Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
498 servers · page 5 of 17
-
Cybersec Toolkit
io.github.26zl/cybersec-toolkitAuthorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.
Local install -
FTX MCP — FactoryTalk Optix MCP Server
io.github.asqi-carter/ftx-mcpMCP server for FactoryTalk Optix: author, preview, and verify Studio changes via the emulator.
Local install -
MobiLoop
io.github.enessubass/mobiloop-mcpGuarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.
Local install -
toolprint by JEStats
io.github.jestatsio/toolprintpackage-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.
Local install -
Authority Risk Mcp
io.github.RealSpap/authority-risk-mcpRead-only tools for AI agents: who can change a smart contract, how fast. Signed data, testnet.
Local install -
OpsecForge
io.github.cyberdroid2077/opsecforgeLocal MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.
Local install -
Airlock RLS
io.github.mateuszingano/airlock-rls-mcpScan a deployed site for an exposed Supabase service_role key and audit Row Level Security.
Local install -
DechoNet
io.github.node-man/dechonet-mcpMoved to com.dechonet/mcp. 25 security tools, hosted at https://dechonet.com/mcp
Local install -
kdbx
io.github.yarrasys/kdbxRead-only access to secrets in a local KeePassXC vault. Runs commands with them injected.
Local install -
MCP Dataverse
io.github.codeurali/dataverseMicrosoft Dataverse MCP server: CRUD, FetchXML, metadata, schema, audit, batch and security roles.
Local install -
VulnCheck
io.github.vulncheck-oss/mcpVulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.
Local install -
Mettle Mcp
io.github.Creed-Space/mettle-mcpExperimental reverse CAPTCHA with signed badges and credentials. Not proof of identity or substrate.
Local install -
AegisGate MCP
io.github.aegisgatesecurity/aegisgate-mcpSecure MCP server framework with 23 security layers and ML threat detection. Zero deps.
Local install -
MailHunterPro
io.github.twojlogin/mailhunter-proRead-only queries on local phishing scan results: findings, IOCs, SPF/DKIM/DMARC.
Local install -
Keyspoor
io.github.majiayu000/keyspoorOffline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.
Local install -
Deepsleuth
io.github.DeepSleuth/deepsleuthDeterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.
Local install -
Growthbook Mcp
io.github.growthbook/growthbook-mcpThin MCP server for GrowthBook — skill loader + authenticated API passthrough
Local install -
pqc-scan
io.github.microtoll/pqc-scanThe cryptography a JavaScript or TypeScript codebase uses, and which a quantum computer would break.
Local install -
Valca
io.github.pranlabs/valcaScans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.
Local install -
Phantom Secrets
io.github.ashlrai/phantom-secrets-mcpValue-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.
Local install -
PnP PowerShell
io.github.pnp/pnp-powershell-mcp-serverManage Microsoft 365 in natural language with PnP PowerShell and author PnP PowerShell scripts.
Local install -
n8n MCP Community
io.github.drzamarian/n8n-mcp-communityA security-focused MCP server for self-hosted n8n Community Edition.
Local install -
NetsCLI
io.github.fstubner/netscliNetwork scanner for AI agents: discover hosts, scan TCP and UDP ports, query DNS and mDNS.
Local install -
FAOSTAT MCP
io.github.berba-q/faostat-mcpFAOSTAT data for 245 countries: crops, trade, food security, and emissions via 23 MCP tools.
Local install -
Watchdog
io.github.OxToF/watchdog-mcpWho can change a Solana program or EVM contract, dependency advisories, scans. Paid per call (x402).
Local install -
Intended
io.github.intended-so/intendedIntended's authority layer as MCP tools: ALLOW/ESCALATE/DENY decisions with signed tokens.
Local install -
Stemem Identity Runtime
io.github.JOJO-Adam/stememLocal-first agent persona runtime (MCP): cross-session personality that survives compaction.
Local install -
Mcp Cinema4D
io.github.kumoproductions/mcp-cinema4dMCP server for Cinema 4D — entity CRUD, parameter-level access, batched undo, security controls.
Local install -
Security MCP
io.github.pratham-jain33/security-mcpZero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses
Local install -
Universal Host Manager Mcp
io.github.Abktya/universal-host-manager-mcpCross-platform FastMCP server for authenticated remote Linux/macOS host administration
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.
