Security MCP Servers
Auth, encryption, vulnerability scanning
1,971 servers
GL1TCH Token Safety
Token rug-risk scans, Know Your Agent wallet checks and deployer reputation for AI agents.
CookieGuard
Audit HTTP cookie security against your local policy. Returns findings without cookie values.
Altscan explorers
Keyless, read-only BNB Chain and Ethereum data: transactions by hash, tokens with a lookalike check
iso-27001-ai-mcp
AI-powered iso 27001 ai MCP server for agents. Supports audit isms, risk assessment, gap analysis. By MEOK AI Labs.
Credential Broker
Local-first credential broker: agents use gated APIs through scoped, audited requests, never keys.
Kemory
Persistent memory for AI agents: connects MCP clients to your Kemory memory vault
Second Brain
Shared Graph-RAG memory for AI agents: markdown vault, wikilink recall, tasks, messaging.
io.github.reworkio/rework-proof
Verify REWORK credentials: is this delivered work genuinely the author's?
skillsvault
Your organisation's approved agent skills, governed by its policies.
Two-Key
Authorization proxy for another MCP server: a rule check and AI judges approve each tool call
mcp-abuseipdb
A Model Context Protocol (MCP) server for integrating with the AbuseIPDB API
mindin
Indexed search, schema-checked writes and session hooks for a markdown notes vault
mcpampel
MCP security scanner plugin - scan your installed MCP servers with 16 engines
Willder
One memory for your AI agents: scoped, expiring, revocable per-agent tokens and an audit log.
stock-image-mcp
MCP server for searching and downloading stock images (Unsplash, Pexels, Pixabay, Freepik, StockVault, Burst) via LLM tool calls
io.github.emirmrkaljevic/iotaudit
Audit your own smart-home devices: destinations, encryption, open ports, A-F grade.
@vulnify/mcp
Vulnify MCP server: runtime authorization for AI agents. Check an action, record a decision, and read policies.
WalletWall
Stablecoin intelligence and vault readiness through WalletWall MCP.
Bitwarden
Give your assistant its own Bitwarden vault for logins, passwords, 2FA codes and passkeys.
VulKill Security
Autonomous AppSec & DAST scanner across 12 security domains (260+ controls) with 3-Layer Triage.
@guardbee/mcp-audit-gap-auditor
MCP server that audits MCP server source for OWASP MCP08:2025 (Lack of Audit and Telemetry) — missing tool-call logging, raw args/results in logs, disabled audit sinks, and tool errors swallowed without a record
Keysrs
Local Mac API-key vault: Touch ID-approved, scoped grants for agents, not keys. Needs Keysrs.app.
CISA KEV Ransomware CVE, SSL CT Logs & Domain Recon
Audit active CISA KEV ransomware CVEs, SSL/TLS CT log subdomains, SPF/DMARC security & ICANN RDAP.
Diogenes Web3, DeFi & 402 Security MCP
Smart contract audit oracles, Solana risk analysis, MEV defense & HTTP 402 verifiers.