Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
498 servers ยท page 14 of 17
-
QNSQY
io.github.quantumsequrity/qnsqyLinux only, local: post-quantum CBOM scan, encrypt to public keys, verify. Takes no secrets
Local install -
ELYREON Workflow Rescue
io.github.colt2822/workflow-rescueOffline static analysis of n8n workflow exports: dead ends, cycles, missing triggers, secrets.
Local install -
Symantec Data Center Security AIops
io.github.AIops-tools/symantec-dcs-aiopsGoverned Symantec DCS operations โ 35 MCP tools, read-only with audit.
Local install -
Petra Security
io.github.WYRE-AI/petra-mcpRead-only Petra Security MCP: M365 compromise incidents, failed attacks, posture, tenants, usage.
Local install -
Mcp Company Identity Resolver
com.mambabuilt/mcp-company-identity-resolverResolve company name, domain, or LinkedIn into one canonical identity with confidence scores.
Local install -
Mcp Funding Press Signal Scanner
com.mambabuilt/mcp-funding-press-signal-scannerScan news for funding rounds, exec moves, product launches, and acquisitions at any company.
Local install -
Mcp Job Board Keyword Signal Scanner
com.mambabuilt/mcp-job-board-keyword-signal-scannerScans Greenhouse, Lever, Ashby, Workday, Rippling for roles in any category. Clay-ready.
Local install -
Decionis Commerce Gate MCP
com.decionis/commerce-gateCommerce preflights, D365 authorization; opt-in agent writes require authorized backend connectors.
Local install -
Qrpaint
io.github.CloudCorpRecords/qrpaintArt QR codes via a hosted service: generate, vary, list and retarget scannable picture QR codes.
Local install -
Trustverdict
io.github.CloudCorpRecords/trustverdictTrust verification for agents and packages: safety scans, signed scores, identity and badges.
Local install -
Cisco Duo
io.github.WYRE-AI/cisco-duo-mcpMCP server for Cisco Duo's identity/MFA administration API.
Local install -
Busfactor
io.github.CloudCorpRecords/busfactorMap single-author, never-reviewed files from authorship and review data: a factual risk list.
Local install -
Dnsprobe
io.github.CloudCorpRecords/dnsprobeDNS and email-security diagnostics via the keyless intodns.ai API: scans, SPF, DMARC, headers.
Local install -
Lancontrol
io.github.CloudCorpRecords/lancontrolUniFi controller: clients, devices, WLANs, health, alarms, events, sysinfo, identity.
Local install -
Linkguard
io.github.CloudCorpRecords/linkguardForward URL safety scans to the hosted PreClick remote MCP endpoint.
Local install -
Reachvuln
io.github.CloudCorpRecords/reachvulnRank vulnerabilities by whether the vulnerable code path is reachable in your code.
Local install -
Scanverdict
io.github.CloudCorpRecords/scanverdictLocal stdio bridge to GroundTruth scan reads, bid drafts and pricing.
Local install -
Threatkb
io.github.CloudCorpRecords/threatkbLocal MITRE ATT&CK queries: techniques, tactics, mitigations, and detections from a STIX file.
Local install -
X402 Scan Mcp
io.github.forgemeshlabs/x402-scan-mcpx402 Endpoint Scanner โ a free local health probe for x402 paid endpoints as an MCP server.
Local install -
Identity AIops
io.github.AIops-tools/identity-aiopsGoverned Keycloak + authentik identity ops: users, events, clients, MFA, RCA. 29 tools.
Local install -
Eqsl Mcp
io.github.qso-graph/eqsl-mcpeQSL.cc MCP server. Inbox download, QSO verification, Authenticity Guaranteed status.
Local install -
XploitScan
io.github.bgage72590/xploitscan-mcpSecurity scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.
Local install -
Eclipse Brake
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-brake-mcpThird-party halt authority for fixture fleets: poll-based BRAKE verdicts, signed halt receipts.
Local install -
Eclipse Faircharge
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-faircharge-mcpSubscription-creep measurement over fixture charge streams against sealed authorizations only.
Local install -
Eclipse Muzzle
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-muzzle-mcpSecrets + PII scanner. A PASS verdict is scan evidence, not a guarantee of safety or non-defamation.
Local install -
Eclipse Namesake
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-namesake-mcpIdentity-collision similarity screen over a fixture registry snapshot; not a trademark opinion.
Local install -
Eclipse Understudy
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-understudy-mcpDelegation subset proofs over Till-grammar fixture mandates; proofs only, never grants authority.
Local install -
Eclipse Health Check MCP
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/health-checkScan an MCP server or agent configuration for security posture โ evidence-bound findings
Local install -
ProdForge
io.github.CloudCorpRecords/prodforgeConnects MCP servers, packages, security checks, and release gates in one repo.
Local install -
Tracewatch
io.github.CloudCorpRecords/tracewatchObservability, tracking, and root-cause for Security Wave scans and findings.
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.
