Security scanning MCP servers & tools, page 4

Threadlinqs threat-intelligence MCP — 49 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs

Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.

Security Feeds MCP.

urlscan.io URL scanner — search/result keyless, submit needs key

AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.

Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.

Local-first PHI detection for source code, LLM prompts, logs, and analytics

AI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.

Domain security & privacy checker: 17 live checks (SPF, DMARC, DKIM, DNSSEC, TLS, CAA, security headers) scored 0-100 with remediation. Local-first, zero telemetry. In the official MCP Registry as com.oksigenia/checker-mcp; npm @oksigenia/checker-mcp.

Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.

Scan an MCP server or agent config for injection, exfiltration, and risky capabilities.

Cybersecurity reconnaissance server for Claude. WHOIS lookup, DNS enumeration with subdomain brute-forcing, Nmap port scanning with service detection, SSL/TLS certificate inspection, technology stack fingerprinting, CVE lookup, and IP reputation checking. Runs fully locally via FastMCP.

Stops secrets, cross-tenant queries and unsafe migrations before they merge.

Domain intelligence for agents: WHOIS, DNS, SSL/TLS, security headers, reputation, subdomains.

Real-time exploit-exposure risk check for EVM wallets, paid per query via x402 (USDC on Base).

VirusTotal reports, file and URL submissions, domain/IP reanalysis, and analysis recovery.

Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.

FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality

Points an AI agent at a live URL and confirms publicly-served secret files by fetching the bytes — exposed .git, .env, JS source maps, backup/SQL dumps, directory listing, and dotfiles. Zero dependencies, read-only.

AynOps is a reconnaissance focused MCP Server which gives reconnaissance capabilities to AI Clients

Catch AI-hallucinated (slopsquatted) npm imports in generated code before npm install.

AI-powered penetration testing. Launch scans, review findings, download reports.

Local read-only MCP scanner for known prompt-injection patterns with exact evidence and no network.

Find every leaked secret on your machine — API keys in .env files, shell history, and configs.

Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.

Security intelligence for AI agents: password breach checks (900M+ HIBP hashes), email/domain/IP/URL reputation, prompt injection detection (200+ patterns), and skill supply chain scanning. Pay-per-request via x402 USDC micropayments or free demo mode, no API key needed.

A MCP server for MobSF which can be used for static and dynamic analysis of Android and iOS application.

Register/verify your domains, queue security scans (headers, TLS, DNS, ports, CVEs + AI-specific checks) and read findings, for AI agents. Install with npx -y eleion-scanner-mcp.

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

A Rust-based MCP server to integrate Cortex, enabling observable analysis and automated security responses through AI.

Stateful Windows RPC attack-surface research for AI agents: 22 tools on NtObjectManager.

A Model Context Protocol (MCP) server for querying NIST National Vulnerability Database (NVD) API endpoints.

MCP server for PhishClean security analysis tools — check URLs, passwords, emails, headers, JWTs, and source code for security issues

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

Audit MCP servers from inside Claude Code. 10 OWASP checks, A-F grade, live leaderboard.

MCP server exposing the MITRE ATT&CK framework via the official MCP Python SDK.

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

Official MCP server for Conan C/C++ package manager. Create projects, manage dependencies, check licenses, and scan for security vulnerabilities.

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

Security Scanner Ai automation via MCP. Includes scan dependencies, check headers, scan secr...

AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

Add Nemesis Shield security as you build: one-line SDK per stack, plus a site+CVE scan.