Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
1,578 servers · page 46 of 53
-
Threatkb
io.github.CloudCorpRecords/threatkbLocal MITRE ATT&CK queries: techniques, tactics, mitigations, and detections from a STIX file.
Local install -
X402 Scan Mcp
io.github.forgemeshlabs/x402-scan-mcpx402 Endpoint Scanner — a free local health probe for x402 paid endpoints as an MCP server.
Local install -
Identity AIops
io.github.AIops-tools/identity-aiopsGoverned Keycloak + authentik identity ops: users, events, clients, MFA, RCA. 29 tools.
Local install -
Eqsl Mcp
io.github.qso-graph/eqsl-mcpeQSL.cc MCP server. Inbox download, QSO verification, Authenticity Guaranteed status.
Local install -
XploitScan
io.github.bgage72590/xploitscan-mcpSecurity scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.
Local install -
Eclipse Brake
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-brake-mcpThird-party halt authority for fixture fleets: poll-based BRAKE verdicts, signed halt receipts.
Local install -
Eclipse Faircharge
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-faircharge-mcpSubscription-creep measurement over fixture charge streams against sealed authorizations only.
Local install -
Eclipse Muzzle
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-muzzle-mcpSecrets + PII scanner. A PASS verdict is scan evidence, not a guarantee of safety or non-defamation.
Local install -
Eclipse Namesake
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-namesake-mcpIdentity-collision similarity screen over a fixture registry snapshot; not a trademark opinion.
Local install -
Eclipse Understudy
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-understudy-mcpDelegation subset proofs over Till-grammar fixture mandates; proofs only, never grants authority.
Local install -
Eclipse Health Check MCP
io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/health-checkScan an MCP server or agent configuration for security posture — evidence-bound findings
Local install -
ProdForge
io.github.CloudCorpRecords/prodforgeConnects MCP servers, packages, security checks, and release gates in one repo.
Local install -
Tracewatch
io.github.CloudCorpRecords/tracewatchObservability, tracking, and root-cause for Security Wave scans and findings.
Local install -
GenPark Secure Secret Token Redactor
io.github.alphaparkinc/genpark-secure-secret-token-redactor-skillHigh-speed regex and entropy-based scanner redacting API keys, JWT tokens, and credentials
Local install -
Page Scanner
io.github.sbd530/page-scannerCapture a web page from your own Chrome as a PDF whose text is still text.
Local install -
Hookcheck
io.github.CloudCorpRecords/hookcheckPersistence hook auditor: scan repos for auto-exec hooks, flag Shai-Hulud patterns.
Local install -
Feishu MCP Self-hosted
io.github.cyuanxv/feishu-mcp-standaloneSingle-owner Feishu MCP: run your own service, configure your app, authorize your Feishu account.
Local install -
ESET PROTECT
io.github.WYRE-AI/eset-protect-mcpMCP server for ESET PROTECT's ESET Connect API - device, EDR, vulnerability, patch, and user data.
Local install -
Teramind
io.github.WYRE-AI/teramind-mcpMCP server for Teramind's insider-threat/employee-monitoring API (read-only, metadata-only surface).
Local install -
Keeper Secrets Manager
io.github.WYRE-AI/keeper-mcpRead-only multitenant Streamable HTTP bridge over Keeper Secrets Manager's MCP server.
Local install -
Binance (security-first) + crypto analyst
io.github.KumailQazi/krmaazha-binance-mcpSecurity-first Binance MCP. 26 tools, human-confirmed spot trades, offline quant research.
Local install -
Local install
-
Abnormal Security
io.github.WYRE-AI/abnormal-mcpMCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.
Local install -
Avanan MSP (Legacy SmartAPI)
io.github.WYRE-AI/avanan-legacy-mcpMCP server for the legacy Avanan SmartAPI: MSP tenant management plus per-tenant security tools.
Local install -
Proofpoint
io.github.WYRE-AI/proofpoint-mcpMCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.
Local install -
Norway Archives
io.github.ianderso/norway-archives-mcpNorway's church books, censuses and scans, National Library books, and place names.
Local install -
Blackpoint Cyber
io.github.WYRE-AI/blackpoint-mcpMCP server for Blackpoint Cyber MDR — alerts, threats, and operations.
Local install -
Secrets-LE
io.github.nolindnaidoo/secrets-leDetect hardcoded secrets in source and config. Reports masked previews, never the values.
Local install -
Vaast
com.xtrinel/vaastRead-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents
Local install -
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.
