Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
1,578 servers · page 33 of 53
-
QR Code & Barcode Scanner
io.github.qrcode-ai-com/qrcode-barcode-scannerLocal MCP server for QR and barcode image scanning, preserved payload bytes and QR diagnostics.
Local install -
Vizier Guard
io.github.vassiliylakhonin/vizier-guardDeterministic authorization and security guard for AI agent actions with signed receipts.
Local install -
Skarn
com.getskarn/skarnScans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted
Local install -
Local install
-
Dvalincode
io.github.arthurpanhku/dvalincodeDeterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
Local install -
ICHI — Internet Cyber Health Index
io.github.bernik-bot/ichi-mcpDaily internet-wide cyber threat band (NORMAL-CRITICAL), numeric score, advisories, source health.
Local install -
PressBridge
io.github.pressbridgesupport/pressbridgeRead-only Claude access to WordPress over MCP: secrets hidden, sandboxed, works on broken sites.
Local install -
TAR Engine
io.github.qingxuantang/tar-engineAudit AI skill safety before you ship. Static, semantic, adversarial, supply chain scans.
Local install -
PandaWard
io.github.ratomirjovanovic/pandawardLocal, evidence-based application security assessment with an evidence ledger and retests.
Local install -
Cratis Chronicle
io.github.Cratis/chronicle-mcpInspect Cratis Chronicle event stores read-only by default; opt-in, authorized job control.
Local install -
Domain Security
io.github.OrtaMarco/domain-security-mcp-serverAudit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.
Local install -
vibe-shield — security scanner for AI-generated code
io.github.avivgerz-hue/vibe-shieldScans AI-written code for leaked secrets, unguarded routes and missing RLS.
Local install -
rustsdcmcp
io.github.mechubsec/rustsdcmcpJuniper Security Director Cloud MCP server: scoped, audited change control. Rust.
Local install -
Panda Web Security Tools
io.github.pandadad0214/panda-web-security-toolsSite/email/agent safety and monitors: SPF/DKIM, SEO, change + RSS monitors, hidden-AI, WHOIS (7).
Local install -
Polymation
io.github.paradoxsyn/rivemcpAuthor Rive; convert Lottie, After Effects, Animate and Figma into it; animate AI and pixel art.
Local install -
prodlint
io.github.prodlint/prodlintScan AI-generated JS/TS for security and reliability issues; score a site for AI-agent readiness.
Local install -
Reversecore MCP
io.github.sjkim1127/reversecore-mcpSecurity-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
Local install -
PayStage Auth Watch
xyz.paystage/auth-watchRead-only MCP tools to list and flag outstanding ERC-20, Permit2, and EIP-3009 auths
Local install -
4Da Mcp Server
io.github.4DA-Systems/4da-mcp-serverUpgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
Local install -
NativeKeel
io.github.AlicanAkyol/nativekeelReact Native and Expo health check: upgrade blockers, store rules, crash risks, security findings
Local install -
GoModel
io.github.ENTERPILOT/gomodelSelf-hosted gateway aggregating upstream MCP servers behind one authenticated HTTP endpoint.
Local install -
Mneme Decision MCP
io.github.MnemeHQ/mnemeLocal MCP server for architectural decisions, traceability, and non-authoritative proposals.
Local install -
zanadir
io.github.MustacheCase/zanadirFind what a repository's CI is missing, and which security checks cannot fail the build.
Local install -
BlackDome Threat Intel
io.github.blackdome-ai/blackdome-mcpHoneypot threat intel: IOCs, sample comparisons, evidence clusters and ThreatDrop case status.
Local install -
PLCWare - TIA Portal (tia)
io.github.renanlido/tia-opennessDrive Siemens TIA Portal V21 from AI: author, compile, export and gated download via Openness.
Local install -
MCPProxy
io.github.smart-mcp-proxy/mcpproxy-goLocal-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings
Local install -
Proof CLI (unofficial)
io.github.tsarlewey/proof-cliNotarize, e-sign, and verify identity with the Proof API. Unofficial; not affiliated with Proof.
Local install -
Corvus
io.github.Albasha0x0/corvusReverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.
Local install -
APC Security Reference Server
io.github.Aleph-Lab-s/apc-security-reference-serverReference MCP server for synthetic APC action-security evaluation and local SQLite sandbox testin...
Local install -
CookieGuard
io.github.aiscihub/cookieguardAudit HTTP cookie security against your local policy. Returns findings without cookie values.
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.