Security MCP servers
Security scanning, identity and secrets. Every server below is from the official MCP registry and is checked by us each day.
Security
935 servers · page 1 of 32
-
BlackVeil DNS & Email Security Scanner
com.blackveilsecurity/dnsDNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
Live 1058 ms -
Forwardsmith buyer desk (read-only)
com.forwardsmith/buyer-deskRead-only desk for buyers and assistants: offer, prices, fit check, readiness scan, intake draft.
Live 404 ms -
MakeItSay
com.makeitsay/makeitsayChange the words in a screenshot or photo and keep the original font and layout.
Live 455 ms -
Kestrova Solidity Security Scan
com.onrender.kestrova-api/kestrovaFree Slither scan of Solidity contracts for AI coding agents; optional paid report (1 USDC, x402).
Live 847 ms -
Paragon Boxing & BJJ Gear Advisor
com.paragonelitefight/fight-gear-advisorRead-only boxing and BJJ gear guidance, sizing, product comparison, rules and identity checks.
Live 403 ms -
Spurvik EU AI Act
com.spurvik/eu-ai-actLive URL scan, AI Act risk check, 24-EU-language Art. 50 badge, HMAC receipts & approval gates.
Live 169 ms -
Klar Daheim
io.github.BoHaMuc/klar-daheimRead-only German senior home guide (stairlift, home lift, ramp, bath): costs, subsidies. No auth.
Live 150 ms -
arifOS
io.github.ariffazil/arifosConstitutional authority plane for AI agents — verifies identity and authority before execution.
Live 1404 ms -
Spurvik
io.github.spurvik/spurvik-mcp-serverEU AI Act Art. 50, 12 & 14 setup snippets, unwrapped-call scan, HMAC receipt & marking hooks.
Live 134 ms -
A11y Audit (ADA Lawsuit-Risk Scan)
io.github.theharrisontruong-web/a11y-auditScans any URL for the WCAG failures behind ADA lawsuits. $1.50/call via x402.
Live 340 ms -
Excession Labs: CVE intelligence and security research
ai.excessionlabs/siteSearch CVEs, source software/version evidence, KEV, EPSS and public security research.
Live 996 ms -
Homo Universalis — HU-DIAMOND v1.1, W3C VC Ma'at, ROS 2 & 3-Level Consciousness MCP
ai.homouniversalis/diamond-verifierZero-auth Notary & AST: RM(1,3), RFC 6962, W3C VC 2.0, ROS 2 Humanoid & 3-Level Consciousness.
Live 151 ms -
Clawhard Studio
com.clawhard/studioToken counts, contrast, time zones, cron, JSON repair, DMARC, packages, Unicode, links, quotes
Live 140 ms -
Go Voltic site scan
com.go-voltic/site-scanScans a public website and returns a score with its first findings.
Live 514 ms -
NOMOS
com.nomosprotocol/nomosAsk a sealed authority whether an action may proceed. Answers are deterministic and citable.
Live 294 ms -
Psychedelics Knowledge Graph
com.psychedelicskg/knowledge-graphSearch psychedelic research papers, compounds, outcomes, authors and their relationships.
Live 326 ms -
QRVow
com.qrvow/qrvowCreate, edit and track dynamic QR codes that never stop working, with scan stats.
Live 339 ms -
ScanMalware.com URL Scanner
com.scanmalware.mcp/scanmalware-mcpMCP server for ScanMalware.com URL scanning, malware detection, and analysis.
Live 143 ms -
UpHeron
com.upheron/upheronUptime and vulnerability monitoring: check sites, manage monitors, incidents and status pages.
Live 306 ms -
Emblematic
dev.emblematic/emblematicReal websites' design specs: exact colors, fonts, type scale and a DESIGN.md. Free, no auth.
Live 1574 ms -
CookieRisk Quickscan
eu.cookierisk/quickscanScan a public homepage for cookies and tracking observed before consent interaction.
Live 371 ms -
EchelonGraph CVE & Exposure
io.echelongraph/echelongraph-mcpCVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
Live 242 ms -
Garita MCP
io.github.Garitalab5/garita-mcp30 security tools + the Vigia agent to audit MCP servers before you connect.
Live 479 ms -
OpenWatch Nigeria
ng.openwatch/openwatchSecurity incidents across Nigeria, such as kidnapping and banditry, with sources and confidence.
Live 2991 ms -
BlindBoxShop — Blind Box Weight Database, Chase Odds & Auth Guide
com.blindboxshop/mcpLook up blind box gram weights, calculate 1:144 chase odds & verify Labubu batch authenticity.
Live 629 ms -
Enterprise Mcp Gateway
com.neoninnovationlab/enterprise-mcp-gatewayZero-Trust MCP Firewall, PII Redactor & Cursor 40-Tool Bypass Gateway by Neon Innovation Lab
Live 1021 ms -
Live 523 ms
-
SaltCrate Oracle
com.saltcrate/oracleVerify claims, monitor pages, catch changes & scan deps for CVEs. 200 free calls/hr, $0.01/call.
Live 458 ms -
BlueNOC
io.bluenoc/bluenocRead-only facts about BlueNOC firewall security monitoring: product, pricing, live quotes, articles.
Live 555 ms -
K-12 Educational Tools & Curriculum Catalog (Math, Reading, Spanish)
io.github.birkanyavuz/educational-toolsZero-auth K-12 + early-childhood datasets: Dolch words, TR-EN flashcards, Spanish, creator data.
Live 332 ms
Data: the official MCP registry, read daily. Live status, response time and tool lists come from our own check: we connect without credentials, so servers that need a key show as "Live, key required". Maintainers can add a "Listed on NestDaddy" badge from their server's page.