Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
935 servers · page 5 of 32
-
Sec Nport
io.github.pipeworx-io/sec-nportSEC Form N-PORT — fund and ETF holdings, asked security-first.
Live 605 ms -
Live 295 ms
-
Stackexchange
io.github.pipeworx-io/stackexchangeStackExchange MCP — wraps the StackExchange API v2.3 (free, no auth required for read)
Live 242 ms -
Studio Ghibli
io.github.pipeworx-io/studio-ghibliStudio Ghibli MCP — fan API. Auth: none. Docs: https://ghibliapi.vercel.app
Live 335 ms -
Sunrisesunset
io.github.pipeworx-io/sunrisesunsetSunrise-Sunset MCP — wraps the sunrisesunset.io API (free, no auth)
Live 592 ms -
Superhero
io.github.pipeworx-io/superheroSuperhero MCP — wraps akabab.github.io/superhero-api (free, no auth)
Live 610 ms -
Live 239 ms
-
Swissmedic
io.github.pipeworx-io/swissmedicSwissmedic authorised human medicines — the 'Zugelassene Arzneimittel HAM' list, Switzerland's…
Live 655 ms -
Swisstransport
io.github.pipeworx-io/swisstransportSwiss Transport MCP — wraps Transport Open Data API (free, no auth)
Live 791 ms -
Threatfox
io.github.pipeworx-io/threatfoxThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)
Live 676 ms -
Live 545 ms
-
Tle
io.github.pipeworx-io/tleTLE MCP — satellite tracking via Two-Line Element sets (tle.ivanstanojevic.me, free, no auth)
Live 536 ms -
Tn Dmv
io.github.pipeworx-io/tn-dmvTennessee DMV MCP — Department of Safety and Homeland Security: the 186 driver service centers…
Live 604 ms -
Live 252 ms
-
Live 144 ms
-
Social Security COLA 2027 MCP
io.github.theluckystrike/social-security-cola-2027-mcpSocial Security COLA 2027, full retirement age, earnings test and 2027 limits from SSA notices.
Live 614 ms -
縦綱 Tatezuna — o-sumo
us.osada/o-sumoGrand Sumo (大相撲) banzuke, torikumi results, and rikishi profiles from osada.us. Read-only, no auth.
Live 765 ms -
Tech Risk
ai.greyridgesignals/tech-riskMCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/LLM08), x402-payable
Live 126 ms -
Ohey research
ca.ohey/researchWeb malware techniques, kits and EtherHiding contracts from Ohey's website scans. No sign-in.
Live 694 ms -
Spill
com.clawhard/spillFind leaked API keys, tokens and passwords in pasted text, see which are live, get a clean copy.
Live 514 ms -
RealMarket Site Check
com.realmarketlabs.tools/site-checkPassive checks of a public website: email authentication (SPF, DKIM, DMARC) and basic security.
Live 962 ms -
Security Startups
com.securitystartups/catalogSearch a curated directory of young security companies and its CC BY 4.0 stats. Read-only, no key.
Live 1382 ms -
decoy.day honeypot
day.decoy/honeypotA public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day.
Live 221 ms -
API Change Feed
dev.workers.anthonyzilar.changefeed/api-change-feedBreaking changes, deprecations and security fixes for 38 popular APIs/SDKs. Paid per call via x402.
Live 1124 ms -
Touchline Wire — FPL & Premier League Intelligence
io.github.Steven-Robinson/touchlinewire-mcpZero-auth FPL expected minutes, captains & transfers, plus Premier League lineups & stats.
Live 134 ms -
Dependency check
io.github.ladanyin/dependency-checkCheck a package version for known vulnerabilities and Packagist release facts.
Live 448 ms -
Live 220 ms
-
Live 350 ms
-
Live 1019 ms
-
Postcodes
io.github.pipeworx-io/postcodesPostcodes MCP — wraps postcodes.io UK postcode API (free, no auth)
Live 2319 ms
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.