Security MCP Servers

[](https://glama.ai/mcp/servers/ppcvote/misp-mcp-server) - MISP (Malware Information Sharing Platform) MCP server with built-in prompt injection defense via [prompt-defense-audit](https://github.com/ppcvote/prompt-defense-audit). 8 read-only threat-intel tools (events, attributes, search, tags, feeds, galaxies). Scans every MISP response for adversarial seeding before returning to LLM. Tracks [MISP/MISP#10745](https://github.com/MISP/MISP/issues/10745). MIT.

[](https://glama.ai/mcp/servers/@MoltyCel/moltrust-mcp-server) - Trust infrastructure for AI agents — register DIDs, verify identities, query reputation scores, rate agents, manage W3C Verifiable Credentials, and handle USDC credit deposits on Base.

[](https://glama.ai/mcp/servers/urldna/mcp) - MCP server for automated URL scanning and forensic phishing triage. Captures full DOM snapshots, network requests, and visual screenshots to identify malicious redirects and infrastructure. Supports historical threat hunting using Custom Query Language (CQL) to map actor patterns across millions of recorded scans.

[](https://glama.ai/mcp/servers/Chronolapse411/sicarius-guard) - Solana token safety oracle for AI agents and trading bots. Byte-level SPL mint analysis, honeypot detection, freeze/mint authority checks, Birdeye market enrichment, and composite risk scoring. Deployed on Google Cloud Run.

[](https://glama.ai/mcp/servers/muhannad-hash/mcp-shield) - Security scanner for MCP servers. Detects backdoors, exfiltration code, obfuscation, dangerous code execution, prompt injection, and supply chain risks before you install. Four tools: scan npm packages, scan local directories, check prompt injection, and audit supply chain trust score. `npx @muhannad-hash/mcp-shield`

- A self-service integration for user registration, authentication, account management, transactions, and third-party transfers with Apache Fineract.

[](https://glama.ai/mcp/servers/MARUCIE/authbox) - Zero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access (scope, rate limits, time windows, step-up approval), 70+ API key providers, and hash-chain audit trail. Go + Next.js + TypeScript.

FX forensic audit MCP. Detects hidden bank markups on cross-border payments. FINTRAC MSB.

A comprehensive Model Context Protocol (MCP) server for analyzing SonicWall firewall logs from SonicOS 7.x and 8.x. This server provides intelligent log analysis, threat detection, and security insights through a fully MCP-compliant interface using SSE/HTTP transport.

CVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway. Cited, OAuth + paid.

Cited EU & global law, regulations & security frameworks via Ansvar Gateway. OAuth, free + paid.

Workflow engine for executing Model Context Protocol (MCP) workflows. It provides a lightweight runtime for running AI-powered tasks across MCP-compatible servers with built-in support for authentication, resources, and tools. This package powers the Jotsu platform but can also be used independently in any Python environment.

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

Paid token risk and security intelligence for AI agents over MCP with x402 payments.

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

Free token-safety scans + paid x402 verdicts, signals, radar & EVM swap quotes for AI agents.

ProphetKey MCP bridge - encrypted local-first API key vault for AI agents, keys never exposed

MEOK Enterprise Compliance Checker — EU AI Act, DORA, GDPR automated gap analysis. £5K-15K audits

Website security ratings, token verification, and tamper-evident ledger heads from Obelisk Gate.

OAuth 2.1 short-link tools for AI agents with scoped tokens, approvals, audit logs, and revocation.

Manage users, OIDC clients, roles, settings, and audits with tenant-bound OAuth.

Find public biomarker education, available blood tests, panels, and budget-aware starting points.

Advisory policy preflight for AI-agent spend requests; never executes payments or accesses wallets.

Free front-end security check for any website: a grade plus the secrets and keys it exposes.