How do I connect a Security MCP server to Claude Desktop or Cursor?

To install a Security MCP server, select your desired server from the directory, copy the JSON configuration snippet, and add it to your client config file (such as claude_desktop_config.json or .cursor/mcp.json).

Are Security MCP servers free to use?

Yes, all Security MCP servers listed in this directory are open-source and free to integrate into compatible Model Context Protocol clients.

664 Security MCP Servers

Q: What are Security Model Context Protocol (MCP) servers?

Model Context Protocol (MCP) servers in the Security category allow AI assistants (such as Claude Desktop, Cursor, Windsurf, and Cline) to connect directly to security tools, APIs, and databases without manual copy-pasting.

Security-focused MCP servers for scanning, auditing, secrets management, and threat analysis — giving AI agents safe, scoped access to the tools security teams already rely on.

Open in interactive directory Best Security servers →

Jadx AI MCP

zinja-coder

JADX-AI-MCP is a plugin and MCP Server for the JADX decompiler that integrates directly with Model Context Protocol (MCP) to provide live reverse engineering support with LLMs like Claude.

3 0 0

Apktool MCP Server

zinja-coder

APKTool MCP Server is a MCP server for the Apk Tool to provide automation in reverse engineering of Android APKs.

3 1 0

Squirrelscan

Audit websites for SEO, performance, security, accessibility and agent experience issues.

0 0 0

MCP Maigret

BurtTheCoder

MCP server for maigret, a powerful OSINT tool that collects user account information from various public sources. This server provides tools for searching usernames across social networks and analyzing URLs.

4 0 0

Agentward

agentward-ai

Permission control plane for AI agents. MCP proxy that enforces least-privilege YAML policies on every tool call, classifies sensitive data (PII/PHI), detects dangerous skill chains, and generates compliance audit trails. Supports stdio and HTTP proxy modes.

2 0 0

Sonarqube MCP Server

An MCP server that enables integration with SonarQube Server or Cloud for code quality and security.

0 0 0

Assay

Rul1an

Policy-as-code gate for MCP. A fail-closed proxy that denies risky tool calls before they run, produces offline-verifiable evidence bundles of what executed, and enforces IPv4/TCP egress in-kernel via eBPF/LSM and Landlock on Linux. Deterministic and offline-first.

1 0 0

Ciphertrust Manager MCP Server

sanyambassi

MCP server for Thales CipherTrust Manager integration, enabling secure key management, cryptographic operations, and compliance monitoring through AI assistants.

1 0 0

Auth0 MCP Server

Auth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural language

1 0 0

Ui Ux Suite

UI/UX design-audit MCP server: scores a project on 12 dimensions vs WCAG 2.2 + APCA.

1 0 0

MCP Server

rad-security

MCP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.

2 0 0

MCP Security Audit

qianniuspace

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

4 0 0

FedRAMP 20x Requirements

An MCP server that provides access to FedRAMP 20x security requirements and controls.

0 0 0

Mobb Vibe Shield MCP

mobb-dev

Mobb Vibe Shield identifies and remediates vulnerabilities in both human and AI-written code, ensuring your applications remain secure without slowing development.

2 0 0

MCP Dnstwist

BurtTheCoder

MCP server for dnstwist, a powerful DNS fuzzing tool that helps detect typosquatting, phishing, and corporate espionage.

2 0 0

Shield

AperionAI

Local guardrail proxy for AI coding agents. Wraps any MCP server (stdio or Streamable HTTP) and blocks destructive tool calls — DROP TABLE, rm -rf, force-push — before they execute. MCP supply-chain protection: TOFU tool-catalog pinning against rug pulls, plus tool-description and tool-result scanning for tool poisoning and prompt injection. 51 starter rules, approval gates, audit logging. Single binary, Apache-2.0.

3 0 0

Agent Security Scanner MCP

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

0 0 0

Binary Ninja MCP

fosdickio

A Binary Ninja plugin, MCP server, and bridge that seamlessly integrates Binary Ninja with your favorite MCP client. It enables you to automate the process of performing binary analysis and reverse engineering.

1 0 0

Aegis

getaegis

Credential isolation proxy for AI agents. Injects secrets at the network boundary with domain restrictions, agent authentication, and audit logging. No SDK required — works as a transparent HTTP proxy or MCP server.

0 0 0

MCP Shodan

BurtTheCoder

MCP server for querying the Shodan API and Shodan CVEDB. This server provides tools for IP lookups, device searches, DNS lookups, vulnerability queries, CPE lookups, and more.

3 0 0

Volta MCP Server

iamredmh

Burn-after-read encrypted notes for AI agents. Create and read self-destructing notes via Volta Notes with AES-256-GCM E2E encryption — the decryption key never leaves the URL fragment. Secure credential handoff between users and agents without secrets appearing in chat history.

3 0 0

MCP Virustotal

BurtTheCoder

MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.

2 0 0

Dawshund MCP

samvas-codes

An MCP server based on dAWShund to enumerate AWS IAM data, analyze effective permissions, and visualize access relationships across users, roles, and resources. Built for cloud security engineers who want fast, easy and effective insights into AWS identity risk.

1 0 0

Ida Pro MCP

mrexodia

MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and allows you to generate malware analysis reports automatically.

4 0 0

PabloLec Keyprobe MCP

Audit certificates and keystores to surface expiry risks, weak algorithms, and misconfigurations.…

2 0 0

Storebridge MCP

Remote MCP connector for App Store + Google Play data via StoreBridge API. No auth required.

2 0 0

Rail Score

Responsible-AI guardrails for agents: scoring, prompt-injection & PII detection, DPDP compliance.

1 0 0

AI Firewall MCP

Multi-agent LLM security layer detecting prompt injection and jailbreaks.

1 0 0

Prismix Status MCP

Real-time status for 75+ AI services (OpenAI, Anthropic, Cursor). No auth, CORS-enabled.

1 0 0

BLOCKTRUST TrustScan

Trust verification for AI agents: identities, domains, phishing, contacts, Trust Circle, Vault.

0 0 0

Korg Ledger

Verifiable cognition: prove a session ledger is tamper-evident; audit & import any agent's logs.

0 0 0

Shellward

jnMetaCode

AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII detection. 7 MCP tools, zero dependencies.

2 0 0

Opa MCP Server

OrygnsCode

Open Policy Agent (OPA) and Rego policy toolkit. 32 tools spanning authoring (format, lint, check, deps), evaluation (eval, test, bench, coverage), and OPA REST control (policies, data, decisions, compile). Wraps the OPA CLI and the Regal linter, with AI-assisted helpers for explaining decisions, generating test skeletons, and suggesting fixes.

1 0 0

Kody

Personal assistant MCP server with search, execute, packages, jobs, secrets, and integrations.

0 0 0

OPNSenseMCP

vespo92

MCP Server for managing & interacting with Open Source NGFW OPNSense via Natural Language

4 0 0

Codeinspectus

Synvoya

Local-first, zero-egress security scanner for AI-generated / "vibe-coded" JS/TS. Bundles Opengrep, Gitleaks & Trivy behind one CWE-keyed schema and adds AI-code-specific checks (client-side secret exposure, Supabase RLS, prompt-injection & LLM-output XSS sinks). No account, no telemetry.

6 0 0

Gatetest

111-module QA gate for Claude Code. Scan repos, auto-fix, AI diagnosis. Replaces SonarQube + Snyk.

2 0 0

Vorim MCP Server

Kzino

AI agent identity, trust, and audit trail infrastructure. 17 MCP tools: register agents with Ed25519 keypairs, check permissions (sub-5ms), emit tamper-evident audit events, verify trust scores (0-100), delegate credentials, and manage ephemeral agents. IETF Internet-Draft filed (draft-vorim-vaip-00). Works with LangChain, OpenAI, CrewAI, Stripe ACP, and 4 more frameworks. npx @vorim/mcp-server.

1 0 0

Nekzus Npm Sentinel MCP

Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…

1 0 0

Arc Gate MCP

9hannahnine-jpg

Runtime governance for MCP tool calls. Blocks prompt injection and capability abuse before tool results reach your agent.

5 0 0

Iso27001 MCP

ISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows.

0 0 0

HAL

HAL (HTTP API Layer) - An MCP server that provides HTTP API capabilities to Large Language Models

2 0 0

Grasp — Codebase Analysis & Architecture Intelligence

Codebase dependency analysis for LLMs — graphs, architecture, security, refactor, git history.

0 0 0

Sparda

zyx77550

Injects a live, reversible MCP server into a running Express / FastAPI / Next.js app — reads safe by default, writes gated behind human confirmation. The same engine also proves deploys and PRs (apocalypse / review).

1 0 0

Aiseo Audit

Audit web pages for AI search readiness (ChatGPT, Claude, Perplexity, Gemini).

1 0 0

1Claw Vault

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

2 0 0

Safeinstall

Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks

1 0 0

Pushary

Push notifications and human-in-the-loop approvals for AI agents, with a cross-agent audit trail.

1 0 0

ModelSafetyMCP

itsalissonsilva

MCP server for scanning machine learning model artifacts for unsafe serialization, malicious model patterns, risky packaging, URL-based artifact scanning, and directory-level triage using ModelScan, PickleScan, and heuristic inspection.

2 0 0

Pqc Tools

quantakrypto

Post-quantum readiness for AI coding agents: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH), explain the harvest-now-decrypt-later exposure, get NIST ML-KEM/ML-DSA/SLH-DSA (and hybrid) migration guidance, verify fixes, and check dependencies. Content-based/advisory tools only. Run local (npx @quantakrypto/mcp) or the hosted OAuth endpoint at mcp.quantakrypto.com.

1 0 0

MCP Shield

muhannad-hash

Security scanner for MCP servers. Detects backdoors, exfiltration code, obfuscation, dangerous code execution, prompt injection, and supply chain risks before you install. Four tools: scan npm packages, scan local directories, check prompt injection, and audit supply chain trust score. npx @muhannad-hash/mcp-shield

2 0 0

Guardvibe

goklab

Security MCP for vibe coding with 330 rules and 29 tools. Purpose-built for AI-generated code — scans Next.js, Supabase, Clerk, Stripe, Prisma, Hono, GraphQL, and 25+ modules. Cross-file taint analysis, host security audit, auto-fix, SARIF export, pre-commit hook, and CVE version detection. Zero config, runs locally.

2 0 0

Platform

sidclawhq

Governance proxy for MCP servers. Wraps any upstream server with policy evaluation, human approval workflows, and hash-chain audit trails. 18+ framework integrations. Apache 2.0 SDK.

3 0 0

Authenticator MCP

firstorderai

A secure MCP (Model Context Protocol) server that enables AI agents to interact with the Authenticator App.

3 0 0

Operant MCP

operantlabs

Security testing MCP server with 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment.

0 0 0

Skylos

duriantaco

Dead code detection, security scanning, and code quality analysis for Python, TypeScript, and Go. 98% recall with fewer false positives than Vulture. Includes AI-powered remediation.

6 0 0

Agent Passport MCP

aeoess

Agent identity, scoped delegation, and governance: issue passports, build and verify narrowing-only delegation chains, enforce policy at a gateway, and emit signed admission and outcome records. 150 tools. npx -y agent-passport-system-mcp

3 0 0

Trustboost Pii Sanitizer

teodorofodocrispin-cmyk

PII sanitization layer for autonomous AI agent pipelines. Detects and redacts emails, phone numbers, national IDs, private keys, and financial data before text reaches LLMs. Supports EN, ES (LATAM), PT (BR/PT), DE, JA. Solana-native payments via Helius oracle.

2 0 0

Emilia Protocol

emiliaprotocol

Human sign-off + trust receipts for AI agents: requires a named human's approval before an irreversible action (payment release, record change, deploy), then mints an offline-verifiable Ed25519 Trust Receipt. Also exposes trust profiles, receipt verification, disputes, and delegation. Apache-2.0; policy engine formally verified. Install: npx -y @emilia-protocol/mcp-server.

2 0 0

Depguard

mopanc

Pre-install guardian for npm packages with static code analysis, supply-chain attack detection, vulnerability audit (npm + GitHub Advisory Database), AI hallucination guard, and CycloneDX 1.6 SBOM generation with VEX. 28 MCP tools. Zero runtime dependencies — the SBOM serializer is implemented natively against the public CycloneDX schema.

4 0 0

Browse all 664 Security servers →

Explore related categories

Frequently Asked Questions about Security MCP Servers

Model Context Protocol (MCP) servers in the Security category allow AI assistants (such as Claude Desktop, Cursor, Windsurf, and Cline) to connect directly to security tools, APIs, and databases without manual copy-pasting.