Security MCP Servers

Sourced, scored comparisons of crypto exchanges, wallets, savings accounts and brokerages.

MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments

MCP server that scans files and directories for exposed secrets, API keys, and credentials

Let Cursor and Claude scan AI-proposed edits for secrets before applying. Local MCP server.

MCP server for a self-hosted Darkmoon Pro instance: start autonomous AI pentest runs, poll status, list campaigns and read findings.

Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.

Standalone MCP server exposing Signet signing, verification, and content hash tools

Keep credentials out of AI coding agents with local approvals, scoped injection, and audit trails.

The firewall for MCP tool calls. Block, audit, replay with evidence bundles.

Cut 95% of framework noise and token bloat from error logs for AI agents.

eBay MCP — Browse + Taxonomy APIs via client_credentials OAuth

Model Context Protocol server for Vanta's security compliance platform

A containment layer for AI agents that go rogue. Wraps stdio MCP servers: risky tool calls wait for a person, no API key can decide a hold (not even the agent's), and claimed accounts get signed, offline-verifiable records. Covers the servers you wrap.

Pre-flight MCP tool-contract drift interceptor from mcpindex.ai, the drift-monitored MCP server index. One-line wrap() over an MCP client session that HOLDs a tool call before your agent runs it when the contract drifted from your pin. No credential handl

MCP server for isMalicious threat intelligence — reputation verdicts for IPs, domains, URLs, file hashes, email addresses, phone numbers and breached passwords, CVE lookups (CVSS, EPSS, KEV), the CVEs exploited in the wild, vulnerability monitoring of a w

Subact ID for MCP servers: validate task tokens against the control plane's JWKS, enforce per-tool scope, introspect high-risk tools, and log who acted for whom on every call.

MCP server for the 1claw secrets vault — lets AI agents fetch, store, and manage secrets at runtime

Black Duck MCP brings Signal's AI-powered security analysis directly into your development environment. Provides vulnerability detection through the Model Context Protocol.

The first open-source MCP server for European cybersecurity regulations. Query DORA, NIS2, GDPR, EU AI Act, and more directly from Claude.

Model Context Protocol server for StablecoinX. Auth via thirdweb email-OTP, then drive business account CRUD, API keys, payment sessions, the paymaster surface (clients, policy, activity, balance), webhooks, and floYsh yield sites and vault owner settings

A Model Context Protocol server for Google Calendar integration with auto authentication

Self-hosted OAuth 2.1 Authorization Server for MCP servers (Express/TypeScript). Implements the MCP Authorization spec: Client ID Metadata Documents (CIMD), Dynamic Client Registration, PKCE, resource indicators, device flow.

MCP server for Gildara — operating contracts for AI agents. Structured runtime instructions compiled into optimal system prompts.

Context8 MCP server for remote error solution vault with semantic search