Security scanning MCP servers & tools, page 3

CIRCL Vulnerability-Lookup — aggregated vulnerability records

Threadlinqs threat-intelligence MCP — 49 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs

Open-source AWS security scanner with attack chain detection, breach cost estimation, and copy-paste remediation (CLI + Terraform). 47 checks, 16 attack chain rules. First free standalone AWS security MCP server.

AbuseIPDB MCP — wraps AbuseIPDB v2 API (api.abuseipdb.com/api/v2)

NVD MCP — wraps the NIST National Vulnerability Database API (free, no auth)

SANS Internet Storm Center (ISC) MCP.

Package Intelligence for AI agents. 22 tools across 17 ecosystems (npm/pypi/cargo/go/maven/nuget/rubygems/composer/pub/hex/swift/cocoapods/cpan/hackage/cran/conda/homebrew) — check health, vulnerabilities (OSV + CISA KEV + EPSS), typosquats, malicious flags, alternatives, known bugs, breaking changes, stack compatibility and error-to-fix. 31k+ packages, 2.2k+ CVEs enriched. Zero auth, MIT. Remote URL https://mcp.depscope.dev/mcp or stdio npx depscope-mcp.

MITRE ATT&CK adversary TTPs (STIX bundles)

Security scanner for MCP servers. Find vulnerabilities before your AI agent does.

AI-powered smart contract security forge with 8-agent adversarial pen test. Generate, audit, fix, and compile contracts across 8 chains (Ethereum, Solana, Polygon, Base, Arbitrum, Optimism, BSC, Avalanche). Token intelligence with honeypot detection. x402 USDC payments for autonomous agents.

Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).

TUI and MCP server for triaging multi-scanner vulnerability findings: import Nessus and nuclei results into SQLite, launch nmap/NetExec/nuclei/Metasploit against affected hosts, and record verification verdicts across scans.

Safe, self-hosted OWASP ZAP operator for guided AI security scans and reports.

Free AI agent skill security scanner. Scan SKILL.md, MCP configs, and system prompts for credential theft, prompt injection, zero-width character attacks, and ClawHavoc indicators. Supports OpenClaw, Claude Code, Cursor, and Codex. No signup required.

MCP security trust-check for agents before installing MCPs, Skills or tools.

Pulsedive MCP — threat-intelligence IOC enrichment (pulsedive.com)

Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.

8 bundled intelligence endpoints (security, company, threat, compliance, sales, sports, property, health) via x402 micropayments on Base.

npm intelligence — search packages, check bundle sizes, scan vulnerabilities, compare downloads.

XposedOrNot MCP — free breach-exposure lookup by email.

MCP server for querying the ORKL API. This server provides tools for fetching threat reports, analyzing threat actors, and retrieving intelligence sources.

Defense-in-depth for MCP stdio servers: shell-injection guard, AST audit CLI, RCE blocking.

Embeds Snyk's security engines into agentic workflows. Secures AI-generated code in real-time and accelerates the fixing vulnerability backlogs.

AlienVault OTX MCP — Open Threat Exchange (free with key)

Shodan InternetDB MCP — wraps Shodan InternetDB (internetdb.shodan.io)

GreyNoise Community MCP — internet scanner classification (free tier with key)

Drive a self-hosted Darkmoon Pro AI pentest instance: start runs, read campaigns and findings.

EOL dates and risk scores for 480+ software products. Check versions, score risk, audit stacks.

abuse.ch Feodo Tracker botnet C&C IP blocklist

FIRST.org EPSS (Exploit Prediction Scoring System) MCP.

OSV.dev (Open Source Vulnerabilities) MCP.

CISA Known Exploited Vulnerabilities catalog

Comprehensive Linux server security audit with 89 CIS Benchmark controls, NIST 800-53, and PCI-DSS compliance checks. Real-time monitoring with anomaly detection across 23 analyzers: firewall, SSH, fail2ban, Docker, CVE, rootkit, SSL/TLS, filesystem, network, and more.

Manage Zscaler Zero Trust Exchange via 280+ tools — ZPA, ZIA, ZDX, ZCC, EASM, and more.

CVE and supply chain checks for MCP clients. Covers infrastructure, PyPI, and npm packages.

URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)

Security scanning for websites, public repositories, and Open CLAW skills.

Access the OSV (Open Source Vulnerabilities) database for vulnerability information. Query vulnerabilities by package version or commit, batch query multiple packages, and get detailed vulnerability information by ID.

Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.

Read-only security audit for Supabase. Four tools surface RLS gaps, permissive policies, exposed functions and grants; an audit prompt returns scored findings with fix SQL.

Discover, invoke, and cryptographically verify AI agents on a paid agent marketplace. 13 tools spanning code generation (6-module engineering verification), security scanning (OSV.dev + GitGuardian), and lead scoring (8 real sources). Every result is Ed25519-signed and independently verifiable -- no trust in the platform required. Install: npx -y @forcedream/mcp-server.

Recent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).

Shodan MCP — wraps the full Shodan REST API (api.shodan.io)

Security intelligence API with 31 MCP tools for CVE/EPSS/KEV lookup, domain recon (DNS/WHOIS/SSL/subdomains/CT logs), IOC/threat intel, OSINT (email/phone/username), and code security scanning (secrets, injection). Free 100 req/hr.

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.