How do I connect a Security MCP server to Claude Desktop or Cursor?

To install a Security MCP server, select your desired server from the directory, copy the JSON configuration snippet, and add it to your client config file (such as claude_desktop_config.json or .cursor/mcp.json).

Are Security MCP servers free to use?

Yes, all Security MCP servers listed in this directory are open-source and free to integrate into compatible Model Context Protocol clients.

866 Security MCP Servers

Q: What are Security Model Context Protocol (MCP) servers?

Model Context Protocol (MCP) servers in the Security category allow AI assistants (such as Claude Desktop, Cursor, Windsurf, and Cline) to connect directly to security tools, APIs, and databases without manual copy-pasting.

Security-focused MCP servers for scanning, auditing, secrets management, and threat analysis — giving AI agents safe, scoped access to the tools security teams already rely on.

Open in interactive directory Best Security servers →

Ida Pro MCP

mrexodia

MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and allows you to generate malware analysis reports automatically.

4 0 0

Agentward

agentward-ai

Permission control plane for AI agents. MCP proxy that enforces least-privilege YAML policies on every tool call, classifies sensitive data (PII/PHI), detects dangerous skill chains, and generates compliance audit trails. Supports stdio and HTTP proxy modes.

6 0 0

Auth0 MCP Server

Auth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural language

1 0 0

MCP Audit

P4ST4S

Transparent Go proxy that intercepts, signs, rate-limits, redacts, and audits all MCP JSON-RPC tool calls without modifying client or server.

3 0 0

Ui Ux Suite

UI/UX design-audit MCP server: scores a project on 12 dimensions vs WCAG 2.2 + APCA.

1 0 0

Agent Security Scanner MCP

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

1 0 0

Mobb Vibe Shield MCP

mobb-dev

Mobb Vibe Shield identifies and remediates vulnerabilities in both human and AI-written code, ensuring your applications remain secure without slowing development.

2 0 0

Safeinstall

Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks

1 0 0

Emilia Protocol

emiliaprotocol

Human sign-off + trust receipts for AI agents: requires a named human's approval before an irreversible action (payment release, record change, deploy), then mints an offline-verifiable Ed25519 Trust Receipt. Also exposes trust profiles, receipt verification, disputes, and delegation. Apache-2.0; policy engine formally verified. Install: npx -y @emilia-protocol/mcp-server.

4 0 0

Binary Ninja MCP

fosdickio

A Binary Ninja plugin, MCP server, and bridge that seamlessly integrates Binary Ninja with your favorite MCP client. It enables you to automate the process of performing binary analysis and reverse engineering.

3 1 0

Aegis

getaegis

Credential isolation proxy for AI agents. Injects secrets at the network boundary with domain restrictions, agent authentication, and audit logging. No SDK required — works as a transparent HTTP proxy or MCP server.

0 0 0

MCP Audit

Transparent audit proxy for MCP servers: logs every tool call, flags poisoning and rug pulls.

1 0 0

MCP Shodan

BurtTheCoder

MCP server for querying the Shodan API and Shodan CVEDB. This server provides tools for IP lookups, device searches, DNS lookups, vulnerability queries, CPE lookups, and more.

4 0 0

GhidraMCP

LaurieWired

A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling binaries, renaming methods and data, and listing methods, classes, imports, and exports.

8 0 0

Kastell

kastelldev

Server security auditing and hardening toolkit. 413 security checks across 29 categories (SSH, Firewall, Docker, TLS, HTTP Headers), CIS/PCI-DSS/HIPAA compliance mapping, 19-step production hardening, fleet management, and forensic evidence collection. Supports Hetzner, DigitalOcean, Vultr, and Linode. 13 MCP tools.

4 0 0

Sophos Central MCP

MCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant ops

0 0 0

Agentguard

AgentGuard — 20-tool AI safety MCP: policy preflight, risk scoring, audit logging, rate limits.

0 0 0

Korg Ledger

Verifiable cognition: prove a session ledger is tamper-evident; audit & import any agent's logs.

0 0 0

Dvalincode

Deterministic security scanning that needs no model or API key, plus governed coding tasks.

0 0 0

Shellward

jnMetaCode

AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII detection. 7 MCP tools, zero dependencies.

3 0 0

Kody

Personal assistant MCP server with search, execute, packages, jobs, secrets, and integrations.

1 0 0

Attestix

AI agent identity, W3C credentials, EU AI Act compliance. 47 MCP tools.

2 0 0

OPNSenseMCP

vespo92

MCP Server for managing & interacting with Open Source NGFW OPNSense via Natural Language

4 0 0

AI Distiller MCP

janreges

Extracts essential code structure from large codebases into AI-digestible format, helping AI agents write code that correctly uses existing APIs on the first attempt.

4 0 0

Cyberchef MCP

CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics.

0 0 0

Vorim MCP Server

AI agent identity, permissions, trust scores, and tamper-evident audit trails via Vorim AI

2 0 0

MCP Fortress

Security scanner for MCP servers with vulnerability detection and prompt injection analysis.

1 0 0

Vorim MCP Server

Kzino

AI agent identity, trust, and audit trail infrastructure. 17 MCP tools: register agents with Ed25519 keypairs, check permissions (sub-5ms), emit tamper-evident audit events, verify trust scores (0-100), delegate credentials, and manage ephemeral agents. IETF Internet-Draft filed (draft-vorim-vaip-00). Works with LangChain, OpenAI, CrewAI, Stripe ACP, and 4 more frameworks. npx @vorim/mcp-server.

1 0 0

Codeinspectus

Synvoya

Local-first, zero-egress security scanner for AI-generated / "vibe-coded" JS/TS. Bundles Opengrep, Gitleaks & Trivy behind one CWE-keyed schema and adds AI-code-specific checks (client-side secret exposure, Supabase RLS, prompt-injection & LLM-output XSS sinks). No account, no telemetry.

6 0 0

Web Validator by DigestSEO

Validate HTML and CSS, audit SEO and JSON-LD, and check user-authorized public links.

1 0 0

Nekzus Npm Sentinel MCP

Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…

1 0 0

Shodan

MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.

0 0 0

Guardvibe

goklab

Security MCP for vibe coding with 330 rules and 29 tools. Purpose-built for AI-generated code — scans Next.js, Supabase, Clerk, Stripe, Prisma, Hono, GraphQL, and 25+ modules. Cross-file taint analysis, host security audit, auto-fix, SARIF export, pre-commit hook, and CVE version detection. Zero config, runs locally.

2 0 0

Arc Gate MCP

9hannahnine-jpg

Runtime governance for MCP tool calls. Blocks prompt injection and capability abuse before tool results reach your agent.

5 0 0

Code Pathfinder

Code intelligence MCP server: call graphs, type inference, and symbol search for Python/Go.

3 0 0

FeedOracle Compliance Agent

MiCA compliance evidence, stablecoin risk, macro regime, agent governance. 79 tools.

0 0 0

Authentik MCP Server

Manage Authentik through AI assistants

1 0 0

Sparda

zyx77550

Injects a live, reversible MCP server into a running Express / FastAPI / Next.js app — reads safe by default, writes gated behind human confirmation. The same engine also proves deploys and PRs (apocalypse / review).

1 0 0

SPARDA

AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.

0 0 0

Skylos

duriantaco

Dead code detection, security scanning, and code quality analysis for Python, TypeScript, and Go. 98% recall with fewer false positives than Vulture. Includes AI-powered remediation.

7 0 0

Operant MCP

operantlabs

Security testing MCP server with 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment.

0 0 0

Abnormal Security MCP

Abnormal Security email threats, cases, and reporting in your terminal and your AI agents.

0 0 0

MCP Server

rad-security

MCP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.

2 0 0

Aiseo Audit

Audit web pages for AI search readiness (ChatGPT, Claude, Perplexity, Gemini).

1 0 0

Authenticator MCP

firstorderai

A secure MCP (Model Context Protocol) server that enables AI agents to interact with the Authenticator App.

3 0 0

GhidrAssistMCP

jtang613

A native Model Context Protocol server for Ghidra. Includes GUI configuration and logging, 31 powerful tools and no external dependencies.

1 0 0

AIM Guard MCP

AIM-Intelligence

Security-focused MCP server that provides safety guidelines and content analysis for AI agents.

2 0 0

MCP Server Scf

MCP server for the SCF Controls Platform — 72 tools for controls, evidence, risk, and TPRM.

1 0 0

Agent Passport MCP

aeoess

Agent identity, scoped delegation, and governance: issue passports, build and verify narrowing-only delegation chains, enforce policy at a gateway, and emit signed admission and outcome records. 150 tools. npx -y agent-passport-system-mcp

4 0 0

Sonarqube MCP Server

An MCP server that enables integration with SonarQube Server or Cloud for code quality and security.

0 0 0

Agent Safe Pipeline

decionis

Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks.

1 0 0

Conan MCP

conan-io

Official MCP server for Conan C/C++ package manager. Create projects, manage dependencies, check licenses, and scan for security vulnerabilities.

Verified

3 0 0

Keel

Control plane MCP for scoped recon, triage, and bounded proofs.

0 0 0

Scopeblind Gateway

tomjwxf

Security gateway that wraps any MCP server with per-tool policies, approval gates, and optional Ed25519-signed receipts. Shadow mode logs every tool call; enforce mode blocks, rate-limits, or requires approval.

2 0 0

Elasticsearch

Elasticsearch MCP Server with multi-version support (ES 5.x-9.x) for security analysis and threats.

2 0 0

MCP Server

datanexusmcp

55 tools for verified public data lookups — CVE/SBOM security audits, licence compliance, patents, federal contracts, NPI provider lookups, nonprofit 990 filings, and domain intelligence. No API key required.

5 0 0

Openterms MCP

jstibal

Ed25519-signed consent receipts and programmable policy engine for AI agents. Spending caps, action whitelists, escalation thresholds, and JWKS-backed provider verification. Independently verifiable.

1 0 0

Cybersec Toolkit

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

0 0 0

Solana Security Standard

Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.

0 0 0

MCP Threatintel

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker

2 0 0

Browse all 866 Security servers →

Explore related categories

Frequently Asked Questions about Security MCP Servers

Model Context Protocol (MCP) servers in the Security category allow AI assistants (such as Claude Desktop, Cursor, Windsurf, and Cline) to connect directly to security tools, APIs, and databases without manual copy-pasting.