Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
1,578 servers · page 36 of 53
-
Microsoft Project
io.github.HorizunGroup/horizun-msproject-mcpAudit, reschedule and author Microsoft Project schedules. No Java, no Project install.
Local install -
mcpcut
io.github.RostislavMatov/mcpcutJournals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval
Local install -
Secret Sentinel
io.github.AleBrito124356/mcp-secret-sentinelLocal secret guardrails: scan code, git changes and MCP configs for API keys; redact text
Local install -
EyalSec
io.github.EyalSec/eyalsec-mcpRead your EyalSec security events, machines, runs and rules from an AI assistant.
Local install -
Prodcheck
io.github.FarzamHabibi/prodcheck4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.
Local install -
chunk-invariance
io.github.ninadphalak/chunk-invarianceChecks whether your streaming redactor leaks a secret split across chunks; writes a pytest for it.
Local install -
MCP Security Guard
io.github.petrovicistefan/mcp-security-guardAudit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).
Local install -
Rework Proof
io.github.reworkio/rework-proofVerify REWORK credentials: is this delivered work genuinely the author's?
Local install -
Guard Core
io.github.Guard-Core/guard-core-mcpGuard Core security MCP: SecurityConfig validation, docs search, live threat detection.
Local install -
Netexpert Mcp
io.github.Omodaka9375/netexpert-mcpCross-platform local-network diagnostics & security-posture MCP server — 31 tools.
Local install -
Mcp Magento Audit
io.github.michalper/mcp-magento-auditMCP server for auditing Magento projects: update compatibility, module quality, dependency security
Local install -
Sn1per MCP Server: pentest, recon and attack surface scanning
io.github.1N3/sn1per-mcpRun scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.
Local install -
Sheet Music OMR
io.github.raulkivi/omr-mcpConverts photos or scans of printed sheet music to MusicXML with optical music recognition
Local install -
Cybersec Toolkit
io.github.26zl/cybersec-toolkitAuthorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.
Local install -
FTX MCP — FactoryTalk Optix MCP Server
io.github.asqi-carter/ftx-mcpMCP server for FactoryTalk Optix: author, preview, and verify Studio changes via the emulator.
Local install -
MobiLoop
io.github.enessubass/mobiloop-mcpGuarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.
Local install -
toolprint by JEStats
io.github.jestatsio/toolprintpackage-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.
Local install -
Authority Risk Mcp
io.github.RealSpap/authority-risk-mcpRead-only tools for AI agents: who can change a smart contract, how fast. Signed data, testnet.
Local install -
OpsecForge
io.github.cyberdroid2077/opsecforgeLocal MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.
Local install -
Airlock RLS
io.github.mateuszingano/airlock-rls-mcpScan a deployed site for an exposed Supabase service_role key and audit Row Level Security.
Local install -
DechoNet
io.github.node-man/dechonet-mcpMoved to com.dechonet/mcp. 25 security tools, hosted at https://dechonet.com/mcp
Local install -
kdbx
io.github.yarrasys/kdbxRead-only access to secrets in a local KeePassXC vault. Runs commands with them injected.
Local install -
MCP Dataverse
io.github.codeurali/dataverseMicrosoft Dataverse MCP server: CRUD, FetchXML, metadata, schema, audit, batch and security roles.
Local install -
VulnCheck
io.github.vulncheck-oss/mcpVulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.
Local install -
Mettle Mcp
io.github.Creed-Space/mettle-mcpExperimental reverse CAPTCHA with signed badges and credentials. Not proof of identity or substrate.
Local install -
AegisGate MCP
io.github.aegisgatesecurity/aegisgate-mcpSecure MCP server framework with 23 security layers and ML threat detection. Zero deps.
Local install -
MailHunterPro
io.github.twojlogin/mailhunter-proRead-only queries on local phishing scan results: findings, IOCs, SPF/DKIM/DMARC.
Local install -
Keyspoor
io.github.majiayu000/keyspoorOffline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.
Local install -
Deepsleuth
io.github.DeepSleuth/deepsleuthDeterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.
Local install -
Growthbook Mcp
io.github.growthbook/growthbook-mcpThin MCP server for GrowthBook — skill loader + authenticated API passthrough
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.
