Security MCP Servers
Auth, encryption, vulnerability scanning
1,847 servers
io.github.jdhart81/regulatory-radar
California, US, and global climate compliance scans with source-linked deadlines.
@black-duck/mcp-server
Black Duck MCP brings Signal's AI-powered security analysis directly into your development environment. Provides vulnerability detection through the Model Context Protocol.
living-off-the-land-lolbins-mcp-server
Living off the Land binaries MCP server — GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, LOLESXi, LOTP, LOLC2, WADComs intelligence with attack graph reasoning, privilege escalation paths, defense evasion, detection engineering
@vantasdk/vanta-mcp-server
Model Context Protocol server for Vanta's security compliance platform
@monsoft/mcp-gmail
Gmail MCP server with auto authentication support
@gildara/mcp-server
MCP server for Gildara — operating contracts for AI agents. Structured runtime instructions compiled into optimal system prompts.
@ansvar/eu-regulations-mcp
The first open-source MCP server for European cybersecurity regulations. Query DORA, NIS2, GDPR, EU AI Act, and more directly from Claude.
@intyga/mcp-sdk
Wrap an MCP server so every tool call is gated behind a cryptographically-signed human approval (local policy + INTYGA gateway step-up).
authio-mcp
Protect an MCP server with Authio: token verification, protected resource metadata, WWW-Authenticate challenges and connected-account token exchange.
@breadai/protocol-mcp-client
MCP client plugin for bread — connect agents to MCP servers (config-level or per-agent) over stdio, Streamable HTTP, or legacy SSE, with credential-aware auth signing.
@gongrzhe/server-calendar-autoauth-mcp
A Model Context Protocol server for Google Calendar integration with auto authentication
@getonlane/mcp-auth
Drop-in OAuth resource-server + connection gate for an MCP server fronted by Lane. Transport-agnostic core; adapters wrap it.
@costrinity/vitna-compliance-mcp
A containment layer for AI agents that go rogue. Wraps stdio MCP servers: risky tool calls wait for a person, no API key can decide a hold (not even the agent's), and claimed accounts get signed, offline-verifiable records. Covers the servers you wrap.
@humansecurity/human-mcp-server
Model Context Protocol (MCP) server providing comprehensive cybersecurity intelligence from HUMAN Security. Offers real-time attack monitoring, threat detection, fraud prevention, PCI DSS compliance validation, and supply chain security for AI-powered app
@intyga/mcp-proxy
Stdio proxy that gates a third-party MCP server's tool calls behind a signed human approval — no code changes to the wrapped server.
@ferrvault/mcp
Model Context Protocol server for the FerrVault API: vaults, environments, secrets and service tokens
darknet-mcp-server
Dark web intelligence MCP server — HIBP, ThreatFox, ransomware tracking, Tor .onion access, blockchain intel, exploit search, stealer logs, malware analysis
gmail-mcp-server
Gmail MCP Server with on-demand authentication for SIYA/Claude Desktop. Complete Gmail integration with multi-user support and OAuth2 security.
@agonx402/gateway-mcp
MCP server for Agon Gateway discovery, calls, Tokens market data, and generic signer-hook auth.
@ory/mcp-server
MCP server exposing the Ory CLI and Ory Network REST API as tools for AI agents to manage identities, OAuth2 clients, permissions, projects, and configuration
@arc-mcp/xsuaa-auth
XSUAA / OAuth authentication + BTP principal propagation for Model Context Protocol (MCP) servers built on Express and @modelcontextprotocol/sdk.
@icoretech/warden-mcp
Vaultwarden/Bitwarden MCP server backed by Bitwarden CLI (bw).
mcp-oauth-server
Self-hosted OAuth 2.1 Authorization Server for MCP servers (Express/TypeScript). Implements the MCP Authorization spec: Client ID Metadata Documents (CIMD), Dynamic Client Registration, PKCE, resource indicators, device flow.
mcp-bastion
Reliability + security proxy for the Model Context Protocol (MCP): self-healing connections, runtime tool-security (rug-pull/poisoning detection), and a compliance-mapped audit trail.