Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
498 servers · page 8 of 17
-
TridentChain Security
io.github.DevInder1/tridentchain-securityLocal supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.
Local install -
Dropscan Mcp
io.github.bitterdev/dropscan-mcpMCP server for the Dropscan postal mail scanning API: read scanned letters, act on mailings.
Local install -
Mcp Observatory
io.github.KryptosAI/mcp-observatoryMCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
Local install -
Forge MCP
io.github.frmoded/forge-mcpMCP server + tools for the Forge E-- generative-music authoring loop (compile / run / commit).
Local install -
Mcp Server
com.correctover/mcp-serverMCP runtime security. 22µs validation, 97% self-healing. Detects RCE, SSRF, credential hijacking.
Local install -
Scan Mcp
io.github.jacksenechal/scan-mcpMCP server for scanner discovery and batch capture via SANE
Local install -
Checker Mcp
com.oksigenia/checker-mcpDomain security & privacy checker as an MCP server. 17 live checks, 0-100 score, local-first.
Local install -
Mcp
dev.mcpgrade/mcpSecurity grades (A-F) for MCP servers. Check one before you install or trust it. mcpgrade.dev
Local install -
Voyager Net
io.github.dir-ai/voyager-netA safe, read-only, authorized audit of one host you own: DNS, ports, TLS, HTTP hygiene.
Local install -
DeepPane Focus Space
com.deeppane/focus-spaceCreate focus spaces and read user-authorized focus history summaries.
Local install -
Krita Codex MCP
io.github.cyyprezz/krita-codex-mcpControl Krita through a secure local MCP server and authenticated Windows bridge.
Local install -
Netallion MCP Lite
io.github.netallion/netallion-mcp-liteLocal secret & credential checks for AI-assisted dev — runs on your machine, results redacted.
Local install -
Intelthreadlinqs Mcp
io.github.threadlinqs-cmd/intelthreadlinqs-mcpThreadlinqs threat-intelligence MCP — 49 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs
Local install -
Black Duck Security Scanner
com.blackduck/mcp-serverAI-powered security scanning using Black Duck Signal for vulnerability detection.
Local install -
Scannd
com.scannd/scanndTrigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.
Local install -
Scout Security
io.github.Varpost/scoutDeterministic, zero-token security scanner your AI agent calls to find and re-verify issues.
Local install -
Skia Studio
io.github.lixiaolin94/skia-studioMCP bridge to a live Skia Studio tab: AGSL/SkSL shader authoring, graph editing, screenshots.
Local install -
Sophos Central Mcp
io.github.rijul170/sophos-central-mcpMCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant ops
Local install -
Rootpilot Ssh Diagnose
io.github.Easton-OU/rootpilot-ssh-diagnoseRead-only SSH server diagnostics via a fixed 38-command whitelist; secrets redacted, no write path.
Local install -
Datahogo
io.github.datahogo/datahogoScan a project for security issues locally with the open-source Data Hogo engine.
Local install -
mcp-scan
io.github.CodingSelim/mcp-scanPassive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.
Local install -
Mcp
io.github.shieldly-io/mcpAI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.
Local install -
AdrMcp
io.github.Atypical-Consulting/adr-mcpMCP server for Architectural Decision Records: navigate, author, validate, link, and analyze them.
Local install -
Purify Security Feeds
io.github.eason4kim-rocket/purify-feeds-mcpQuery CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions
Local install -
Xrpl Identity Mcp
io.github.jarod-vyent/xrpl-identity-mcpMCP server for XRPL identity: DIDs, credentials, signer lists, and safe transaction workflows.
Local install -
klaws — Korean compliance risk scanner
io.github.rostradamus/klawsScan code for Korean compliance risks — PIPA/개인정보보호법, Network Act, Credit Info. Not legal advice.
Local install -
Atag Mcp
io.github.MMasey/atag-mcpATAG 2.0 (Authoring Tool Accessibility Guidelines) guidance for authoring tool developers
Local install -
HTTP
io.github.Abhishekkumar2021/httpHTTP/REST client with saved collections, env secrets, and SSRF-safe host allowlisting.
Local install -
Checkmcp
io.github.H129hj/checkmcpAudit any MCP server's security & quality — OWASP MCP Top 10 + explainable 0-100 MCP Score
Local install -
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.
