Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
498 servers · page 12 of 17
-
Contract Security Scanner
io.github.mastrophot/contract-security-scannerMCP smart contract scanner with NEAR-focused security context.
Local install -
vault
io.github.meshpop/vaultSecret and credential management MCP — securely store, retrieve, manage API keys and tokens
Local install -
Mcp
com.keyboardcrumbs/mcpLive threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key.
Local install -
Mund — MCP Security Scanner
io.github.Tyox-all/mundScan for prompt injection, secrets, PII, and vet MCP servers before installation
Local install -
Skylos
io.github.duriantaco/skylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.
Local install -
InsAIts - AI Communication Security Monitor
io.github.Nomadu27/insaitsRuntime AI-to-AI security monitor. 23 anomaly types, OWASP MCP Top 10 coverage.
Local install -
Mcp
io.github.FinishKit/mcpFinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality
Local install -
Virustotal
io.github.BurtTheCoder/virustotalMCP server for querying VirusTotal API with comprehensive security analysis tools.
Local install -
Guardianshield
io.github.sparkvibe-io/GuardianShieldAI security layer: code scanning, PII detection, prompt injection, secrets, CVEs
Local install -
Badge
io.github.payclaw/badgeAgents are not bots. Prove it. MCP-native identity declaration for authorized agents.
Local install -
Nextscan
io.github.berkayderin/nextscanMCP server that scans Next.js projects and returns a compact summary
Local install -
Mcp Server Security Audit
io.github.joepangallo/mcp-server-security-auditScan websites for security vulnerabilities, headers, TLS, and email security.
Local install -
Ybe Check
io.github.AddyCuber/ybe-checkYbe Check – security and compliance orchestrator for AI-generated repositories.
Local install -
Inkog
io.github.inkog-io/inkogSecurity co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
Local install -
Air Blackbox
io.github.shotwellj/air-blackboxEU AI Act compliance scanner for Python AI agents — scan, analyze, and remediate
Local install -
Aikido Mcp
io.github.Bajuzjefe/aikido-mcpSecurity analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.
Local install -
Local install
-
Compliance Trestle Mcp
io.github.oscal-compass/compliance-trestle-mcpAn MCP server that provides tools to author OSCAL security compliance documentation
Local install -
Node Runtime
io.github.mcp-protocol/node-runtimeThis package is intended for demonstration only. Maintained by JFrog Security.
Local install -
Dep Oracle
io.github.ertugrulakben/dep-oraclePredictive dependency security engine. Trust scores, zombie detection, blast radius analysis.
Local install -
Omni Scanner
io.github.Pantheon-LadderWorks/omni-scannerCodebase observatory with 56+ scanners for git health, architecture, and documentation.
Local install -
Arc Security
com.arcself/arc-securityScan AI agent skills for 25 attack classes + runtime monitoring. 1,316+ findings.
Local install -
mcpwall
io.github.behrensd/mcpwalliptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.
Local install -
Probeops Mcp Server
io.github.kumarprobeops/probeops-mcp-serverNetwork diagnostics from 6 global regions. SSL, DNS, ping, whois, traceroute, port scan, latency.
Local install -
FedRAMP 20x Requirements
io.github.KevinRabun/FedRAMP20xMCPAn MCP server that provides access to FedRAMP 20x security requirements and controls.
Local install -
Local install
-
Excalidraw
io.github.debu-sinha/excalidrawSecurity-hardened Excalidraw MCP server with auth, rate limiting, and 14 tools
Local install -
Moltbook Mcp
io.github.easingthemes/moltbook-mcpMoltbook MCP server: post, comment, upvote, DMs, communities. API key auth.
Local install -
Agent Security Scanner Mcp
io.github.sinewaveai/agent-security-scanner-mcpSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
Local install -
Pincer
io.github.VouchlyAI/pincerSecure grip for your agent's secrets - security-hardened MCP gateway with proxy token architecture
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.