Security MCP servers

1,897 tagged Security, measured the same way as everything else here.

Browse within: model-context-protocol 229compliance 73ai-security 68ai-governance 58AI Safety 56cybersecurity 45devsecops 40agent-security 33audit 32pipeworx 31llm-security 30Guardrails 24fastmcp 24CVE 23

opa-mcp

193

OrygnsCode/opa-mcp-server

MCP server Claude CodeCodexCursor +2

Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client. Runs locally from the @orygn/opa-mcp npm package. Needs 7 environment variables to run.

not rated 7 11d ago A tokens not measured original MIT

jobverify

194

yessGlory17/job-verify

MCP server Claude CodeCodexCursor +2

Agentic MCP server for detecting fake LinkedIn recruiter / job-offer scams using free OSINT sources. Runs locally from the jobverify-mcp Python package.

not rated 7 2mo ago A tokens not measured original MIT

rune

195

thecolourfoundation/rune

MCP server Claude CodeCodexCursor +2

Evidence-traced codebase understanding and security scanning for AI agents over MCP. Runs locally from the @moosl/rune npm package.

not rated 7 4d ago A tokens not measured original MIT

SAW

196

snyk/saw-mcp

MCP server Claude CodeCodexCursor +2

MCP server "SAW" as configured in snyk/saw-mcp. Runs locally from the git+https://github.com/snyk/saw-mcp.git Python package. Needs 1 environment variable to run.

not rated 7 9d ago A tokens not measured original Apache-2.0

saw-mcp

197

snyk/saw-mcp

MCP server Claude CodeCodexCursor +2

MCP server for Snyk API & Web (Probely) — create targets, run scans, manage findings. Runs locally from the snyk-apiweb-mcp Python package. Needs 1 environment variable to run.

not rated 7 9d ago A tokens not measured original Apache-2.0

skjortan23/aws-security-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "aws-security-mcp-server" as configured in skjortan23/aws-security-mcp-server. Runs locally from the aws-security-mcp-server Python package.

not rated 7 6mo ago A tokens not measured

mcp-nvd

199

gkhays/mcp-nvd-server

MCP server Claude CodeCodexCursor +2

An MCP server to interact with a the NVD Database API. Runs locally from the mcp-nvd Python package.

not rated 7 1y ago A tokens not measured original Apache-2.0

mcp-pentest

200

adriyansyah-mf/mcp-pentest

MCP server Claude CodeCodexCursor +2

SquatGuard MCP Template for Python. Runs locally from the mcp-pentest npm package.

not rated 7 11mo ago A tokens not measured

mcp-exploitdb

201

CyberRoute/mcp_exploitdb

MCP server Claude CodeCodexCursor +2

MCP server "mcp-exploitdb" as configured in CyberRoute/mcpexploitdb. Runs locally from the mcp-exploitdb Python package.

not rated 7 8mo ago A tokens not measured

terminal-guardian-mcp

202

7Majesty-M/terminal-guardian-mcp

MCP server Claude CodeCodexCursor +2

Secure Model Context Protocol server for safe, sandboxed terminal access for AI assistants. Runs locally from the terminal-guardian-mcp npm package.

not rated 7 3mo ago A tokens not measured original MIT

mcp-web-audit

203

Shen-zhihao/mcp-web-audit

MCP server Claude CodeCodexCursor +2

A local Node.js MCP server for security audits of frontend projects. It checks dependencies, which are external software packages a project relies on, in local projects and remote repositories.

not rated 7 9mo ago A tokens not measured

safebreach-mcp-server

204

SafeBreach/safebreach-mcp

MCP server Claude CodeCodexCursor +2

MCP server "safebreach-mcp-server" as configured in SafeBreach/safebreach-mcp. Runs locally from the safebreach-mcp-server Python package.

not rated 7 4d ago A tokens not measured original BSD-3-Clause

okta-mcp-server

205

YiyangLi/okta-mcp-server

MCP server Claude CodeCodexCursor +2

A Model Context Protocol server used to integrate Okta resources and Claude Desktop. Runs locally from the @yiyang.1i/okta-mcp-server npm package.

not rated 7 1y ago A tokens not measured original MIT

cwaf-external-mcp

206

ThalesGroup/imperva-cloud-WAF-MCP-server

MCP server Claude CodeCodexCursor +2

MCP server "cwaf-external-mcp" as configured in ThalesGroup/imperva-cloud-WAF-MCP-server. Runs locally from the cwaf-external-mcp Python package.

not rated 7 1mo ago A tokens not measured original Apache-2.0

mcp-threatintel

207

aplaceforallmystuff/mcp-threatintel

MCP server Claude CodeCodexCursor +2

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker. Runs locally from the mcp-threatintel-server npm package. Needs 4 environment variables to run.

not rated 7 21d ago A tokens not measured original MIT

mcp-authentik

208

Samik081/mcp-authentik

MCP server Claude CodeCodexCursor +2

Manage Authentik through AI assistants. Runs locally from the @samik081/mcp-authentik npm package. Needs 2 environment variables to run.

not rated 7 21d ago A tokens not measured original MIT

MCP-Gateway

209

PanosSalt/MCP-Gateway

MCP server Claude CodeCodexCursor +2

Multi-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging. Remote server at your-gateway.example.com.

not rated 6 5mo ago A tokens not measured original MIT

trust-oracle

210

New1Direction/webmcp-anything

MCP server Claude CodeCodexCursor +2

Independent A-F trust grade for any MCP server, watched for drift. Free, never for sale. Remote server at wmcp.sh.

not rated 6 2mo ago A tokens not measured original MIT

mcp-bastion

211

Gowthaman90/mcp-bastion

MCP server Claude CodeCodexCursor +2

Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail. Runs locally from the mcp-bastion npm package.

not rated 6 1mo ago A tokens not measured original Apache-2.0

pincer

212

VouchlyAI/Pincer-MCP

MCP server Claude CodeCodexCursor +2

Secure grip for your agent's secrets - security-hardened MCP gateway with proxy token architecture. Runs locally from the pincer-mcp npm package. Needs 4 environment variables to run.

not rated 6 6mo ago A tokens not measured

preclick-mcp

213

cybrlab-ai/preclick-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

PreClick scans links for threats and confirms intent match with high accuracy before agents click. Remote server at preclick.ai.

not rated 6 4mo ago A tokens not measured original Apache-2.0

urlcheck-mcp

214

cybrlab-ai/preclick-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

PreClick scans links for threats and confirms intent match with high accuracy before agents click. Remote server at urlcheck.ai.

not rated 6 4mo ago A tokens not measured original Apache-2.0

mcp-pfsense

215

antonio-mello-ai/mcp-pfsense

MCP server Claude CodeCodexCursor +2

MCP server for managing pfSense firewalls through AI assistants. Runs locally from the mcp-pfsense Python package.

not rated 6 17d ago A tokens not measured original MIT

pyobfus-mcp

216

zhurong2020/pyobfus

MCP server Claude CodeCodexCursor +2

Part of pyobfus

Model Context Protocol server for pyobfus — the Python obfuscator. Lets Claude Desktop, Claude Code, Cursor, GitHub Copilot, Windsurf, Zed, Codex, and CodeBuddy call pyobfus tools (preflight risk check, zero-config init, reverse stack-trace mapping) directly from an agent conversation. PyArmor alternative with…

not rated 6 4d ago A tokens not measured original Apache-2.0