Security MCP Servers
Auth, encryption, vulnerability scanning
1,971 servers
io.github.GuardBee/oauth-auditor
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
io.github.GuardBee/security-suite
Every GuardBee MCP security tool in one server: OWASP MCP Top 10, secrets, supply chain, TLS/DNS
io.github.GuardBee/security-proxy
MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log
io.github.jmshinhwa/robots-txt-ai-crawler-audit
Checks robots.txt line by line and says what each AI crawler token actually controls - training, AI
io.github.jmshinhwa/cloud-manifest-audit-kit
For platform engineers on AKS: 28 rules naming every removed apiVersion, literal credential and :lat
@vaultgraph/mcp-server
MCP server for submitting VaultGraph JobReceipts and querying agent trust scores
mcp-audit-otel
Vendor-neutral MCP audit-event schema + OpenTelemetry emitter + middleware that maps each Model Context Protocol call to SOC 2, HIPAA, CMMC/NIST 800-171, and DORA controls.
@aiclude/security-mcp
AICLUDE Security Vulnerability Scanner - MCP Server for querying vulnerability scan results
contextvault-mcp
ContextVault MCP Server - External context management for any AI coding assistant. Works with Claude Code, Cursor, Windsurf, OpenCode, Cline, Continue, and more.
@pcandido/mcphub
A zero-dependency MCP gateway. Connect multiple AI agents to multiple MCP servers through a single, centrally-managed stdio interface. No overhead, no bloat — just the Node.js stdlib. Secrets stay in the OS keychain, never in config files.
mcp-cve-intelligence-server-lite
Lite Model Context Protocol server for comprehensive CVE intelligence gathering with multi-source exploit discovery, designed for security professionals and cybersecurity researchers
@teamnetwork-nz/m365-mcp-server
MCP server for Microsoft 365 — Email, Calendar, To Do, SharePoint document libraries, and Teams — using client credentials (app-only auth). Supports multiple accounts, shared mailboxes, per-mailbox read-only access, and grant-based SharePoint access c
com.catalystedgescanner/catalyst-edge-mcp
Audited SEC catalyst signals for agents — ranked filing intel with a public track record.
@andreolf/mcpaudit
npm audit for MCP servers — grade any MCP server A–F on auth, SSRF, static keys, and prompt-injection surface.
@vengtoo/mcp-server
Vengtoo MCP server — manage your authorization model and check access through any MCP-compatible AI tool
mcp-server-credentials
Model Context Protocol (MCP) server for verifiable credentials, cryptographic delegation proofs, and scoped capability tokens for AI agents.
Helixar Security
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
@agentdefenders/mcp-scan
MCP supply chain scanner - detect tool poisoning, prompt injection, and shadowing attacks
blackduck-mcp-server
Model Context Protocol (MCP) server for Black Duck SCA — vulnerability scanning, remediation, and PR automation for AI assistants
@apideck/mcp-connect
Framework-agnostic core for connecting, namespacing, and dispatching Model Context Protocol (MCP) tools — with pluggable persistence, OAuth providers, and token encryption.
houdin-mcp
MCP server for Houdin threat intelligence platform - launch scans and retrieve results from any AI assistant
@injectshield/mcp
MCP server for InjectShield — prompt-injection firewall for AI agents.
@jiffylabs/jiffy-scan-mcp
Jiffy Scan MCP server — deterministic AI artifact scanning over the Model Context Protocol. Part of the Jiffy Trust Protocol (JTP).
@zhigang1992/gmail-mcp
Gmail MCP server with auto authentication support