Security MCP servers

1,865 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 299model-context-protocol 264compliance 76ai-security 74cli 69cursor 68ai-governance 60AI Safety 57LLM 57cybersecurity 46devsecops 45agent-security 41ai-tools 37llm-security 34

glassbox-framework

145

TheBarmaEffect/glassbox

MCP server Claude CodeCodexCursor +2

Runtime constitutional verification for AI answers — claim reasoning, ECS, red team, audits. Runs locally from the @glassbox-framework/mcp npm package. Needs 4 environment variables to run.

not rated 11 today A tokens not measured original Apache-2.0

vulnicheck

146

andrasfe/vulnicheck

MCP server Claude CodeCodexCursor +2

MCP server "vulnicheck" as configured in andrasfe/vulnicheck. Runs in Docker (docker.io/andrasfe/vulnicheck:main). Needs 7 environment variables to run.

not rated 11 8mo ago A tokens not measured original MIT

joesandboxmcp

147

joesecurity/joesandboxMCP

MCP server Claude CodeCodexCursor +2

MCP server "joesandboxmcp" as configured in joesecurity/joesandboxMCP. Runs locally from the joesandboxMCP Python package.

not rated 11 1y ago A tokens not measured original MIT

architect-to-product

148

BernhardJackiewicz/architect-to-product

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server that turns software architectures into tested, secure products. Runs locally from the architect-to-product npm package.

not rated 11 1mo ago A tokens not measured original MIT

microvm-sandbox

149

CodeDuet/codeduet-microvm-ai-agent-sandbox

MCP server Claude CodeCodexCursor +2

MCP server "microvm-sandbox" as configured in CodeDuet/codeduet-microvm-ai-agent-sandbox. Runs src.mcp.server with python. Needs 3 environment variables to run.

not rated 11 1y ago A tokens not measured

ctf-debugger

150

Aiyakami/PWN-MCP

MCP server Claude CodeCodexCursor +2

MCP server "ctf-debugger" as configured in Aiyakami/PWN-MCP. Runs locally from the ctf-debugger Python package.

not rated 11 3mo ago A tokens not measured

scopeblind-mcp

151

tomjwxf/scopeblind-gateway

MCP server Claude CodeCodexCursor +2

Scan, protect, and monitor APIs from AI coding tools. Device-level rate limiting. Runs locally from the scopeblind-mcp npm package.

not rated 11 3mo ago A tokens not measured original MIT

starlog

152

starloghq/index

MCP server Claude CodeCodexCursor +2

Vet a package (CVEs, license, maintenance) before your AI agent uses it, plus capability discovery. Runs locally from the starloghq npm package. Needs 1 environment variable to run.

not rated 11 +1 18d ago A tokens not measured

trentina

153

crunchtools/mcp-trentina

MCP server Claude CodeCodexCursor +2

Secure MCP gateway and quarantine for AI agent traffic — three-layer defense against prompt injection. Runs locally from the mcp-trentina-crunchtools Python package.

not rated 11 14d ago A tokens not measured AGPL-3.0

mcp-safeguard

154

SyedAnas01/mcp-safeguard

MCP server Claude CodeCodexCursor +2

Security scanner for MCP servers — detect prompt injection, credential leaks, exposed endpoints, tool poisoning, and source-level credential-handling flaws. Runs locally from the mcp-safeguard Python package.

not rated 11 yesterday A tokens not measured original MIT

crypto

155

0xReisearch/crypto-mcp-beta

MCP server Claude CodeCodexCursor +2

Simple symmetric GPG file encryption and decryption. Runs locally from the crypto Python package.

not rated 10 1y ago A tokens not measured original MIT

hacktricks-mcp-server

156

Xplo8E/hacktricks-mcp-server

MCP server Claude CodeCodexCursor +2

Search and query HackTricks pentesting documentation with quick lookup and section extraction. Runs locally from the hacktricks-mcp-server npm package.

not rated 10 6mo ago A tokens not measured original MIT

sabba

157

8NobleTruths/sabba

MCP server Claude CodeCodexCursor +2

SABBA: a security templates CLI and MCP server for coding agents that prove findings by running them. Runs locally from the sabba Python package.

not rated 9 2mo ago A tokens not measured original Apache-2.0

royal-mcp

158

royalplugins/royal-mcp

MCP server Claude CodeCodexCursor +2

Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org. Remote server at demo.royalplugins.com.

not rated 9 yesterday A tokens not measured

grype-mcp

159

anchore/grype-mcp

MCP server Claude CodeCodexCursor +2

Official Anchore Grype MCP Server for AI-assisted vulnerability scanning. Runs locally from the grype-mcp Python package.

not rated 9 1y ago A tokens not measured archived

sensitive-lexicon-mcp

160

zephyrpersonal/sensitive-lexicon-mcp

MCP server Claude CodeCodexCursor +2

MCP server for sensitive word detection using Sensitive-lexicon library. Runs locally from the sensitive-lexicon-mcp npm package.

not rated 9 1y ago A tokens not measured original MIT

fortimanager-mcp

161

jmpijll/fortimanager-mcp

MCP server Claude CodeCodexCursor +2

MCP server "fortimanager-mcp" as configured in jmpijll/fortimanager-mcp. Runs locally from the fortimanager-mcp Python package.

not rated 9 7mo ago A tokens not measured original MIT archived

mcp-request

162

godzeo/mcp-request

MCP server Claude CodeCodexCursor +2

A comprehensive HTTP client MCP server for security testing, API testing, and web automation. Runs locally from the mcp-request Python package.

not rated 9 1y ago A tokens not measured original MIT

stackhawk

163

stackhawk/stackhawk-mcp

MCP server Claude CodeCodexCursor +2

StackHawk MCP Server for Security Analytics and Developer Integration. Runs locally from the stackhawk-mcp Python package. Needs 1 environment variable to run.

not rated 9 11d ago A tokens not measured

dns

164

MadaBurns/bv-mcp

MCP server Claude CodeCodexCursor +2

DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits. Remote server at dns-mcp.blackveilsecurity.com.

not rated 9 yesterday A tokens not measured

holistis/bug-bounty-intelligence-mcp

MCP server Claude CodeCodexCursor +2

AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates. Remote server at wazir-x402.duckdns.org.

not rated 9 1mo ago A tokens not measured original MIT

rune

166

thecolourfoundation/rune

MCP server Claude CodeCodexCursor +2

MCP server "rune" as configured in thecolourfoundation/rune. Launched with https://github.com/thecolourfoundation/rune/releases/download/v0.5.1/rune-mcp-li.

not rated 9 changed 22d ago A tokens not measured original MIT

mcp-threatintel

167

aplaceforallmystuff/mcp-threatintel

MCP server Claude CodeCodexCursor +2

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker. Runs locally from the mcp-threatintel-server npm package. Needs 4 environment variables to run.

not rated 9 2mo ago A tokens not measured original MIT

mac_forensics_mcp

168

x746b/mac_forensics-mcp

MCP server Claude CodeCodexCursor +2

MCP server "macforensicsmcp" as configured in x746b/macforensics-mcp. Runs locally from the mac_forensics_mcp Python package.

not rated 9 +1 21d ago A tokens not measured original MIT