Security MCP servers

1,865 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 299model-context-protocol 264compliance 76ai-security 74cli 69cursor 68ai-governance 60AI Safety 57LLM 57cybersecurity 46devsecops 45agent-security 41ai-tools 37llm-security 34

judges

193

KevinRabun/judges

MCP server Claude CodeCodexCursor +2

45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST. Runs locally from the @kevinrabun/judges npm package.

not rated 7 4mo ago A tokens not measured original MIT

skjortan23/aws-security-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "aws-security-mcp-server" as configured in skjortan23/aws-security-mcp-server. Runs locally from the aws-security-mcp-server Python package.

not rated 7 7mo ago A tokens not measured

mcp-nvd

195

gkhays/mcp-nvd-server

MCP server Claude CodeCodexCursor +2

An MCP server to interact with a the NVD Database API. Runs locally from the mcp-nvd Python package.

not rated 7 1y ago A tokens not measured original Apache-2.0

mcp-pentest

196

adriyansyah-mf/mcp-pentest

MCP server Claude CodeCodexCursor +2

SquatGuard MCP Template for Python. Runs locally from the mcp-pentest npm package.

not rated 7 1y ago A tokens not measured

mcp-exploitdb

197

CyberRoute/mcp_exploitdb

MCP server Claude CodeCodexCursor +2

MCP server "mcp-exploitdb" as configured in CyberRoute/mcpexploitdb. Runs locally from the mcp-exploitdb Python package.

not rated 7 10mo ago A tokens not measured

mcp-web-audit

198

Shen-zhihao/mcp-web-audit

MCP server Claude CodeCodexCursor +2

A local Node.js MCP server for security audits of frontend projects. It checks dependencies, which are external software packages a project relies on, in local projects and remote repositories.

not rated 7 10mo ago A tokens not measured

safebreach-mcp-server

199

SafeBreach/safebreach-mcp

MCP server Claude CodeCodexCursor +2

MCP server "safebreach-mcp-server" as configured in SafeBreach/safebreach-mcp. Runs locally from the safebreach-mcp-server Python package.

not rated 7 23d ago A tokens not measured original BSD-3-Clause

okta-mcp-server

200

YiyangLi/okta-mcp-server

MCP server Claude CodeCodexCursor +2

A Model Context Protocol server used to integrate Okta resources and Claude Desktop. Runs locally from the @yiyang.1i/okta-mcp-server npm package.

not rated 7 1y ago A tokens not measured original MIT

trust-oracle

201

New1Direction/webmcp-anything

MCP server Claude CodeCodexCursor +2

Independent A-F trust grade for any MCP server, watched for drift. Free, never for sale. Remote server at wmcp.sh.

not rated 7 +1 5d ago A tokens not measured original MIT

mcp-bastion

202

Gowthaman90/mcp-bastion

MCP server Claude CodeCodexCursor +2

Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail. Runs locally from the mcp-bastion npm package.

not rated 7 4d ago A tokens not measured original Apache-2.0

vulners-mcp

203

vulnersCom/vulners-mcp

MCP server Claude CodeCodexCursor +2

MCP interface server fronting the Vulners API (https://vulners.com). Runs locally from the vulners-mcp Python package.

not rated 7 6d ago A tokens not measured

cwe-search-mcp

204

Bilel-Eljaamii/cwe-search_mcp

MCP server Claude CodeCodexCursor +2

MCP server "cwe-search-mcp" as configured in Bilel-Eljaamii/cwe-searchmcp. Runs locally from the cwe-search-mcp Python package.

not rated 7 1y ago A tokens not measured original MIT

pentestmcp

205

YoussefSahnoun/PentestMCP

MCP server Claude CodeCodexCursor +2

This is an MCP server that exposes red team tools for active directory pentesting to LLMs. Runs locally from the pentestMCP Python package.

not rated 7 +1 11mo ago A tokens not measured original MIT

burp-plus

206

titaniumtushar/burp-mcp-plus

MCP server Claude CodeCodexCursor +2

One of 2 in claude_desktop_config.json

MCP server "burp-plus" as configured in titaniumtushar/burp-mcp-plus. Launched with /opt/homebrew/bin/uv run --directory /path/to/burp-mcp-plus burp-mcp-plus. Needs 1 environment variable to run.

not rated 7 5mo ago A tokens not measured original MIT

mcp-m365-mgmt

207

thiagogbeier/mcp-m365-mgmt

MCP server Claude CodeCodexCursor +2

MCP server for Microsoft 365 and Intune management with 33 tools for Entra ID, devices, Autopilot, and more. Runs locally from the mcp-m365-mgmt Python package.

not rated 7 11mo ago A tokens not measured original MIT

mcp-bastion

208

vaquarkhan/MCP-Bastion

MCP server Claude CodeCodexCursor +2

Security middleware for MCP servers protecting LLM agents from prompt injection, resource exhaustion, and PII leakage. Runs locally from the mcp-bastion-python Python package.

not rated 7 yesterday A tokens not measured

qai-consultant-mcp

209

gvasile29/qai-consultant

MCP server Claude CodeCodexCursor +2

Local, keyless MCP server: standards-grounded QA knowledge retrieval (ISTQB, OWASP, IEEE, ISO, EU AI Act), deterministic QA effort estimation, QA document quality review, test-results health analysis, and QA process maturity assessment. Runs locally from the qai-consultant-mcp Python package.

not rated 7 yesterday A tokens not measured

fortimanager-mcp

210

rstierli/fortimanager-mcp

MCP server Claude CodeCodexCursor +2

MCP server "fortimanager-mcp" as configured in rstierli/fortimanager-mcp. Runs locally from the fortimanager-mcp Python package.

not rated 7 1mo ago A tokens not measured copy · 100% MIT

wazuh-mcp

211

lidless-labs/wazuh-mcp

MCP server Claude CodeCodexCursor +2

Read-only Wazuh SIEM/XDR control CLI with an MCP adapter. Runs locally from the wazuh-mcp npm package.

not rated 7 2d ago A tokens not measured original MIT

kraken222/sovereign-observer-mcp

MCP server Claude CodeCodexCursor +2

Scan AI-generated Terraform for security misconfigurations, in your editor, before it is committed. Runs locally from the sovereign-observer Python package. Needs 2 environment variables to run.

not rated 7 1mo ago A tokens not measured original Apache-2.0

steganography-mcp

213

badchars/steganography-mcp

MCP server Claude CodeCodexCursor +2

Steganography analysis MCP server — 128 tools, 17 categories. Image steganalysis, JPEG/F5/JSteg detection, audio steganography, video stego, GIF palette analysis, network covert channels, MP3 stego, spread spectrum, BPCS, archive stego, QR code analysis. Runs locally from the steganography-mcp npm package.

not rated 7 29d ago A tokens not measured original MIT

ctfd-mcp-server

214

MrJamescot/ctfd-mcp-server

MCP server Claude CodeCodexCursor +2

Model Context Protocol (MCP) server for CTFd v3 instances. Runs locally from the ctfd-mcp-server Python package. Needs 6 environment variables to run.

not rated 7 29d ago A Socket: warn tokens not measured original MIT

MCP-Gateway

215

PanosSalt/MCP-Gateway

MCP server Claude CodeCodexCursor +2

Multi-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging. Remote server at your-gateway.example.com.

not rated 6 23d ago A tokens not measured original MIT

pincer

216

VouchlyAI/Pincer-MCP

MCP server Claude CodeCodexCursor +2

Secure grip for your agent's secrets - security-hardened MCP gateway with proxy token architecture. Runs locally from the pincer-mcp npm package. Needs 4 environment variables to run.

not rated 6 8mo ago A tokens not measured