Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
1,072 servers · page 16 of 36
-
TraderMatrix Free Gapper Scanner
pro.tradermatrix/freeFree, keyless pre-market and after-hours low-float gapper scanner from TraderMatrix.
Live 440 ms -
overflo.ws
ws.overflo/overflowsLook up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.
Live 640 ms -
Domain Health
com.modernmustardseed/domain-healthDomain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers.
Live 187 ms -
ScanForAI
com.scanforai/scanforaiScore text and web pages for signs of AI writing; check images for hidden AI instructions.
Live 595 ms -
Untap
io.github.aneduaim/untap-mcpCheck UK Delay Repay, UK261 flights and TfL refunds. Save claims and check commutes on request.
Live 586 ms -
Live 633 ms
-
Underpriced AI
com.underpricedai/underpriced-aiAsk what a thrift find sells for. Real eBay sold comps, price range and net after fees.
Live 466 ms -
Alphapipeline
io.github.parkyucheol-del/alphapipelinePay-per-call x402 API for AI trading agents: pre-trade security checks, Polymarket & HIP-4 odds.
Live 181 ms -
Apier
no.apier/mcpMachine-verifiable Norwegian company authority: status, roles and coded signing authority.
Live 324 ms -
HeaderGuard
dev.workers.mike-tusa.headerguard/headerguardScan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.
Live 471 ms -
x402Shield
dev.x402shield/x402shieldPublic demo: evaluate AI-agent payment authorization and approval policy. No signing, no settlement.
Live 687 ms -
HumanMirror Outcome
fr.humanmirror/outcomeVerified AI-agent outcomes: secret scanning, JSON cleanup, dedupe, anomaly and schema checks.
Live 391 ms -
Skuuy MCP
io.github.deaabie/skuuy-mcp13 privacy-first network, auth & web tools for AI agents — no API key, 60 req/min free.
Live 292 ms -
Arcai
io.arcai/arcaiCrypto intelligence: rug/scam scans for any token, verified whale flows, AI signals + track record
Live 1063 ms -
Vara MCP — Field Intelligence Scan Server
io.github.kushkillerjsixx66/vara-mcp-serverGoverned external-environment scanning: signal harvest, Field Intel Reports, per-signal lineage.
Live 4531 ms -
DavisStirling
org.davisstirling/davisstirlingCalifornia HOA law: Davis-Stirling Act text and 189 court decisions. Read-only, no auth.
Live 574 ms -
Stablecoin Scanner
com.achivx/stablescanStablecoin risk for agents: freezes, OFAC, exposure, allowances, transfers, graph. 7 chains.
Live 252 ms -
AI Catalog by Crescendo Lab
com.cresclab.catalog/ai-catalogCheck if a product feed is ready for AI shopping (ChatGPT, Gemini, AI Mode): score, gaps, fixes.
Live 464 ms -
DMCA.com Cases
com.dmca/dmca-casesDMCA.com cases. Your own token via Authorization: Bearer. No function key, no shared token.
Live 1293 ms -
FEDLIN Scanners
com.fedlin/fedlin-mcp-serverExposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.
Live 505 ms -
Tools
dev.workers.sebastiaan-ba3.mcpgateway/toolsDoormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.
Live 365 ms -
DepScout
io.github.yc-droid/depscoutScan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
Live 465 ms -
Book a Sponsor
com.bookasponsor/book-a-sponsorFind brands that already sponsor newsletters like yours, with sponsorship rates.
Live 265 ms -
NAIF Gravity Diagnostic — Free MCP/API/Webhook Triage
com.naifgravity/diagnosticFree MCP, API auth, webhook and schema diagnostics with bounded checks and safe quote routing.
Live 182 ms -
ScoreCompute
com.scorecompute/scorecompute38 MCP tools: Rust computation, Discovery, composition, counterexample scans and signed checks.
Live 524 ms -
Keelage
io.github.keelage/mcpToken intelligence for Robinhood Chain: onchain and social data on any token, timestamped.
Live 477 ms -
Cve Intelligence
com.cve-security/cve-intelligenceCVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.
Live 292 ms -
RatedWithAI accessibility checker
com.ratedwithai/accessibility-checkerScan a live web page for WCAG 2.1/2.2 AA issues with axe-core: score, grade, failing rules.
Live 568 ms -
Ship Check
com.uxcontinuum/ship-checkScan a deployed app URL for exposed keys, open Supabase tables and missing security headers.
Live 270 ms -
Prop Firm Rules (FloorGuard)
io.github.kburrus64-max/prop-firm-rulesSourced prop-firm daily-loss and max-drawdown rules and a drawdown-room checker. Read-only, no auth.
Live 386 ms
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.