Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
498 servers · page 3 of 17
-
Scovant Core
io.github.Scovant/scovant-corePassive AI-agent readiness scan of a website: robots, llms.txt, JSON-LD, MCP discovery, security.
Local install -
Altr Mcp Server
io.github.altrsoftware/altr-mcp-serverMCP server for ALTR data security: databases, tags, policies, classification, access, audits
Local install -
SanAlert
io.github.plrojek/sanalert-mcpUnofficial threat level from the air for a place in Poland, worked out on your own computer.
Local install -
CodeDiag
io.github.sabahattink/codediagFind Node.js API routes with no auth check or input validation, and scan project health.
Local install -
Research Scan
org.synectic/research-scanFinds and ranks recent scientific papers that matter most for a research question or project.
Local install -
APSA mobile app security audit
io.github.ictechgy/apsaLocal, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.
Local install -
AdminKit
io.github.netbasecorp/adminkit-mcpNetwork, DNS, mail-auth and MCP endpoint security checks for AI agents, backed by adminkit.net.
Local install -
mcp-audit
io.github.saagpatel/mcp-auditScan, enumerate, and risk-score every MCP server configured on your machine.
Local install -
McpHub
com.soflution/mcphubOne MCP endpoint for all your servers: a few meta-tools, Keychain secrets, sandbox, audit, OAuth.
Local install -
valvur
io.github.MaverickHQ/valvurOffline security scanning for AI-generated code: seven open-source scanners in one MCP server.
Local install -
Attestix
io.github.VibeTensor/attestixAI agent identity, signed credentials, delegated authority and governance evidence.
Local install -
Campus Cli
io.github.alejooroncoy/campus-cliCampus relay MCP client: authenticated access to courses, assignments, grades and materials.
Local install -
Rubrik Security Cloud
io.github.rubrikinc/rubrik-mcpConnect AI assistants to the Rubrik Security Cloud GraphQL API to discover, query, and automate.
Local install -
Swarm X402 Mcp
io.github.swarm-agent-operator/swarm-x402-mcpPay-per-call x402 services: repo scans, web research, site checks, page text. USDC on Base.
Local install -
SyteCheck
com.sytecheck/sytecheck-mcpScan a website for SEO, accessibility, performance and security issues, and read the report.
Local install -
Gadriel AI Security Harness
io.github.Gadriel-ai/gadrielAI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.
Local install -
FSV — website security scanner
io.github.twayst0/fsvScan your own website for vulnerabilities: DNS takeover, compromised CDNs, debug mode and more.
Local install -
Irontrellis Gateway
io.github.zerohourzulu/irontrellis-gatewayLocal MCP gateway: approved tools behind a signed authority check, per call or as exactly-once jobs
Local install -
Depsonar
com.soflution/depsonarDependency audits, live CVE scans, migration detection and stack health across 9 languages.
Local install -
Two-Key
io.github.Insomniac-VibeLabs/two-keyAuthorization proxy for another MCP server: a rule check and AI judges approve each tool call
Local install -
Gate Authority Network
io.github.Projetxana/gate-authority-networkLive cross-domain authority-state resolution for delegated agents through MCP.
Local install -
OSV Advisories
io.github.basitalisandhu/mcp-osv-advisoriesQuery OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.
Local install -
Security Headers
io.github.basitalisandhu/mcp-security-headersFetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.
Local install -
Local install
-
Entrapulse Polyarchy
io.github.darrenjrobinson/entrapulse-polyarchyInteractive Entra ID identity relationship visualization — the 2003 polyarchy, live as an MCP App
Local install -
Ardor
io.github.NTRanch/ardorNTRanch maker MCP: authoring, safety gates, playtest QA and release handoffs for adult games/apps.
Local install -
uta-shield
io.github.eddyflores100-lang/uta-shieldProvider-side MCP firewall: identity, threat-intel, barter, rate limits, DLP, audit.
Local install -
Supply Chain Guard
io.github.homeofe/supply-chain-guardSupply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.
Local install -
Bitwarden Public API and Secrets Manager (unofficial)
io.github.mguttmann/the-real-bitwarden-mcpUnofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.
Local install -
Chalkcast
io.github.FredMichel/chalkcastAuthor, render and visually verify Manim math animations from natural language
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.
