Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
1,570 servers · page 2 of 53
-
Osv Advisory Mcp Server
io.github.cyanheads/osv-advisory-mcp-serverQuery OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Live 655 ms -
Polymarket & Kalshi Arbitrage MCP
io.github.ralf9090/polymarket-kalshi-arb-mcpPolymarket & Kalshi live prediction market odds aggregator and cross-venue arbitrage scanner MCP.
Live 169 ms -
vulnerable.now
now.vulnerable/mcpFree CVE lookups, package checks and patch priorities from public sources. No account or API key.
Live 475 ms -
Ghana Pay and Tax
ai.kwekuanansi/ghana-pay-taxTake-home pay, income tax and social security for a salary in Ghana, and VAT with its levies.
Live 261 ms -
Travel Facts
app.nomadpoint/travel-factsNo-auth: save a planned trip as a claimable itinerary, visa rules per passport, Schengen 90/180
Live 1260 ms -
AI application security research and assessments
com.airedteamingservices/siteRead AI security guides and lab research, and request an LLM or AI agent security assessment.
Live 177 ms -
AttackerView quick website security check
com.attackerview/website-security-checkPassive security check of a domain: headers, TLS, DNS and email authentication. No login needed.
Live 633 ms -
BaziTools — True Solar Time BaZi Four Pillars & Classical Chinese Name Engine
com.bazitools/mcpCalculate authentic Four Pillars (BaZi) natal charts & classical poetic Chinese names.
Live 454 ms -
MassageInChina — Authentic TCM Tuina, Acupressure Points & Bilingual Clinic Phrasebook
com.massageinchina/mcpLook up Traditional Chinese Medicine (TCM) Tuina massage styles, meridian acupoints & phrases.
Live 596 ms -
Pentest requests, security headers checker, guides
com.penetrationtestservices/siteRequest a penetration test, grade a website's HTTP security headers, and search pentest guides.
Live 454 ms -
PentestCompare: pentest provider data
com.pentestcompare/siteSourced data on 66 penetration testing providers: scope, delivery, published prices, retests.
Live 249 ms -
SecretPass
com.secretpass/secret-passFind great online shopping deals, coupon codes and discounts in the US, UK and Australia.
Live 372 ms -
P0: CVE, package and domain checks
dev.workers.x402-bazaar-rank-worker.x402-bazaar-rank/cve-package-domain-securityCVE with EPSS and CISA KEV, package risk, software EOL, domain and IP reports, pay per call
Live 573 ms -
Fixlane
io.github.lightsmite/fixlaneKnown security incidents in developer software, with reviewed fix procedures.
Live 937 ms -
Scout
io.github.schybo/scoutWatch public store collection pages; your AI agent adds, pauses, and scans watches over MCP.
Live 404 ms -
CyberLens AI
io.github.shadoprizm/cyberlens-aiReview saved CyberLens website and repository scans through read-only OAuth tools.
Live 1315 ms -
Live 516 ms
-
Femtos
xyz.femtos/mcpHyperliquid data on HyperCore, HyperEVM, Elysium: balances, prices, trades, token security, bridges
Live 1599 ms -
SolKnife
xyz.solknife/toolkitNon-custodial Solana toolkit: rug-checks, swaps, token tools, multisig, DLMM pools, Arweave.
Live 1080 ms -
Bump to Baby 4D Scans — Pregnancy Ultrasound Studio (Pretoria)
za.co.bumptobabysa/bumptobaby-mcp2D, Gender Reveal & 4D/5D pregnancy ultrasound packages & live slot availability in Pretoria.
Live 366 ms -
Jeevesus — DugganUSA threat-intel MCP
com.dugganusa/threat-intelMembrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.
Live 553 ms -
PhotoSafe
com.eliteaiempire/photosafePhotoSafe backs up your photos encrypted on your own device, so nobody — including us — can look at
Live 736 ms -
Exepal
com.exepal/exepalSafety tools for AI agents: safe page reader, prompt-injection, secrets, PII and MCP server scans
Live 725 ms -
Dns Doctor
dev.dnsdoctor/dns-doctorScan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.
Live 329 ms -
FMCSA Carrier Intelligence
io.github.KMCTO/fmcsa-carrier-intelligenceUS carrier vetting on FMCSA data: authority, insurance, safety, identity links. Pay per call (x402)
Live 289 ms -
pkgxray
io.github.adamsjack711-ux/pkgxrayPre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
Live 110 ms -
SpotCheck
io.github.chrisschouk/spotcheckScore Spotify playlists for bot-farm patterns and triage an artificial streaming warning.
Live 370 ms -
JustOneAPI
io.github.justoneapi-official/justoneapiDiscover social and commerce APIs without login; authenticate for API calls and account data.
Live 411 ms -
nophi.sh
sh.nophi/nophishPublic facts on nophi.sh, phishing-awareness training for French SMBs: catalogue, prices, security.
Live 1642 ms -
WEIR AI
ai.weir/weir-aiLikeness clearance and identity license terms for a named person. A listing is never permission.
Live 978 ms
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.