Security mcp servers

1,924 tagged Security, measured the same way as everything else here.

Browse within: compliance 73ai-security 68ai-governance 60AI Safety 57cybersecurity 46devsecops 40agent-security 35audit 32pipeworx 31llm-security 30Guardrails 25fastmcp 24CVE 23ed25519 23

human-mcp-server

145

HumanSecurity/human-mcp-server

MCP server Claude CodeCodexCursor +2

Model Context Protocol (MCP) server providing comprehensive cybersecurity intelligence from HUMAN Security. Offers real-time attack monitoring, threat detection, fraud prevention, PCI DSS compliance validation, and supply chain security for AI-powered app. Runs locally from the @humansecurity/human-mcp-server npm…

12 2mo ago A tokens not measured original MIT

mikrotik-mcp

146

mikrotik-mcp/mikrotik-mcp

MCP server Claude CodeCodexCursor +2

MCP server for MikroTik RouterOS — 780+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more. Runs locally from the @usex/mikrotik-mcp npm package.

12 14d ago A tokens not measured original MIT

fortianalyzer-mcp

147

rstierli/fortianalyzer-mcp

MCP server Claude CodeCodexCursor +2

MCP server "fortianalyzer-mcp" as configured in rstierli/fortianalyzer-mcp. Runs locally from the fortianalyzer-mcp Python package.

12 4d ago A tokens not measured original MIT

sabba

148

8NobleTruths/sabba

MCP server Claude CodeCodexCursor +2

SABBA: a security templates CLI and MCP server for coding agents that prove findings by running them. Runs locally from the sabba Python package.

11 +1 1mo ago A tokens not measured original Apache-2.0

glassbox-framework

149

TheBarmaEffect/glassbox

MCP server Claude CodeCodexCursor +2

Runtime constitutional verification for AI answers — claim reasoning, ECS, red team, audits. Runs locally from the @glassbox-framework/mcp npm package. Needs 4 environment variables to run.

11 14d ago A tokens not measured original Apache-2.0

vulnicheck

150

andrasfe/vulnicheck

MCP server Claude CodeCodexCursor +2

MCP server "vulnicheck" as configured in andrasfe/vulnicheck. Runs in Docker (docker.io/andrasfe/vulnicheck:main). Needs 7 environment variables to run.

11 6mo ago A tokens not measured original MIT

koma-gate-mcp

151

swnotmetal/Project-Koma

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Classifies prompt injection, jailbreaks, and out-of-scope user input before agents act on it. Runs locally from the koma-gate-mcp npm package. Needs 6 environment variables to run.

11 6d ago A tokens not measured original MIT

ida-pro-mcp

152

QYmag1c/ida-pro-mcp-multi

MCP server Claude CodeCodexCursor +2

Vibe reversing with IDA Pro. Runs locally from the ida-pro-mcp Python package.

11 1mo ago A tokens not measured original MIT

joesandboxmcp

153

joesecurity/joesandboxMCP

MCP server Claude CodeCodexCursor +2

MCP server "joesandboxmcp" as configured in joesecurity/joesandboxMCP. Runs locally from the joesandboxMCP Python package.

11 1y ago A tokens not measured original MIT

architect-to-product

154

BernhardJackiewicz/architect-to-product

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server that turns software architectures into tested, secure products. Runs locally from the architect-to-product npm package.

10 1mo ago A tokens not measured original MIT

scanner

155

bawbel/scanner

MCP server Claude CodeCodexCursor +2

Security linter and scanner for MCP servers and AI skill files. Detects toxic flows, prompt injection, tool poisoning, and supply chain attacks. Runs locally from the bawbel-scanner Python package.

10 1mo ago A tokens not measured

quantakrypto

156

quantakrypto/pqc-tools

MCP server Claude CodeCodexCursor +2

quantakrypto MCP — post-quantum readiness for AI coding agents via the Model Context Protocol. Zero runtime dependencies (stdio JSON-RPC implemented in-house). Runs locally from the @quantakrypto/mcp npm package.

10 8d ago A tokens not measured original Apache-2.0

pqc-tools

157

quantakrypto/pqc-tools

MCP server Claude CodeCodexCursor +2

Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance. Runs locally from the @quantakrypto/mcp npm package.

10 8d ago A tokens not measured original Apache-2.0

microvm-sandbox

158

CodeDuet/codeduet-microvm-ai-agent-sandbox

MCP server Claude CodeCodexCursor +2

MCP server "microvm-sandbox" as configured in CodeDuet/codeduet-microvm-ai-agent-sandbox. Runs src.mcp.server with python. Needs 3 environment variables to run.

10 11mo ago A tokens not measured

ctf-debugger

159

Aiyakami/PWN-MCP

MCP server Claude CodeCodexCursor +2

MCP server "ctf-debugger" as configured in Aiyakami/PWN-MCP. Runs locally from the ctf-debugger Python package.

10 1mo ago A tokens not measured

gef

160

guaidao2/gef-mcp-for-ctf

MCP server Claude CodeCodexCursor +2

MCP server "gef" as configured in guaidao2/gef-mcp-for-ctf. Runs /root/Desktop/gef-mcp/server.py with python.

10 1mo ago A tokens not measured

scopeblind-mcp

161

tomjwxf/scopeblind-gateway

MCP server Claude CodeCodexCursor +2

Scan, protect, and monitor APIs from AI coding tools. Device-level rate limiting. Runs locally from the scopeblind-mcp npm package.

10 +1 2mo ago A tokens not measured original MIT

stackhawk

163

stackhawk/stackhawk-mcp

MCP server Claude CodeCodexCursor +2

StackHawk MCP Server for Security Analytics and Developer Integration. Runs locally from the stackhawk-mcp Python package. Needs 1 environment variable to run.

10 +1 4mo ago A tokens not measured

royal-mcp

164

royalplugins/royal-mcp

MCP server Claude CodeCodexCursor +2

Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org. Remote server at demo.royalplugins.com.

9 4d ago A tokens not measured

HewlettPackard/gl-mcp

MCP server Claude CodeCodexCursor +2

One of 7 in server.json

HPE GreenLake audit-logs MCP Server. Runs locally from the greenlake-audit-logs-mcp Python package.

9 3mo ago A tokens not measured original Apache-2.0

arelay

166

mmmikael/arelay

MCP server Claude CodeCodexCursor +2

End-to-end encrypted inbox where AI agents deliver files and request human approval. Runs locally from the @arelay/cli npm package. Needs 2 environment variables to run.

9 26d ago A tokens not measured original MIT

starlog

167

starloghq/index

MCP server Claude CodeCodexCursor +2

Vet a package (CVEs, license, maintenance) before your AI agent uses it, plus capability discovery. Runs locally from the starloghq npm package. Needs 1 environment variable to run.

9 27d ago A tokens not measured

trentina

168

crunchtools/mcp-trentina

MCP server Claude CodeCodexCursor +2

Secure MCP gateway and quarantine for AI agent traffic — three-layer defense against prompt injection. Runs locally from the mcp-trentina-crunchtools Python package.

9 3d ago A tokens not measured AGPL-3.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: