Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
498 servers · page 7 of 17
-
Nel Veil
io.github.NELPROINC/nel-veilFree passive security scanning - check any domain's DMARC, TLS, headers, and exposures.
Local install -
SPARDA
io.github.zakariagharzouli/sparda-mcpAI writes. SPARDA proves. Deterministic, offline security gate for AI edits.
Local install -
Posecode Mcp
io.github.posecode-dev/posecode-mcpAuthor, ROM-validate, and render 3D human movement (.posecode) with a shareable playground link.
Local install -
Mcp Firefly Iii
io.github.YakupEmreYerli/mcp-firefly-iiiSecurity-first, self-hosted MCP server for Firefly III — 152 operations behind 5 scoped tools.
Local install -
Securityscan
io.github.securityscan-api/securityscanSecurity for AI agents: MCP audits, secret redaction, skill vetting, network scans, agent checkout.
Local install -
AIShield Security Scanner
io.github.lm203688/aishieldScans MCP servers for tool poisoning, prompt injection and supply chain risks.
Local install -
Mcp Secret Scrub
io.github.sudo-ai-git/mcp-secret-scrubDeterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.
Local install -
Mcp Api Connect
io.github.bvenkata/mcp-api-connectProtocol- & auth-agnostic API connector: SOAP/REST behind any auth, config-driven. Lib/API/MCP.
Local install -
Ghost Publisher
io.github.BlogFactoryHQ/ghost-publisherLocal-first MCP server for safe Ghost authoring, diagnostics, scheduling, and publishing.
Local install -
Sentinel Scan
io.github.Ventrova/sentinel-scan-cliMCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics.
Local install -
Keel
io.github.lutfizp/keelControl plane MCP that dedups scanner output, rate-limits hosts, and runs non-destructive proofs.
Local install -
1Claw Vault
io.github.1clawAI/1claw-mcpHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.
Local install -
Secret MCP
io.github.yyeongjin/secret-mcpLocal MCP server for isolated, evidence-backed GDWEB design analysis and web search.
Local install -
Venue Authority
io.github.kingymon1/venue-authorityVerify food-service facilities against supported regulator records.
Local install -
Ghost Publisher
io.github.BoraGkc/ghost-publisherLocal-first MCP server for safe Ghost authoring, diagnostics, scheduling, and publishing.
Local install -
Make Audit Mcp
io.github.arose26/make-audit-mcpAudit Make.com blueprints before importing: hardcoded secrets, dangling refs, risky settings.
Local install -
Identity Forge
io.identityforge/mcpDesign kits, brand naming, and domain research for coding agents.
Local install -
Tripwire Guard — evidence-first injection scanner
io.github.KubaOpoczka/tripwire-guardLocal read-only MCP scanner for known prompt-injection patterns with exact evidence and no network.
Local install -
Nemesis Shield
io.github.eobi/nemesis-shieldPositive-security for apps, APIs, LLMs and edge, plus fraud scoring and identity/AML screening.
Local install -
Secretguard Mcp
io.github.vladimirbakalov/secretguard-mcpScans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.
Local install -
Rpgmaker Xp Mcp
io.github.SerifeusStudio/rpgmaker-xp-mcpAuthor RPG Maker XP games in natural language: read, write and render RGSS1 .rxdata.
Local install -
Hares — MCP security scanner
io.github.alialrikabi313/haresMulti-layer security scanner for MCP servers and agent skills (injection, exfiltration)
Local install -
Code Guard Mcp
io.github.mlawsonking/code-guard-mcpSecurity scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.
Local install -
Hadith Checker [Dorar.net]
io.github.ibnsaleem29/dorar-hadith-mcpResearch Hadith, authenticity, grading, Takhrij and Sharh [commentaries] in Claude Desktop for free.
Local install -
Gorgon Scout
io.github.Gorgon-Cyber/gorgon-scoutRun AI-driven web-app and API security scans (DAST) from Claude or any MCP agent. Windows.
Local install -
mendapi
com.mendapi/mendapiDetect API breaking changes, scan your codebase for impact, and draft the fix. Runs locally.
Local install -
Intelthreadlinqs Mcp
com.threadlinqs/intelthreadlinqs-mcpThreadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs
Local install -
MCP Customs
io.github.mcpcustoms/mcp-customsInspect an MCP server for common security risks before you install it. Offline, zero telemetry.
Local install -
SkyGlance — What's Flying Above You
io.github.darshjoshi/skyglanceWhat's flying above you: live aircraft, identity, routes, and your own sighting history.
Local install -
SPARDA
io.github.zyx77550/sparda-mcpAI writes. SPARDA proves. Deterministic, offline security gate for AI edits.
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.
