Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
1,081 servers · page 33 of 37
-
Paladin Front PHP Rescue & Zero-PHP Migration MCP
com.paladinfront.www/php-rescue-mcpPHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Not responding -
BookingTruth Booking Assurance
com.bookingtruth/bookingtruthVerifies travel bookings against supplier-authoritative evidence; honest UNKNOWN verdicts.
Not responding -
PYRESEC - AI Code Security Auditing
io.github.renaat-s/pyresec-agentAI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.
Not responding -
Quellenkontor HR-Daten
dev.quellenkontor/hr-datenVerified German HR data with legal source: minimum wage, social security, holidays, notice periods
Not responding -
GoldenCheck
io.github.benseverndev-oss/goldencheckAuto-discover validation rules from data — scan, profile, health-score. No rules to write.
Not responding -
FlowSentry
io.github.vasilicasijarvis/flowsentrySecurity scanner for n8n workflows + live MCP Trust-Check. 18 rules, OWASP mapped. Paid x402 API.
Not responding -
MCP Security & Vulnerability Auditor
io.github.Ansarii/mcp-security-auditorStatic AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.
Not responding -
Neon Zero-Trust MCP Gateway
io.github.Ansarii/zero-trust-mcp-gatewayAI security firewall & DLP proxy protecting API keys and blocking destructive commands.
Not responding -
Verify China Supplier | Supplier Check
io.github.lu7897859-tech/china-sourcing-auditVerify a Chinese supplier before you pay: company identity, status, risk signals. x402 per call.
Not responding -
Company filing and CVE evidence snapshots
io.github.Stavros65/fishnet-company-cveCompany filing/CVE snapshots, status and optional feedback. Remote MCP or local stdio. Free Phase A.
Not responding -
Korea Company Data
io.github.lichtsalz/korea-dataKorean company identity, registration status and monthly payroll-based employment, in English.
Not responding -
Vett Compliance MCP Server
io.github.Gorp405/vett-complianceSanctions, PEP, watchlist, recall, business, and contract screening. Free tier, no auth required.
Not responding -
Ritwik Joshi Personal MCP Server
io.github.Ritwikjoshi/ritwikjoshi-mcpReal-time authoritative data for Ritwik Joshi (2x TEDx Speaker, AI entrepreneur).
Not responding -
Patch Tuesday
io.github.jonnybottles/patch-tuesdayQuery Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment
Not responding -
Bug Bounty Intelligence
io.github.holistis/bug-bounty-intelligence-mcpAI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
Not responding -
Security Intel MCP
io.github.selflabbs/security-intel-mcpCVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Not responding -
Sanctions Screening
com.watchtower-api/sanctions-screeningSanctions screening, KYB, identifier validation, jurisdiction risk & secret scanning for AI agents
Not responding -
Base MCP Resolver
io.github.thgun2yerhed/base-mcp-resolverFree onboarding tool providing authentic live transaction analysis on Base mainnet.
Not responding -
Registry
com.policylayer/registryThe MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.
Not responding -
Ci Sentinel
io.github.Baneado98/ci-sentinelMulti-CI security scanner with a live threat-intel feed of compromised CI components
Not responding -
Mcp
com.playcallerapp/mcpLive NFL, MLB, and NBA sports intelligence: injury signals, identity resolution, projections.
Not responding -
Mcpcheckup
io.github.fpetitit/mcpcheckupScans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.
Not responding -
Security Intel
it.elsas/security-intelDaily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.
Not responding -
AgentAegis
io.github.astafford8488/agentaegisPay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
Not responding -
Global Talent AI — UK Global Talent Visa studio
io.github.siddharthsinghal/uk-global-talent-visaUK Global Talent Visa handbook, endorser criteria, cost calculator, draft scoring. Free, no auth.
Not responding -
Sentrysurface
io.github.sentrysurface/sentrysurfaceCybersecurity MCP server for URL scanning, threat intelligence, and domain reputation.
Not responding -
AgniGateway Marketplace
io.github.Kaanthan24/agnigateway-mcpAI marketplace — flights, tours, activities, transport & more via MCP. No auth required.
Not responding -
Cookie Consent Compliance Scanner
io.github.vincentn-waivern/cookie-checker-gdpr-ccpa-gcmv2Cookie consent scanner: GDPR, CCPA, GCMv2. PASS/FAIL compliance checklists with fix recommendations.
Not responding -
A2Aidentitytoll Mcp
com.clauxel.a2aidentitytoll/a2aidentitytoll-mcpRemote MCP for A2A caller identity, scope policy, verdict receipts, and audit history.
Not responding -
Boolsai Grep
ai.boolsai/grepParallel regex across all Boolsai scans — discover new vendor patterns, niche signals. 4 tools.
Not responding
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.