable to run.

not rated 0 19d ago A tokens not measured original Apache-2.0

mcp-security-proxy

1573

potato-pzy/mcp-security-proxy

MCP server Claude CodeCodexCursor +2

MCP server "mcp-security-proxy" as configured in potato-pzy/mcp-security-proxy. Runs locally from the mcp-security-proxy Python package.

not rated 0 21d ago A tokens not measured

chp

1574

icohangar-ops/cubiczan-chp

MCP server Claude CodeCodexCursor +2

Consensus Hardening Protocol — Profile B capital gate, canonical JSON, and signed audit ledger for TypeScript. Runs locally from the @cubiczan/chp npm package.

not rated 0 22d ago A tokens not measured original MIT

fsguard-mcp

1575

BerkantACUN/fsguard-mcp

MCP server Claude CodeCodexCursor +2

Filesystem + git MCP server confined by symlink-resolved path containment, not string prefix matching. Runs locally from the fsguard-mcp Python package.

not rated 0 6d ago A tokens not measured original MIT

core

1576

elang2/mcp-audit-gateway

MCP server Claude CodeCodexCursor +2

MCP audit and attestation gateway — transparent proxy with cryptographic attestation, policy enforcement, and OTel export. Runs locally from the @mcp-audit-gateway/core npm package.

not rated 0 6d ago A tokens not measured original MIT

nohosa001-pixel/security-gate-x402

MCP server Claude CodeCodexCursor +2

MCP server "agent-security-gate-x402" as configured in nohosa001-pixel/security-gate-x402. Runs locally from the agent-security-gate-x402 Python package.

not rated 0 2d ago A tokens not measured original MIT

echo-credential-broker

1578

echoomegaprime/echo-credential-broker

MCP server Claude CodeCodexCursor +2

MCP server "echo-credential-broker" as configured in echoomegaprime/echo-credential-broker. Runs scripts/mcp-stdio.ts with node. Needs 1 environment variable to run.

not rated 0 20d ago A tokens not measured

54ch10-mcp

1579

sachio222/54ch10-mcp

MCP server Claude CodeCodexCursor +2

MCP server "54ch10-mcp" as configured in sachio222/54ch10-mcp. Runs locally from the 54ch10-mcp npm package. Needs 2 environment variables to run.

not rated 0 3d ago A tokens not measured original MIT

technocore-signer-mcp

1580

kenkenbobo/technocore-signer-mcp

MCP server Claude CodeCodexCursor +2

MCP server "technocore-signer-mcp" as configured in kenkenbobo/technocore-signer-mcp. Runs locally from the technocore-signer-mcp Python package.

not rated 0 19d ago A tokens not measured original Apache-2.0

pleamo-mcp

1581

pleamo/pleamo-mcp

MCP server Claude CodeCodexCursor +2

pleamo MCP server — expose AI scam/phishing URL checks as tools for any MCP client (Claude Desktop, Cursor, agents). Runs locally from the pleamo-mcp npm package.

not rated 0 19d ago A tokens not measured original MIT

secretscan-mcp-server

1582

wedo911/secretscan-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "secretscan-mcp-server" as configured in wedo911/secretscan-mcp-server. Runs locally from the secretscan-mcp-server npm package.

not rated 0 18d ago A tokens not measured original MIT

technocore-ts

1583

noncesense67-spec/technocore-ts

MCP server Claude CodeCodexCursor +2

Unofficial TypeScript client for technocore.chat: correct Ed25519 signing, technocore-e2e-v1 mailbox encryption (X25519+HKDF+AES-GCM), one-call E2E handshakes, a subscribe() inbox loop, a keygen/register/say/read/checkin CLI, crash-safe nonces, secure-by. Runs locally from the technocore-ts npm package.

not rated 0 yesterday A tokens not measured original Apache-2.0

tf-approval-gate

1584

SORABH13/tf-approval-gate

MCP server Claude CodeCodexCursor +2

MCP server that lets AI agents plan, policy-check, cost-estimate, and apply Terraform changes -- but only after a real human approves in Slack (or CLI in dev mode). Runs locally from the tf-approval-gate npm package.

not rated 0 16d ago A tokens not measured original MIT