Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
498 servers ยท page 2 of 17
-
Reversecore MCP
io.github.sjkim1127/reversecore-mcpSecurity-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
Local install -
PayStage Auth Watch
xyz.paystage/auth-watchRead-only MCP tools to list and flag outstanding ERC-20, Permit2, and EIP-3009 auths
Local install -
4Da Mcp Server
io.github.4DA-Systems/4da-mcp-serverUpgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
Local install -
NativeKeel
io.github.AlicanAkyol/nativekeelReact Native and Expo health check: upgrade blockers, store rules, crash risks, security findings
Local install -
GoModel
io.github.ENTERPILOT/gomodelSelf-hosted gateway aggregating upstream MCP servers behind one authenticated HTTP endpoint.
Local install -
Mneme Decision MCP
io.github.MnemeHQ/mnemeLocal MCP server for architectural decisions, traceability, and non-authoritative proposals.
Local install -
zanadir
io.github.MustacheCase/zanadirFind what a repository's CI is missing, and which security checks cannot fail the build.
Local install -
BlackDome Threat Intel
io.github.blackdome-ai/blackdome-mcpHoneypot threat intel: IOCs, sample comparisons, evidence clusters and ThreatDrop case status.
Local install -
PLCWare - TIA Portal (tia)
io.github.renanlido/tia-opennessDrive Siemens TIA Portal V21 from AI: author, compile, export and gated download via Openness.
Local install -
MCPProxy
io.github.smart-mcp-proxy/mcpproxy-goLocal-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings
Local install -
Proof CLI (unofficial)
io.github.tsarlewey/proof-cliNotarize, e-sign, and verify identity with the Proof API. Unofficial; not affiliated with Proof.
Local install -
Corvus
io.github.Albasha0x0/corvusReverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.
Local install -
APC Security Reference Server
io.github.Aleph-Lab-s/apc-security-reference-serverReference MCP server for synthetic APC action-security evaluation and local SQLite sandbox testin...
Local install -
CookieGuard
io.github.aiscihub/cookieguardAudit HTTP cookie security against your local policy. Returns findings without cookie values.
Local install -
Zn Gate
io.github.usezn/zn-gateThe local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
Local install -
Quantum Readiness Scan
eu.quantumreadiness/qrp-mcpLocal crypto inventory for developers and AI agents; coverage and limits inside the CBOM.
Local install -
CodeInspectus
io.github.Synvoya/codeinspectusLocal-first MCP security scanner and CLI for AI-generated applications.
Local install -
Lookproof DNS and mail security checks
io.github.lookproof/lookproof-mcpSPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS and DNS checks for domains, paid per call in USDC (x402)
Local install -
Threecrate Mcp
io.github.rajgandhi1/threecrate-mcpClean, align, measure and repair 3D scans and meshes; make scans printable as STL.
Local install -
mcp-authprobe
io.github.Enigmacker/mcp-authprobeActive OAuth tests for remote MCP servers you own: tokens, PKCE, redirect_uri, audience, CSRF.
Local install -
Mcp Bastion
io.github.Gowthaman90/mcp-bastionReliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.
Local install -
Security Detections
io.github.MHaggis/security-detections-mcpSearch security detections across Sigma, Splunk, Elastic, KQL, Sublime, CQL and Jamf with ATT&CK.
Local install -
mcp-guard
io.github.diegoperezg7/mcp-guard-scanSecurity scanner for MCP servers: tool poisoning, shadowing, permissions, secrets, transport.
Local install -
CVErdict
io.github.markusweldon/cverdictRead-only CVE triage: verdicts from CISA KEV, EPSS and exploit feeds, each reason linked.
Local install -
Virustotal
io.github.w0h1v/virustotalMCP server for querying VirusTotal API with comprehensive security analysis tools.
Local install -
Scandiary
io.github.Yedigarli/scandiaryAccessibility check (axe-core, WCAG A/AA) for sites you build, with a fix prompt for your AI tool.
Local install -
Frigate Auth
io.github.adel-s/frigate-auth-mcpMCP server with authentication for Frigate NVR (authenticated port, viewer role)
Local install -
Secret
io.github.avhn/secretLocal, read-only, names-only secret metadata for explicitly approved stores. Never returns values.
Local install -
Coredence
io.github.coredence/coredenceQuery a measured identity: its rules, the evidence behind each one, and the topics they belong to.
Local install -
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.