Security & Identity MCP servers · page 11

MCP servers in security & identity, collected from the official MCP Registry and the main community lists. Each one shows whether it runs locally or remotely, whether it is free, and how to install it.

1,484 servers · showing 481–528

Remote onlyFree onlyOfficial onlyOther categories:Finance, Fintech & PaymentsSearch & Web ScrapingAI Agents & Coding AgentsDeveloper ToolsCommunicationKnowledge, Memory & RAGMultimedia, Audio & VideoProductivity & Project ManagementMarketingLocation & TravelMonitoring & ObservabilityDatabasesBrowser AutomationE-Commerce & Delivery
  1. 481armorstudiomeyer-io/mcp-armorSecurity sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.LocalFree1
  2. 482Black Duck Security Scannerblackducksoftware/mcp-serverAI-powered security scanning using Black Duck Signal for vulnerability detection.LocalFree1
  3. 483Brayforgesworn/brayTrust-aware Nostr for AI agents -- 235 tools covering social, DMs, zaps, trust, and identityLocalAccount needed12k
  4. 484Chain SignerKevthetech143/chain-signerSecurity suite for AI agents: flag drains, permit-phishing & risky actions before signing.LocalFree1
  5. 485commit-checkcommit-check/commit-check-mcpCommit policy as code for AI agents: check commit messages, branch names and authors before a pushLocalFree1
  6. 486ConningEranYonai/ConningRun commands on your remote test machines over SSH without the agent ever seeing a secret.LocalFree1
  7. 487DeepsleuthDeepSleuth/deepsleuth-mcpDeterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.LocalFree1
  8. 488Deliverd Screendeliverd-dev/deliverd-sdkFind and redact personal data and secrets in text before it reaches a model. Local, no account.LocalFree1
  9. 489Dingdawg Agent 1dingdawg/dingdawg-agent-1AI code review — security, quality, performance. Learns your patterns. Receipted.LocalFree1564
  10. 490Droneyusiwen/drone-mcp-serverMCP server for Drone CI/CD: 45 tools for builds, repos, secrets, users and templatesLocalFree1
  11. 491Evalscyanheads/evals-mcp-serverAuthor verifiable eval records through a draft→review→revise→submit loop with enforced graders.LocalFree1
  12. 492First Epsscyanheads/first-epss-mcp-serverLook up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.Local + RemoteFree1
  13. 493Gadriel AI Security HarnessGadriel-ai/gadriel-copilot-pluginAI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.LocalFree1901
  14. 494GhostFreeshane-js/ghostfreeMCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.LocalFree186
  15. 495GhostPaw SoulsGhostPawJS/soulsLocal cognitive identity engine with traits, behavioral evidence, and revision history.LocalFree1
  16. 496JFSecuretheone55/jfsLet AI agents use secrets without seeing them: masked output, every use approved in JFSecure.LocalFree1
  17. 497KeymasterAInoAKARI/keymaster-mcpRead-only runtime secret retrieval from HashiCorp Vault via Keymaster for autonomous AI agents.LocalAccount needed1
  18. 498Liveauthdulzuradev/liveauth-mcpMCP server for LiveAuth: PoW + Lightning auth, L402 bundles, and paid MCP tool receipts.LocalFree1
  19. 499Mund — MCP Security ScannerTyox-all/Weave_ProtocolScan for prompt injection, secrets, PII, and vet MCP servers before installationLocalFree1
  20. 500Opa Authzkanywst/mcp-opa-authzAuthorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.LocalFree1
  21. 501OSF CLI Goedithatogo/osf-cli-goRead-only MCP tools for authenticated Open Science Framework projects and files.LocalFree1
  22. 502Palanit Corestasxr/palanit-coreScan MCP servers and agent tool manifests for poisoning, exfiltration, secrets and supply-chain riskLocalFree1
  23. 503Pentestcyanheads/pentest-mcp-serverOffline methodology engine for authorized penetration testing, CTF, and security research.Local + RemoteFree1
  24. 504Pop Pay100xPercent/pop-payRuntime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.LocalFree1257
  25. 505Prizmadprizmad/Prizmad-MCP-serverGenerate AI UGC video ads from any product URL — avatars, voiceover, OAuth Connect.Local + RemoteAccount needed1
  26. 506Pubmedpipeworx-io/mcp-pubmedPubMed MCP — wraps the NCBI E-utilities API (biomedical literature, free, no auth)Local + RemoteFree1
  27. 507Reconnan786521/recon-mcpRead-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.LocalFree1
  28. 508rustsdcmcpmechubsec/rustsdcmcpJuniper Security Director Cloud MCP server: scoped, audited change control. Rust.LocalFree1
  29. 509SealgateEdison-Watch/sealgate-mcpMCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.Local + RemoteAccount needed1
  30. 510sealkeepmunhq/sealkeepLet AI agents use secrets without seeing them: inject into a command, redact the output.LocalFree1
  31. 511SecHelixomarmohelal/SecHelixEvidence-first security review of authorized repositories. Read-only, root-confined, no shell.LocalFree1
  32. 512Shopify Proden-indance/shopify-mcp-proShopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.LocalAccount needed1
  33. 513Sophos Centralrijul170/sophos-central-mcpMCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant opsLocalFree1
  34. 514Stackexchangepipeworx-io/mcp-stackexchangeStackExchange MCP — wraps the StackExchange API v2.3 (free, no auth required for read)Local + RemoteFree1
  35. 515SynapseAuditdigidenone/SynapseAuditAI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.LocalFree1
  36. 516ThreatLockerWYRE-AI/threatlocker-mcpMCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.LocalAccount needed1
  37. 517TremelayCharitonMedia/TremelayLocal MCP broker: agents call credentials through a daemon without seeing secrets.LocalFree1
  38. 518Universal Host ManagerAbktya/universal-host-manager-mcpCross-platform FastMCP server for authenticated remote Linux/macOS host administrationLocalAccount needed1
  39. 519VaultshellSoWhatI/vaultshellInjects secrets into shell commands at exec time; plaintext never reaches the LLM contextLocalFree1
  40. 520Vuln Checkciloops/vuln-checkLocal vulnerability scan on top of grype, with prioritised upgrade actions for agents.LocalFree1
  41. 521Vulnerability ExposureMRFrazer25/Vulnerability-Exposure-MCPConfirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)LocalFree1
  42. 522Weavatrix OnlineWeavatrix/weavatrix-onlineWeavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.LocalAccount needed1244
  43. 523YouTube Shorts Agentdavidmosiah/youtube-shorts-agentAgent-first YouTube Shorts uploader: dry-run validation, OAuth checks, synthetic-media metadata.LocalFree1268
  44. 524Zenquotespipeworx-io/mcp-zenquotesZenQuotes MCP — wraps ZenQuotes API (free, no auth) with a dummyjson sibling fallback for when…Local + RemoteFree1
  45. 525Agent Seckernora-ai/agent-secZero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.RemoteAccount needed1
  46. 526Agent^Riderceedot-rock/Agent-RiderSigned agent identity, trust scoring, credit economy, and social layer for AI agents.RemotePaid service1
  47. 527Agentsoukagent-souk/agentsoukMarketplace for AI agents: hire, sell, get paid in USDC on Base. Identity, jobs, reputation.RemotePaid service1
  48. 528Apex by LeadSharkrzere/linkedin-mcpNo-auth discovery endpoint for Apex by LeadShark — governed LinkedIn hands for AI agents.RemoteAccount needed1