Security MCP servers

1,825 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 273model-context-protocol 248compliance 75ai-security 69cli 66ai-governance 61AI Safety 58LLM 54cybersecurity 44devsecops 41agent-security 34agentic-ai 33ai-tools 33audit 32

mcp-server

1609

fidensa/mcp-server

MCP server Claude CodeCodexCursor +2

Independent AI certification authority. Trust scores, search, comparison, and verification. Runs locally from the @fidensa/mcp-server npm package. Needs 1 environment variable to run.

not rated 0 5mo ago A tokens not measured

mcp

1610

plexa-xyz/mcp

MCP server Claude CodeCodexCursor +2

Economic-safety tools for trading agents: executable quote + rug/honeypot pretrade check via x402. Runs locally from the @getplexa/mcp npm package. Needs 3 environment variables to run.

not rated 0 17d ago A tokens not measured original MIT

skarn

1611

skarn-security/skarn-dist

MCP server Claude CodeCodexCursor +2

Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted. Runs locally from the @skarn-security/skarn npm package.

not rated 0 2d ago A tokens not measured

openapi-mcp

1612

keumbang/goldpopcon-openapi-mcp

MCP server Claude CodeCodexCursor +2

A local MCP server for the Keumbang Open API, with a description partly provided in Korean. It supports looking up API specifications and creating, signing, and checking JWT-based request code.

not rated 0 3d ago A tokens not measured original MIT

merchant-check

1613

clevbot/merchant-check-mcp-

MCP server Claude CodeCodexCursor +2

Pre-payment merchant trust checks for x402 agents on Base and Solana. Remote server at mcp.gradientdecisions.com.

not rated 0 24d ago A tokens not measured

mcp-server

1614

zubovartemiy/graneth-mcp

MCP server Claude CodeCodexCursor +2

Pre-flight check for AI coding agents: hallucinated packages + secrets, 6 ecosystems, no account. Runs locally from the @graneth/mcp-server npm package.

not rated 0 4d ago A tokens not measured original MIT

mcp

1615

haruodev/tamperlens-mcp

MCP server Claude CodeCodexCursor +2

Was this document edited, did its redactions hold, is it safe for a model to read — Tamperlens API. Runs locally from the tamperlens-mcp npm package. Needs 3 environment variables to run.

not rated 0 18d ago A tokens not measured original MIT

intelthreadlinqs-mcp

1616

threadlinqs-cmd/intelthreadlinqs-mcp

MCP server Claude CodeCodexCursor +2

Threadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs. Runs locally from the intelthreadlinqs-mcp npm package. Needs 2 environment variables to run.

not rated 0 20d ago A tokens not measured original MIT

domain-check

1617

markolati85/agpc-domain-check

MCP server Claude CodeCodexCursor +2

Free SPF, DKIM, DMARC, MX deliverability check with graded shareable reports, plus referral terms. Remote server at guild.tradeuniquecapital.com.

not rated 0 1mo ago A tokens not measured original MIT

touchstone

1618

Touchstone-CV/touchstone-mcp

MCP server Claude CodeCodexCursor +2

Bitcoin-anchored, tamper-evident audit log for AI agents — record, disclose and verify actions. Runs locally from the @touchstone-cv/mcp npm package. Needs 6 environment variables to run.

not rated 0 10d ago A tokens not measured original Apache-2.0

fake-star-audit

1619

ardev-lab/fake-star-audit

MCP server Claude CodeCodexCursor +2

Transparent, dependency-free GitHub fake-star detector — LOW/MEDIUM/HIGH with per-rule evidence. Runs locally from the fake-star-audit Python package.

not rated 0 3mo ago A tokens not measured original MIT

webhook-tester

1620

Br0ski777/webhook-tester-x402

MCP server Claude CodeCodexCursor +2

Test webhook endpoints — send requests, measure latency, validate responses. x402 micropayment. Remote server at webhook-tester.api.klymax402.com.

not rated 0 10d ago A tokens not measured original MIT

actionproof

1621

Burakfenerci5/actionproof

MCP server Claude CodeCodexCursor +2

Tamper-proof audit trail for AI agents. Signed receipts, offline-verifiable, zero backend. Runs locally from the actionproof npm package.

not rated 0 2mo ago A tokens not measured original MIT

eudi-wallet-mcp

1622

CSOAI-ORG/eudi-wallet-mcp

MCP server Claude CodeCodexCursor +2

EUDI Wallet MCP — EU Digital Identity Wallet under eIDAS 2.0 for AI agent authentication. ISO 18013-5 (mDoc) + W3C VC 2.0 + OID4VC + OID4VP. By MEOK AI Labs. Runs locally from the eudi-wallet-mcp Python package.

not rated 0 2mo ago A tokens not measured

CSOAI-ORG/firmware-attestation-mcp

MCP server Claude CodeCodexCursor +2

Firmware Attestation MCP — hardware trust layer for sovereign AI. Scan firmware, check NSA-ANT-class persistence indicators (BIOS/SMM/HPA/boot-ROM), HMAC-signed firmware attestation, gate AI inference on verified hardware trust. Runs locally from the firmware-attestation-mcp Python package.

not rated 0 2mo ago A tokens not measured original MIT

iso-42005-impact-mcp

1624

CSOAI-ORG/iso-42005-impact-mcp

MCP server Claude CodeCodexCursor +2

ISO/IEC 42005:2025 AI Impact Assessment MCP — runs full lifecycle impact assessment across 6 phases × 7 impact categories. Cross-walks to EU AI Act + ISO 42001. By MEOK AI Labs. Runs locally from the iso-42005-impact-mcp Python package.

not rated 0 2mo ago A tokens not measured original MIT

CSOAI-ORG/csoai-cra-annex-iv-classifier-mcp

MCP server Claude CodeCodexCursor +2

EU Cyber Resilience Act product classifier MCP. Classifies PDEs into CRA hierarchy (default / Class I / Class II / Annex IV per Implementing Reg 2025/2392), audits the 15 Annex I cybersecurity requirements, generates Annex VIII technical docs skeleton, emits HMAC-signed classification certs. Built for 11 Dec 2027…

not rated 0 2mo ago A tokens not measured original MIT

owasp-agentic-mcp

1626

CSOAI-ORG/owasp-agentic-mcp

MCP server Claude CodeCodexCursor +2

OWASP Top 10 for AI Agents security assessment tools. Capabilities: full agent security scan, prompt injection detection, tool poisoning check, excessive agency, data leakage. Built by MEOK AI Labs. Runs locally from the owasp-agentic-mcp Python package.

not rated 0 8d ago A tokens not measured original MIT

compuute-scan-api

1627

Compuute/compuute-scan-api

MCP server Claude CodeCodexCursor +2

Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages. Remote server at scan.compuute.se.

not rated 0 18d ago A tokens not measured copy · 86% MIT

creedspace-mcp-server

1628

Creed-Space/creedspace-mcp-server

MCP server Claude CodeCodexCursor +2

Constitutional-AI safety guardrails for any LLM — personas, constitutions, adjudication. Runs locally from the @creedspace/mcp-server npm package.

not rated 0 1mo ago A tokens not measured original MIT

tridentchain

1629

DevInder1/supply-chain-scanner-public

MCP server Claude CodeCodexCursor +2

MCP server "tridentchain" as configured in DevInder1/supply-chain-scanner-public. Runs tridentchain_mcp with python3.

not rated 0 1mo ago A tokens not measured original MIT

obsify

1630

Formative-Sum41/obsify

MCP server Claude CodeCodexCursor +2

Local, privacy-preserving PII toolkit over MCP — the model reasons on shape, deterministic local code touches substance, only masked results return. Runs locally from the obsify Python package.

not rated 0 24d ago A tokens not measured original MIT

mailtype

1631

GSterlingPress/mailtype-api

MCP server Claude CodeCodexCursor +2

Email-domain intelligence: MX capability, provider, disposable status, SPF, DMARC, and MTA-STS. Remote server at mailtype-api.onrender.com.

not rated 0 29d ago A tokens not measured

nel-veil

1632

NELPROINC/nel-veil-mcp

MCP server Claude CodeCodexCursor +2

Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures. Runs locally from the nel-veil-mcp npm package. Needs 1 environment variable to run.

not rated 0 9d ago A tokens not measured original MIT