Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
1,578 servers · page 38 of 53
-
Onelogin Mcp
io.github.onelogin/onelogin-mcpMCP server for OneLogin API - manage users, apps, roles, and authentication
Local install -
Disk Inventory MCP
io.github.LemmaLemming/disk-inventory-mcpRead-only macOS disk analysis with bounded scans, size queries, and extension breakdowns.
Local install -
Secret Scan
io.github.agentic-income-bot/mcp-secret-scanCheck text for leaked credentials before an agent writes or commits it. Runs locally.
Local install -
Husk
io.github.husk-security/huskLocal-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs
Local install -
SecHelix
io.github.omarmohelal/sechelixEvidence-first security review of authorized repositories. Read-only, root-confined, no shell.
Local install -
Clay Seal
io.github.clayseal/claysealAuthorizes MCP tool calls against a session policy, not one call at a time.
Local install -
GaugeMesh
io.github.aliengineering-byte/gaugemeshRoute MCP capabilities through deterministic identity, policy, budget, and deadline constraints.
Local install -
YunoHost MCP
io.github.imattau/yunohost-mcpNostr-authenticated MCP server for secure YunoHost administration.
Local install -
Passiv Web Tools
io.github.mahope/passiv-mcpFree web tools for AI agents: HTML to Markdown, compliance scan, page profile, security headers.
Local install -
ReClip
io.github.yagyaanshK/reclipInspect and download authorized media or precise clips locally with yt-dlp.
Local install -
RadioChron
io.github.sergii-ziborov/radiochronLocal-first Wi-Fi incident diagnostics with native BLE scan, history, and risk evidence.
Local install -
Earn Bounty Scanner
io.github.jayjex/earn-bounty-scannerLive Solana bounties from Superteam Earn: search, details, open feeds. No API key.
Local install -
Notebooklm Mcp Secure
io.github.Pantheon-Security/notebooklm-mcp-secureSecurity-hardened NotebookLM MCP with post-quantum encryption
Local install -
Nel Veil
io.github.NELPROINC/nel-veilFree passive security scanning - check any domain's DMARC, TLS, headers, and exposures.
Local install -
SPARDA
io.github.zakariagharzouli/sparda-mcpAI writes. SPARDA proves. Deterministic, offline security gate for AI edits.
Local install -
Posecode Mcp
io.github.posecode-dev/posecode-mcpAuthor, ROM-validate, and render 3D human movement (.posecode) with a shareable playground link.
Local install -
Securityscan
io.github.securityscan-api/securityscanSecurity for AI agents: MCP audits, secret redaction, skill vetting, network scans, agent checkout.
Local install -
AIShield Security Scanner
io.github.lm203688/aishieldScans MCP servers for tool poisoning, prompt injection and supply chain risks.
Local install -
Mcp Secret Scrub
io.github.sudo-ai-git/mcp-secret-scrubDeterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.
Local install -
Mcp Api Connect
io.github.bvenkata/mcp-api-connectProtocol- & auth-agnostic API connector: SOAP/REST behind any auth, config-driven. Lib/API/MCP.
Local install -
Ghost Publisher
io.github.BlogFactoryHQ/ghost-publisherLocal-first MCP server for safe Ghost authoring, diagnostics, scheduling, and publishing.
Local install -
Sentinel Scan
io.github.Ventrova/sentinel-scan-cliMCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics.
Local install -
Keel
io.github.lutfizp/keelControl plane MCP that dedups scanner output, rate-limits hosts, and runs non-destructive proofs.
Local install -
1Claw Vault
io.github.1clawAI/1claw-mcpHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.
Local install -
Secret MCP
io.github.yyeongjin/secret-mcpLocal MCP server for isolated, evidence-backed GDWEB design analysis and web search.
Local install -
Venue Authority
io.github.kingymon1/venue-authorityVerify food-service facilities against supported regulator records.
Local install -
Ghost Publisher
io.github.BoraGkc/ghost-publisherLocal-first MCP server for safe Ghost authoring, diagnostics, scheduling, and publishing.
Local install -
Make Audit Mcp
io.github.arose26/make-audit-mcpAudit Make.com blueprints before importing: hardcoded secrets, dangling refs, risky settings.
Local install -
Identity Forge
io.identityforge/mcpDesign kits, brand naming, and domain research for coding agents.
Local install -
Tripwire Guard — evidence-first injection scanner
io.github.KubaOpoczka/tripwire-guardLocal read-only MCP scanner for known prompt-injection patterns with exact evidence and no network.
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.
