Security MCP servers

Human sign-off + trust receipts for AI agents: requires a named human's approval before an irreversible action (payment release, record change, deploy), then mints an offline-verifiable Ed25519 Trust Receipt. Also exposes trust profiles, receipt verification, disputes, and delegation. Apache-2.0; policy engine formally verified. Install: npx -y @emilia-protocol/mcp-server.

MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.

MCP server for querying the Shodan API and Shodan CVEDB. This server provides tools for IP lookups, device searches, DNS lookups, vulnerability queries, CPE lookups, and more.

MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and allows you to generate malware analysis reports automatically.

A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling binaries, renaming methods and data, and listing methods, classes, imports, and exports.

MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

Scan code for security vulnerabilities using Semgrep.

AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII detection. 7 MCP tools, zero dependencies.

Mobb Vibe Shield identifies and remediates vulnerabilities in both human and AI-written code, ensuring your applications remain secure without slowing development.

MCP server for maigret, a powerful OSINT tool that collects user account information from various public sources. This server provides tools for searching usernames across social networks and analyzing URLs.

MCP Server for managing & interacting with Open Source NGFW OPNSense via Natural Language

MCP server for Bitwarden and Vaultwarden vault management. Search, create, edit, and organize logins, notes, cards, identities, SSH keys, folders, collections, attachments, and Sends via the official bw CLI.

Deterministic security scanning that needs no model or API key, plus governed coding tasks.

Extracts essential code structure from large codebases into AI-digestible format, helping AI agents write code that correctly uses existing APIs on the first attempt.

Local-first, zero-egress security scanner for AI-generated / "vibe-coded" JS/TS. Bundles Opengrep, Gitleaks & Trivy behind one CWE-keyed schema and adds AI-code-specific checks (client-side secret exposure, Supabase RLS, prompt-injection & LLM-output XSS sinks). No account, no telemetry.

Server security auditing and hardening toolkit. 413 security checks across 29 categories (SSH, Firewall, Docker, TLS, HTTP Headers), CIS/PCI-DSS/HIPAA compliance mapping, 19-step production hardening, fleet management, and forensic evidence collection. Supports Hetzner, DigitalOcean, Vultr, and Linode. 13 MCP tools.

Runtime governance proxy for MCP servers. Risk scoring, hash-chained audit, per-tenant policy.

Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

Validate HTML and CSS, audit SEO and JSON-LD, and check user-authorized public links.

Coding agent signs up for SaaS and vaults the API keys write-only: never in .env or agent context.

Security MCP for vibe coding with 330 rules and 29 tools. Purpose-built for AI-generated code — scans Next.js, Supabase, Clerk, Stripe, Prisma, Hono, GraphQL, and 25+ modules. Cross-file taint analysis, host security audit, auto-fix, SARIF export, pre-commit hook, and CVE version detection. Zero config, runs locally.

CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics.

Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…

MCP server for dnstwist: detect typosquatting, phishing and brand impersonation domains.

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.

Supply chain risk scoring for npm, PyPI, Cargo, and Go packages. 9 tools for behavioral trust signals — publisher depth, release consistency, maintenance patterns. Both axios and node-ipc scored CRITICAL before they got attacked. Free CLI, CI gate, REST API. No API key required.

MCP server for dnstwist, a powerful DNS fuzzing tool that helps detect typosquatting, phishing, and corporate espionage.

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

Security testing MCP server with 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment.

MCP server for reverse engineering tasks in Ghidra 👩‍💻

Dead code detection, security scanning, and code quality analysis for Python, TypeScript, and Go. 98% recall with fewer false positives than Vulture. Includes AI-powered remediation.

Pre-install guardian for npm packages with static code analysis, supply-chain attack detection, vulnerability audit (npm + GitHub Advisory Database), AI hallucination guard, and CycloneDX 1.6 SBOM generation with VEX. 28 MCP tools. Zero runtime dependencies — the SBOM serializer is implemented natively against the public CycloneDX schema.

Generate Express.js backend projects with ORMs, auth, payments, and DevOps

Manage UniFi Access doors, credentials, policies, visitors, and events via MCP.

Credential isolation proxy for AI agents. Injects secrets at the network boundary with domain restrictions, agent authentication, and audit logging. No SDK required — works as a transparent HTTP proxy or MCP server.

Push notifications and human-in-the-loop approvals for AI agents, with a cross-agent audit trail.

Injects a live, reversible MCP server into a running Express / FastAPI / Next.js app — reads safe by default, writes gated behind human confirmation. The same engine also proves deploys and PRs (apocalypse / review).

A native Model Context Protocol server for Ghidra. Includes GUI configuration and logging, 31 powerful tools and no external dependencies.

AI agent identity, W3C credentials, EU AI Act compliance. 47 MCP tools.

Manage Authentik through AI assistants

Agent identity, scoped delegation, and governance: issue passports, build and verify narrowing-only delegation chains, enforce policy at a gateway, and emit signed admission and outcome records. 150 tools. npx -y agent-passport-system-mcp

AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.

Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.

Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.

MCP server for the SCF Controls Platform — 72 tools for controls, evidence, risk, and TPRM.

Scan/purge hidden text & score web domains: TLS, DNS, headers, speed. Free scans, $0.01 actions. The Tools: - text_scan_v1 — free Scans a text string for invisible Unicode characters, homoglyphs, and normalization issues. Returns a risk score, a list of flagged characters, and detected homoglyphs. Never modifies the input text. - text_purge_v1 — $0.01 per call Removes invisible Unicode characters and replaces homoglyphs in a text string, then normalizes the result. Returns the cleaned text plus a before-and-after risk comparison. - domain_check_score_v1 — free Overall score, per-category scores, and how many findings each category raised. Use it to triage: rank a list of domains, confirm one is healthy, or decide whether the full report is worth pulling. It tells you which categories are weak and how many issues they hold, but not what the issues are. - domain_check_score_batch_v1 — free The same triage scores for up to 100 domains in a single call. One score summary per distinct domain: overall score, per-category scores, and how many findings each category raised. Never the findings themselves. - domain_check_v1 — $0.01 per call Full report for one domain: weighted score out of 100, per-category breakdown, and every individual finding with a prioritised remediation order. - domain_check_batch_v1 — from $0.005 per domain The same full report for up to 100 domains in a single call, with one payment for the whole batch instead of one per domain. Both cheaper per domain and much faster than calling domain_check_v1 in a loop.

A secure MCP (Model Context Protocol) server that enables AI agents to interact with the Authenticator App.

Local security layer for coding agents: prompt-injection checks, secret redaction, MCP proxy.

Elasticsearch MCP Server with multi-version support (ES 5.x-9.x) for security analysis and threats.

Security gateway that wraps any MCP server with per-tool policies, approval gates, and optional Ed25519-signed receipts. Shadow mode logs every tool call; enforce mode blocks, rate-limits, or requires approval.

Audit web pages for AI search readiness (ChatGPT, Claude, Perplexity, Gemini).

MCP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker

The dependency bloodhound for AI coding agents. Zero API keys, zero config.

Official MCP server for Conan C/C++ package manager. Create projects, manage dependencies, check licenses, and scan for security vulnerabilities.