Security MCP Servers
Auth, encryption, vulnerability scanning
1,971 servers
meok-mcp-hardening-mcp
MEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 10 (2025) + 5 MCP-specific risks to a 0-100 hardening score with HMAC-signed reports. By MEOK AI Labs.
owasp-agentic-mcp
OWASP Top 10 for AI Agents security assessment tools. Capabilities: full agent security scan, prompt injection detection, tool poisoning check, excessive agency, data leakage. Built by MEOK AI Labs.
janus-mcp-server
Secure Kubernetes MCP server: redacted diagnostics and human-approved writes, credentials never leave the process.
Bitwarden Public API and Secrets Manager (unofficial)
Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.
DNS Lookup — Bulk SPF, DKIM, DMARC & Mail Policy Findings
Check DNS records and email authentication (SPF, DKIM, DMARC) for domains, as findings by severity
netallion-mcp-lite
Free, local, IP-safe MCP server for AI-development security — commodity secret & credential checks from Netallion. Part of Agentic Development Governance.
CommandVault
Search prompts, CLAUDE.md/AGENTS.md templates, Cursor rules, Agent Skills and MCP servers.
Pasportoo Website Audit
Human-reviewed audit of a public website: bugs, passive security checks, UX. Order link for owners.
Dataset-listing granularity audit
Per-dataset granularity verdicts keyed to the dataset's own manifest hash, before you pay.
TerraVault
U.S. state cannabis license lookups, licensed stores nearby, CA recalls. Read-only, no key.
SystemSculpt
OAuth account tools, image/video generation (Pro), Studio handoffs. No local vault access.
Depsonar
Dependency audits, live CVE scans, migration detection and stack health across 9 languages.
vault-ask
Request and send secrets for AI agents, end-to-end encrypted and never shown in the chat.
RenewRoster
Track domain and SSL certificate expiry for your agency clients from any MCP client.
SiteDoctor
Website health, SEO, security-header, SSL and broken-link audits for AI agents.
RugShield
Solana token risk scans for AI agents, with batch scanning and trending-token discovery.
com.mambabuilt/mcp-wcag-accessibility-audit
Audit websites for WCAG issues with axe-core, plus EAA exposure signals and compliance page checks.
KeyZula
Use passwords and API keys from your KeyZula vault without the assistant seeing them.
Jobsite
Construction safety, training compliance and operations for your company (OAuth sign-in).
Ranuk Web Accessibility & AST Security Auditor
Edge MCP Server for live WCAG 2.1 AA accessibility compliance and AST security audits.
security-scanner-ai-mcp
Security Scanner Ai automation via MCP. Includes scan dependencies, check headers, scan secrets. By MEOK AI Labs.
Spill
Find leaked API keys, tokens and passwords in pasted text, see which are live, get a clean copy.
otx-mcp
MCP server for AlienVault OTX: pulses, indicators. Free key.
ASL AI Hub
Tenant-separated encrypted context and model routing for your AI work; OAuth 2.1 sign-in.