Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
498 servers · page 9 of 17
-
AgentGuard — security checks for AI agents
io.github.shuaicongxiaomai/agentguardSecret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).
Local install -
Feishu User Plugin
io.github.zhuzhen-team/feishu-user-pluginFeishu/Lark MCP server + CLI tool. 85 tools, 3 auth layers. Send as user via cookie+protobuf.
Local install -
FYI MCP
io.github.edithatogo/fyi-mcpFYI request management with tools for requests, authorities, correspondence, sync, and health.
Local install -
Solana Security Standard
io.github.Copenhagen0x/solana-security-mcpScan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.
Local install -
Eleion Scanner
io.github.hernaninverso/eleion-scanner-mcpRegister/verify your domains, queue security scans, and read findings (CVE, severity).
Local install -
Guarded WhatsApp
io.github.peter-tnc-453/guarded-whatsapp-mcpSecurity gate for agent-driven WhatsApp: allowlist, secret scan, rate limit, audit log.
Local install -
SAST MCP Server
io.github.Skyrxin/sast-mcp-server11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations
Local install -
Anaconda MCP
io.github.anaconda/anaconda-mcpBeta conda env/package MCP server; requires conda, auth, and Beta Terms.
Local install -
Accessibility Scanner Mcp
io.github.Bishop81/accessibility-scanner-mcpScan any URL for WCAG accessibility issues (axe-core) and get per-element fixes for an AI agent.
Local install -
Gateway
io.github.bolyra/gatewayMCP auth gateway: verify agent identity, enforce per-tool permissions, block replays, emit receipts.
Local install -
Local install
-
Shield
io.github.bolyra/shieldStdio MCP auth proxy: wrap any MCP server with per-tool permission enforcement.
Local install -
Servicenow Mcp Ai
io.github.LeassTaTT/servicenow-mcp-aiServiceNow MCP server — 67 tools over the full REST surface, every auth method, flows, diagrams.
Local install -
ClauseKeeper Compliance Scanner
io.github.mityda/clausekeeperScan website legal docs for missing or stale compliance clauses. Rule-based, no LLM.
Local install -
Inbody Api Mcp
io.github.rwestergren/inbody-api-mcpMCP server for InBody body-composition data — scans, body fat, muscle mass, body water
Local install -
Ai Supply
io.github.ai-supply-store/ai-supplySearch, install, publish & review security-scanned AI capabilities from ai-supply.store.
Local install -
PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder
io.github.nouchix/pqc-khepra-mcpPost-quantum CMMC compliance scanner & AI agent attestation. FIPS 140-3, ML-DSA-65, 36K+ mappings.
Local install -
Windows Management
io.github.AhmedLaminou/windows-mcp-serverLocal Windows management, diagnostics, security, cleanup, and optimization MCP server.
Local install -
Liveauth Mcp
io.github.dulzuradev/liveauth-mcpMCP server for LiveAuth: PoW + Lightning auth, L402 bundles, and paid MCP tool receipts.
Local install -
dazai — burn-after-reading secret (motokano)
io.github.New1Direction/motokanoServe a secret to an agent exactly N times from locked RAM, then wipe it and self-destruct.
Local install -
BlackDome Threat Intel
io.github.blackdome-ai/blackdomeLive honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors.
Local install -
MCP Gateway Scan
io.github.willianpinho/mcp-gateway-scanRead-only MCP/agent-gateway readiness scanner — scores a repo across 7 security dimensions.
Local install -
MCP Shield
io.github.sophiacave/mcp-shieldSecurity scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.
Local install -
Meridian Mcp
io.github.KNambiarDJsc/meridian-mcpLocal-first compliance scanner for DPDPA 2023/2025, RBI FREE-AI, SEBI AI/ML & EU AI Act.
Local install -
Secrets Audit Mcp
io.github.eltociear/secrets-audit-mcpDetects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
Local install -
Secret Safe Env
io.github.irrenwill/secret-safe-envWrite secrets into .env without the agent ever seeing the value - Windows masked dialog (繁中 UI)
Local install -
Mcp Safeguard
com.cognivators/mcp-safeguardMCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.
Local install -
Supership Scan
io.github.andysalvo/supership-scanBuy any x402 API or data on Base, Solana, Polygon. No wallet on the seller's chain. For AI agents.
Local install -
Leakferret
io.github.leakferrethq/leakferretContext-aware secret scanner: lets an AI agent scan, verify, and rewrite secrets before committing.
Local install -
Kalshi Prediction Markets
io.github.cejor6/kalshi-mcp-serverMCP server for Kalshi prediction markets: native RSA-PSS auth, rate limiting, demo/prod safety.
Local install
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.
