Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
1,578 servers · page 49 of 53
-
Auditra
io.github.mwstech/auditraRead-only MCP server for WordPress plugin audits: vulnerabilities, bloat, cron, orphaned tables.
Needs setup -
Needs setup
-
Needs setup
-
SecureAuth Agent Authority
com.secureauth/agent-authorityIdentity-first enterprise MCP gateway: per-call authorization, agent identity and audit trail
Needs setup -
Malware Patrol Threat Intelligence MCP server
io.github.AndreC10002/mcp-server-threat-intelligenceOur MCP Server connects AI workflows to current, curated cyber threat intelligence
Needs setup -
Bright Security
com.brightsec/mcpEnables AI agents to access Bright Security tools for app discovery and security testing.
Needs setup -
x402 Domain Lookup & DNS Email Auth
dev.workers.microtools-x402.x402-dns-auth-checker/dns-auth-checkerDomain lookup (DNS records + RDAP registrar/age/expiry), bulk, and SPF/DKIM/DMARC audit via x402.
Not responding -
Arcai
io.arcai/arcaiCrypto intelligence: rug/scam scans for any token, verified whale flows, AI signals + track record
Not responding -
Vara MCP — Field Intelligence Scan Server
io.github.kushkillerjsixx66/vara-mcp-serverGoverned external-environment scanning: signal harvest, Field Intel Reports, per-signal lineage.
Not responding -
ZEN SecDB
cloud.nttzen.secdb/zen-secdbZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.
Not responding -
APEX disclosure test (temporary, will be deleted)
io.github.SSJCorpSec/apex-disclosure-test-968cf160Temporary authorized security research probe. Safe to ignore. Will be removed shortly.
Not responding -
SolGuard Solana Token-2022 Scanner & Safe-Swap Router
io.github.Tradelord223/solguard-mcpSolana Token-2022 honeypot scanner, 1-SOL slippage probe & Jito MEV-safe swap router.
Not responding -
PG1 Sovereign Threat Intelligence
io.github.Project-Gifted1/pg1-threat-intelPreflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.
Not responding -
Pulse402 Oracle
io.github.ak10082247-max/pulse402-oracleReal-time Base & Solana liquidity, Polymarket orderflow, and pre-trade security via x402 V2.
Not responding -
72hours security check
io.github.maebsy/72hoursScan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.
Not responding -
uta-shield Remote (Barter-enabled)
io.github.eddyflores100-lang/uta-shield-remoteRemote MCP firewall with barter protocol: identity, threat-intel, IoC lookup.
Not responding -
MCP Security Sanitizer
io.github.kansal-mukul/mcp-security-sanitizerRedacts common secrets, email addresses, and phone numbers.
Not responding -
Paladin Front PHP Rescue & Zero-PHP Migration MCP
com.paladinfront.www/php-rescue-mcpPHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Not responding -
BookingTruth Booking Assurance
com.bookingtruth/bookingtruthVerifies travel bookings against supplier-authoritative evidence; honest UNKNOWN verdicts.
Not responding -
PYRESEC - AI Code Security Auditing
io.github.renaat-s/pyresec-agentAI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.
Not responding -
Quellenkontor HR-Daten
dev.quellenkontor/hr-datenVerified German HR data with legal source: minimum wage, social security, holidays, notice periods
Not responding -
GoldenCheck
io.github.benseverndev-oss/goldencheckAuto-discover validation rules from data — scan, profile, health-score. No rules to write.
Not responding -
FlowSentry
io.github.vasilicasijarvis/flowsentrySecurity scanner for n8n workflows + live MCP Trust-Check. 18 rules, OWASP mapped. Paid x402 API.
Not responding -
MCP Security & Vulnerability Auditor
io.github.Ansarii/mcp-security-auditorStatic AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.
Not responding -
Neon Zero-Trust MCP Gateway
io.github.Ansarii/zero-trust-mcp-gatewayAI security firewall & DLP proxy protecting API keys and blocking destructive commands.
Not responding -
Verify China Supplier | Supplier Check
io.github.lu7897859-tech/china-sourcing-auditVerify a Chinese supplier before you pay: company identity, status, risk signals. x402 per call.
Not responding -
Company filing and CVE evidence snapshots
io.github.Stavros65/fishnet-company-cveCompany filing/CVE snapshots, status and optional feedback. Remote MCP or local stdio. Free Phase A.
Not responding -
Korea Company Data
io.github.lichtsalz/korea-dataKorean company identity, registration status and monthly payroll-based employment, in English.
Not responding -
Vett Compliance MCP Server
io.github.Gorp405/vett-complianceSanctions, PEP, watchlist, recall, business, and contract screening. Free tier, no auth required.
Not responding -
Ritwik Joshi Personal MCP Server
io.github.Ritwikjoshi/ritwikjoshi-mcpReal-time authoritative data for Ritwik Joshi (2x TEDx Speaker, AI entrepreneur).
Not responding
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.