Security MCP Servers

qianniuspace/mcp-security-audit

38

Manual Caution 67

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

53

awesome-mcp-security

38

Manual

Security scores for 800+ MCP servers. 9 analyzers scan for prompt injection, toxic flows, and attack surface risks. Updated daily.

25

MCPScan

38

Manual

Offensive MCP server auditor: detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.

23

io.github.eliottreich/taskbounty-check

38

npx

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.

2

io.github.BlackBoxEngineering/agent-envelope-mcp

38

npx Auth Required

Neutral MCP server for AgentEnvelope authority: sovereign verify + vault verify/lookup/mint.

1

mcp-server-malcolm

38

uvx

MCP server for the Malcolm network traffic analysis platform (Zeek + Suricata + Arkime + OpenSearch + NetBox) — full read surface plus opt-in, audited write tools

1

mcp/beagle-security-mcp-server

38

Docker Caution 75

Connects with the Beagle Security backend using a user token to manage applications, run automate...

1

DechoNet

38

Manual

Moved to com.dechonet/mcp. 25 security tools, hosted at https://dechonet.com/mcp

1

io.github.icohangar-ops/governed-mcp-gateway

38

npx

HTTP MCP gateway: principal on tools/call + SSE, allowlists, vault rotate, CHP gates.

Arkon Vault

38

Remote

Private projects, preflight, decisions, and handoffs that keep work continuous across AI tools.

GDPR Scanner API

38

Remote

Scan website GDPR compliance: consent, privacy policy, trackers. Score 0-100. x402.

@debian777/mcp-m365

38

npx

A Microsoft 365 MCP (Model Context Protocol) server built with the mcp-framework, providing access to calendar, contacts, and authentication services.

1/wk

io.github.icohangar-ops/chp-mcp

38

npx

Spend approval gate for AI agents: budget caps, HITL thresholds, signed audit hash.

@brionmario-experimental/mcp-express

38

npx

Express middleware for enforcing Model Context Protocol (MCP) authorization using Asgardeo.

16/wk

@asgardeo/mcp-node

38

npx

Node.js core for enforcing Model Context Protocol (MCP) authorization using Asgardeo.

2/wk

io.github.jyswee/secretcarousel

38

npx Auth Required

Agent-first secrets vault. Store, rotate, and share credentials from chat. 20 tools.

intelthreadlinqs-mcp

38

npx

MCP server for Threadlinqs Intelligence Platform - Access threat intelligence, detections, and IOCs

4/wk

Hyperliquid Vaults API

38

Remote

Hyperliquid vault summaries — APR, TVL, PnL, followers, sorted by performance. x402.

@brionmario-experimental/mcp-node

38

npx

Node.js core for enforcing Model Context Protocol (MCP) authorization using Asgardeo.

4/wk

io.github.ciinkwia/lithium-vault-mcp

38

npx Auth Required

Primary-source lithium & battery-metals mining data (AISC, reserves, filings) via x402.

Sitelemetry

38

Remote

OAuth website audits: security, SEO, AI visibility, integrations, accessibility and performance.

@iflow-mcp/fcoury-fatsecret-mcp

38

npx Caution 75

Model Context Protocol server for FatSecret API with 3-Legged OAuth support

1/wk

io.github.denial-web/agent-immune

38

uvx

AI agent security: prompt injection detection, semantic memory, output scanning, prompt hardening

Solana Token Launch Scanner API

38

Remote

New Solana token launches — pump.fun, Raydium, PumpSwap. Price, liquidity, volume. x402.