Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
1,578 servers · page 35 of 53
-
Irontrellis Gateway
io.github.zerohourzulu/irontrellis-gatewayLocal MCP gateway: approved tools behind a signed authority check, per call or as exactly-once jobs
Local install -
Depsonar
com.soflution/depsonarDependency audits, live CVE scans, migration detection and stack health across 9 languages.
Local install -
Two-Key
io.github.Insomniac-VibeLabs/two-keyAuthorization proxy for another MCP server: a rule check and AI judges approve each tool call
Local install -
Gate Authority Network
io.github.Projetxana/gate-authority-networkLive cross-domain authority-state resolution for delegated agents through MCP.
Local install -
OSV Advisories
io.github.basitalisandhu/mcp-osv-advisoriesQuery OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.
Local install -
Security Headers
io.github.basitalisandhu/mcp-security-headersFetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.
Local install -
Local install
-
Entrapulse Polyarchy
io.github.darrenjrobinson/entrapulse-polyarchyInteractive Entra ID identity relationship visualization — the 2003 polyarchy, live as an MCP App
Local install -
Ardor
io.github.NTRanch/ardorNTRanch maker MCP: authoring, safety gates, playtest QA and release handoffs for adult games/apps.
Local install -
uta-shield
io.github.eddyflores100-lang/uta-shieldProvider-side MCP firewall: identity, threat-intel, barter, rate limits, DLP, audit.
Local install -
Supply Chain Guard
io.github.homeofe/supply-chain-guardSupply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.
Local install -
Bitwarden Public API and Secrets Manager (unofficial)
io.github.mguttmann/the-real-bitwarden-mcpUnofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.
Local install -
Chalkcast
io.github.FredMichel/chalkcastAuthor, render and visually verify Manim math animations from natural language
Local install -
AppSec Toolbox MCP
io.github.ai-ronin-systems/appsec-toolbox-mcpPassive AppSec scanners as eight parameterless MCP tools; the audited repository is data.
Local install -
gpg-mcp
io.github.emiliano-go/gpg-mcpSecurity-focused MCP server for GnuPG signing, encryption and key management.
Local install -
Mcp Opa Authz
io.github.kanywst/mcp-opa-authzAuthorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.
Local install -
GSC Scanner
io.github.poliakarmai/gsc-scannerLocal security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.
Local install -
hexvero
io.github.maximilianfeix/hexveroElectron release diff for security review: what changed in IPC, contextBridge, windows and hosts.
Local install -
Zeroclaw Mcp
io.github.zeroclaw-labs/zeroclaw-mcpConfigure and manage authorized ZeroClaw installations through a local MCP server.
Local install -
A11y Check
com.a11ychk/mcpWeb accessibility scanning (WCAG 2.2 AA + KWCAG 2.2) with Korean remediation guides
Local install -
Calllint
io.github.calllint/calllintStatic preflight safety gate for MCP servers — scan configs before you run them. Never executes.
Local install -
Vuln Check
io.github.ciloops/vuln-checkLocal vulnerability scan on top of grype, with prioritised upgrade actions for agents.
Local install -
Sops Mcp
io.github.privacyplaybook/sops-mcpMCP server for creating and managing SOPS-encrypted secrets
Local install -
MCP ZAP Server
io.github.dtkmn/mcp-zap-serverSafe, self-hosted ZAP operator for guided AI security scans and reports.
Local install -
NSW Licences
io.github.fisher98kim/nsw-licencesCheck licences on 15 NSW public registers: trades, property, security, liquor, WHS and more.
Local install -
x402 Security & Alpha Oracle
io.github.ak10082247-max/x402-sniper-botRead-only pre-trade honeypot simulation and DEX alpha oracle for Solana and Base.
Local install -
Aether WCAG Scanner
io.github.allchemylabs/aether-wcag-scannerWCAG 2.1 AA accessibility scanner (Playwright + axe-core) with grounded, browser-verified fixes.
Local install -
Secret Handoff
io.github.geland/secrethandoffLet agents use temporary secrets without receiving their values in chat. Local stdio; Node 22+.
Local install -
Portunus
io.github.mdostal/portunusSecret broker for agents: reference secrets by name; values injected only at the execution boundary.
Local install -
Palanit Core
io.github.stasxr/palanit-coreScan MCP servers and agent tool manifests for poisoning, exfiltration, secrets and supply-chain risk
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.
