Security MCP Servers

cc-audit

40

Manual

AI-free static security scanner for Claude Code artifacts (Skills, Hooks, MCP configs). Detects data exfiltration, prompt injection, and supply chain risks with deterministic, reproducible results.

21

Sentinel Scan

40

npx

MCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics.

3

DomScan

40

Remote

Domain intelligence for DNS, WHOIS/RDAP, TLS, reputation, valuation, and brand protection.

2

io.github.forgemeshlabs/aso-audit-mcp

40

npx

ASO Scanner — the free Agent Readiness scanner as an MCP server. Measures your ASO Score (Agent.

2

io.github.anima-labs-ai/anima

40

Remote

Give your AI agent an identity it owns: email inbox, US phone number, SMS, voice, and a vault.

2

Valca

40

uvx

Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

2

mcp-gatehouse

40

uvx

Permission tiers, approval gates, and audit logging for MCP servers — the server is the gatekeeper.

1

Singularity - MCP Discovery & Security Gateway

40

Remote

Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring

1

security-scanner-deepsleuth-mcp

40

uvx

Deepsleuth — read the fine print. Deterministic deep-visibility security scanner for MCP servers (no LLM).

1

secobserve-mcp

40

uvx

MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.

1

io.github.dingdawg/dingdawg-shield

40

npx Auth Required

AI security scanning and trust scoring. Stack-specific threat models. Free local scan.

1

limelijourney-mcp

40

uvx

LimeliJourney MCP server — tenant-scoped tools over the key-authed PartnerApi /v1 (API key) or the Cognito AdminApi/AiApi (token).

vottun-ai-compliance-mcp

40

npx Caution 75

MCP server exposing Vottun AI Compliance tools (certify/verify/detect/get_certificate).

3/wk

mcp-domain-guard

40

npx Caution 75

An MCP server for checking website health and SSL certificate status

10/wk

mcp-risk-scanner

40

npx

Local MCP configuration risk scanner for Claude, Cursor, Windsurf, and agent tools.

6/wk

io.github.corpussanctum/atlas-mcp

40

npx

Pre-action authorization for AI agents: permit, deny or escalate against a signed delegation chain.

cybersecurity-mcp-server

40

uvx

Cybersecurity data for AI agents — CVE database, vulnerability search, threat intelligence, exploit info

@priventai/mcp-gateway

40

npx Caution 75

Privent MCP Gateway — wrap any MCP server (stdio or Streamable HTTP) and enforce tokenization on tool-call arguments and results (ADR 0001 enforcement path)

7/wk

Fabler x402 Tools

40

Remote

Free catalog and 2,048-character secret-scan preview for Fabler's x402 agent tools on Base.

@roguezero/middleware

40

npx

MCP server wrapper + HTTP (Hono) middleware that verify a presentation, run policy, and audit every protected tool call — over @roguezero/core.

12/wk

@smartpolicy/mcp

40

npx

SmartPolicy MCP server — runtime authorization for AI agents and smart contracts

51/wk

doorvault-mcp

40

uvx

DoorVault MCP Server — IDEAL Scoring v2.0, Section 8 FMR lookup, and rental property tools for AI assistants

mcp-kitchen-sink

40

uvx

Deliberately-vulnerable, fully mocked (network-less) reference MCP agent — the test target for the Mylonite AI-security scanner. NOT for production use.

Truss Threat Intelligence

40

Remote

Query Truss threat intelligence via hosted MCP (OAuth). Growth+ plans.