Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
498 servers · page 4 of 17
-
AppSec Toolbox MCP
io.github.ai-ronin-systems/appsec-toolbox-mcpPassive AppSec scanners as eight parameterless MCP tools; the audited repository is data.
Local install -
gpg-mcp
io.github.emiliano-go/gpg-mcpSecurity-focused MCP server for GnuPG signing, encryption and key management.
Local install -
Mcp Opa Authz
io.github.kanywst/mcp-opa-authzAuthorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.
Local install -
GSC Scanner
io.github.poliakarmai/gsc-scannerLocal security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.
Local install -
hexvero
io.github.maximilianfeix/hexveroElectron release diff for security review: what changed in IPC, contextBridge, windows and hosts.
Local install -
Zeroclaw Mcp
io.github.zeroclaw-labs/zeroclaw-mcpConfigure and manage authorized ZeroClaw installations through a local MCP server.
Local install -
A11y Check
com.a11ychk/mcpWeb accessibility scanning (WCAG 2.2 AA + KWCAG 2.2) with Korean remediation guides
Local install -
Calllint
io.github.calllint/calllintStatic preflight safety gate for MCP servers — scan configs before you run them. Never executes.
Local install -
Vuln Check
io.github.ciloops/vuln-checkLocal vulnerability scan on top of grype, with prioritised upgrade actions for agents.
Local install -
Sops Mcp
io.github.privacyplaybook/sops-mcpMCP server for creating and managing SOPS-encrypted secrets
Local install -
MCP ZAP Server
io.github.dtkmn/mcp-zap-serverSafe, self-hosted ZAP operator for guided AI security scans and reports.
Local install -
NSW Licences
io.github.fisher98kim/nsw-licencesCheck licences on 15 NSW public registers: trades, property, security, liquor, WHS and more.
Local install -
x402 Security & Alpha Oracle
io.github.ak10082247-max/x402-sniper-botRead-only pre-trade honeypot simulation and DEX alpha oracle for Solana and Base.
Local install -
Aether WCAG Scanner
io.github.allchemylabs/aether-wcag-scannerWCAG 2.1 AA accessibility scanner (Playwright + axe-core) with grounded, browser-verified fixes.
Local install -
Secret Handoff
io.github.geland/secrethandoffLet agents use temporary secrets without receiving their values in chat. Local stdio; Node 22+.
Local install -
Portunus
io.github.mdostal/portunusSecret broker for agents: reference secrets by name; values injected only at the execution boundary.
Local install -
Palanit Core
io.github.stasxr/palanit-coreScan MCP servers and agent tool manifests for poisoning, exfiltration, secrets and supply-chain risk
Local install -
Microsoft Project
io.github.HorizunGroup/horizun-msproject-mcpAudit, reschedule and author Microsoft Project schedules. No Java, no Project install.
Local install -
mcpcut
io.github.RostislavMatov/mcpcutJournals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval
Local install -
Secret Sentinel
io.github.AleBrito124356/mcp-secret-sentinelLocal secret guardrails: scan code, git changes and MCP configs for API keys; redact text
Local install -
EyalSec
io.github.EyalSec/eyalsec-mcpRead your EyalSec security events, machines, runs and rules from an AI assistant.
Local install -
Prodcheck
io.github.FarzamHabibi/prodcheck4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.
Local install -
chunk-invariance
io.github.ninadphalak/chunk-invarianceChecks whether your streaming redactor leaks a secret split across chunks; writes a pytest for it.
Local install -
MCP Security Guard
io.github.petrovicistefan/mcp-security-guardAudit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).
Local install -
Rework Proof
io.github.reworkio/rework-proofVerify REWORK credentials: is this delivered work genuinely the author's?
Local install -
Guard Core
io.github.Guard-Core/guard-core-mcpGuard Core security MCP: SecurityConfig validation, docs search, live threat detection.
Local install -
Netexpert Mcp
io.github.Omodaka9375/netexpert-mcpCross-platform local-network diagnostics & security-posture MCP server — 31 tools.
Local install -
Mcp Magento Audit
io.github.michalper/mcp-magento-auditMCP server for auditing Magento projects: update compatibility, module quality, dependency security
Local install -
Sn1per MCP Server: pentest, recon and attack surface scanning
io.github.1N3/sn1per-mcpRun scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.
Local install -
Sheet Music OMR
io.github.raulkivi/omr-mcpConverts photos or scans of printed sheet music to MusicXML with optical music recognition
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.
