Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
1,081 servers · page 31 of 37
-
ShipSafe — Independent security verification
co.ship-safe/scannerIndependent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.
Live, key required 586 ms -
EarningsWatcher
com.earnings-watcher/mcpOptions-implied earnings moves, 10y implied-vs-actual history, IV rush/crush, scanner, simulator.
Live, key required 314 ms -
Loglune
com.loglune/mcpReproduce, inspect, diff and bisect feature-flag rulesets; author and publish flag changes.
Live, key required 1580 ms -
CarrierScrub
com.carrierscrub/carrier-lookupCheck a US motor carrier's FMCSA authority, insurance and safety record: a dated GO/CAUTION/STOP.
Live, key required 446 ms -
Scanverion
com.scanverion/scanverionDocument OCR, vehicle analysis, and workspace usage tools for Scanverion.
Live, key required 88 ms -
FinchNode Health Records
com.finchnode/health-recordsRead patient-authorized EHR records: medications, labs, conditions, allergies. Consent-bounded.
Live, key required 653 ms -
Mcp
com.vibgrate/mcpQuery your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.
Live, key required 290 ms -
Jsmon
sh.jsmon/mcpDiscover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface
Live, key required 726 ms -
Patronus Security
studio.patronus/control-planeScan text, documents, websites, and MCP metadata for prompt injection and sensitive-data risks.
Live, key required 333 ms -
Katla
app.katla/katlaGDPR/CCPA cookie consent: scan sites for cookies, track consent rates, generate privacy policies.
Live, key required 277 ms -
Ec360
com.encompassconfirm/ec360KYC automation from authoritative public sources. Requires an Encompass licence.
Live, key required 174 ms -
PROME Care Core
ai.prome/care-coreCheck actions against fixed values using supplied numeric facts. Never authorizes or executes.
Live, key required 2755 ms -
Enforcer
dev.instruxi.enforcer/v3Identity and authorization in one system: allow, deny, the reason, and a record.
Live, key required 668 ms -
PentaTrail CTEM
co.pentatrail/ctemPentaTrail ASM/CTEM: attack surface discovery, asset inventory, findings by threat level
Live, key required 808 ms -
pinnodds — Pinnacle odds
com.pinnodds/oddsPinnacle live and prematch odds, odds drops and account usage. Auth: pinnodds API key as Bearer.
Live, key required 348 ms -
StackShield
io.stackshield/stackshieldExternal security monitoring for Laravel apps: list domains, trigger scans, read issues and fixes.
Live, key required 170 ms -
Vulnerability Intel MCP
net.nexlab/vulnerability-intelDefensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS
Live, key required 2259 ms -
Fallax
io.fallax/fallaxFallax is a phishing simulation and security awareness training platform. Read your results.
Live, key required 1308 ms -
Mcp
io.inboxacademy/mcpRead and author Inbox Academy courses, lessons, and quizzes for your organizations.
Live, key required 269 ms -
Strix
ai.strix/strixAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.
Live, key required 285 ms -
AI Power Grid
com.globalenvisionproductions/ai-power-gridPersistent AI capability reservoir for charging, storing, drawing, and reusing authorized AI work.
Live, key required 528 ms -
Sitejar Web Compliance Scanner
app.sitejar/mcpScan a web page for accessibility, security, privacy, quality and SEO issues, with fixes.
Live, key required 753 ms -
BrandPresence
io.github.nuteee/brandpresenceOrganization-scoped BrandPresence evidence and explicitly authorized product actions over MCP.
Live, key required 1075 ms -
Stashbase
io.github.stashbase/mcpSecrets for developers and agents—secure context and workflows without exposing secret values.
Live, key required 276 ms -
Deawatch
us.artificl/deawatchDEA registration & controlled-substance authority tracking for prescribers — read-only demo.
Live, key required 468 ms -
ConsentStack
io.consentstack/cookie-consentSet up GDPR and CCPA cookie consent: create a site, publish a banner, scan and categorize trackers.
Live, key required 975 ms -
Secrets.RealEstate
realestate.secrets/property-intelligenceFrench address intelligence: 18.6M sold prices, energy, risk, crime and schools — each sourced.
Live, key required 348 ms -
Arketo
ai.arketo/arketoDraw your app's architecture on a live canvas and flag the bottlenecks and security gaps.
Live, key required 312 ms -
Lukija
app.lukija/lukijaContinue Finnish reading and practise saved words from an authenticated Lukija account.
Live, key required 1705 ms -
Knotrik — AppSheet Intelligence
com.knotrik/knotrikQuery and audit AppSheet apps in natural language via Knotrik's pre-scanned definitions.
Live, key required 357 ms
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.