Security & Identity MCP servers · page 8

MCP servers in security & identity, collected from the official MCP Registry and the main community lists. Each one shows whether it runs locally or remotely, whether it is free, and how to install it.

1,484 servers · showing 337–384

  1. 337Apiiro Guardian Agentapiiro/mcp-serverApiiro Application Security Posture Management (ASPM) tools for AI coding assistants.RemoteAccount needed4
  2. 338CreateyaCreateya-ai/createya-mcp100+ AI models: FLUX, Sora, Veo, Kling, Runway, Suno. OAuth or Bearer. No VPN. RU billing.RemoteAccount needed4
  3. 339Lusha Pluginlusha-oss/lusha-mcp-pluginLusha MCP server for authorized business profile, usage, and buying-signal insights.RemoteAccount needed4
  4. 340Pentesttools Pypipentesttoolscom/pentesttools-pypiMCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.RemoteAccount needed4
  5. 341Basedagentsmaxfain/basedagentsAgent identity registry (reputation, capability search, task marketplace, messaging) plus a local encrypted vault that leases provider keys to agents.LocalAccount needed3
  6. 342Agent Trust Stackalexfleetcommander/agent-trust-stack-mcpCryptographic provenance, blind reputation scoring and tamper-evident logging for agent interactions, with dispute resolution and trust-based matchmaking.LocalAccount needed3
  7. 343Arkforgeark-forge/arkforge-mcpThird-party certifying proxy that signs any HTTP call with an independent Ed25519 signature, RFC 3161 timestamp and Sigstore Rekor anchor.LocalAccount needed3
  8. 344Cyber Chefnoor202401938-netizen/cyber-chef-mcpCyberChef MCP server providing 28 core data transformations, ciphers, hashing, JWT decoding, representation-calibrated Shannon entropy, and multi-layer payload deobfuscation for AI coding and security agents. npx -y @noorfatima123456/cyber-chef-mcpLocalFree3
  9. 345Datanexusmcpdatanexusmcp/mcp-serverPublic data lookups: CVE/SBOM security audits, license compliance, patents, federal contracts, NPI providers, nonprofit 990 filings and domain intelligence.LocalAccount needed3
  10. 346Shoheikent-tokyo/shoheiInfrastructure diagnostics: DNS checks, TLS certificate chain inspection, email security, global DNS propagation and DNS latency benchmarking.LocalAccount needed3
  11. 347SolvitorAdeptus-Innovatio/solvitor-mcpReverse engineering tools from Solvitor: extract IDL files from closed-source Solana smart contracts and decompile them.LocalFree3
  12. 348Thales Cdsp Crdpsanyambassi/thales-cdsp-crdp-mcp-serverIntegration with the Thales CipherTrust Manager RESTful Data Protection service.LocalAccount needed3
  13. 349Air Blackboxairblackbox/air-blackbox-mcpEU AI Act compliance scanner for Python AI agents (LangChain, CrewAI, AutoGen, OpenAI) with prompt injection detection, risk classification and fix generation.LocalFree3
  14. 350Inkoginkog-io/inkog-mcpAudits agents and MCP servers for prompt injection, infinite loops, token bombing and missing human oversight, with EU AI Act and OWASP mapping.LocalAccount needed3
  15. 351OSINT Toolboxrenkagod/osint-toolbox-mcpRuns 12 OSINT tools locally (Sherlock, Maigret, Holehe, GHunt, SpiderFoot, subfinder...) plus built-in WHOIS, DNS, crt.sh and Wayback lookups. No API keys.LocalFree3
  16. 352Privacyscrubbermoxno/privacyscrubber-mcpLocal, zero-trust masking of PII and secrets.LocalFree3
  17. 353Aegis Security Skillsdrupadsachania/aegis-skillsRead-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.Local + RemoteFree381
  18. 354Caveat LangWSattazahn/caveat-langAuthoring bridge for Caveat: validate, check and test programs; explain decisions; find dependents.LocalFree36.6k
  19. 355dazaiNew1Direction/ningen-shikkakuServe a secret to an agent exactly N times from locked RAM, then wipe it and self-destruct.LocalFree3
  20. 356Firefly IiiYakupEmreYerli/mcp-firefly-iiiSecurity-first, self-hosted MCP server for Firefly III — 152 operations behind 5 scoped tools.LocalAccount needed3
  21. 357GuardianShieldsparkvibe-io/GuardianShieldAI security layer: code scanning, PII detection, prompt injection, secrets, CVEsLocalFree3
  22. 358HiveLearnhivelearn/community-hubRead and author HiveLearn courses, events, quizzes, certificates, resources, leaderboards, tracks.Local + RemoteAccount needed104
  23. 359Kalshi Prediction Marketscejor6/kalshi-mcp-serverMCP server for Kalshi prediction markets: native RSA-PSS auth, rate limiting, demo/prod safety.LocalAccount needed3
  24. 360mcpmgetmcpm/cliMCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.LocalFree3
  25. 361Npmalisaitteke/npm-mcpMCP server for npm package management, security analysis, and compatibility checkingLocalFree3
  26. 362SafeInstallMickdownunder/SafeInstallLocal-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checksLocalFree3577
  27. 363SeatbeltKryptosAI/mcp-seatbeltMCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.LocalFree3
  28. 364SkillguardRudrenduPaul/skillguardSecurity scanner for third-party AI agent-skill files (SKILL.md, hooks, scripts) via MCP.LocalFree3
  29. 365Soulcraft Agentsiamevandrake/soulcraft-agentsAnalyze any company's identity. Get a Soul Score, dimension scores, a soul.md, and recommendations.LocalAccount needed81
  30. 366TripwirealiboIly/TripwireMCP for Roblox Studio and Open Cloud: drive Studio, run headless tests, and review game security.LocalFree3171
  31. 367TuteliqTuteliq/mcpDetect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video.Local + RemoteAccount needed3
  32. 368Agent SkillsDeep-Identity-Inc/agent-skillsAn MCP Server that provides identity verification and anti-fraud tools for AI agents via deepidv.RemoteAccount needed3
  33. 369Edgazeedgaze-ai/mcpFind and run AI workflows from the Edgaze marketplace in your agent. Sign in with OAuth.RemoteAccount needed3
  34. 370Forkcaster Xyzartlu99/forkcaster_xyzResolve Farcaster casts to deep-link URLs for any supported Farcaster client app. No auth.RemoteAccount needed3
  35. 371Hardcover OAuthbenjuntilla/hardcover-oauth-mcpRead and update your Hardcover library, progress, lists, and goals. Sign in with Hardcover OAuth.RemoteAccount needed3
  36. 372Skuuydeaabie/skuuy-mcp13 privacy-first network, auth & web tools for AI agents — no API key, 60 req/min free.RemoteFree3
  37. 373ARGUS-3alexar76/argusQuery ARGUS-3 and check its status; WARDEN vets third-party MCP servers with a scored firewall, tool-definition pinning and drift detection.LocalAccount needed2
  38. 374Claude Plugindnsdoctor/claude-pluginScan and fix a domain's email authentication (SPF, DMARC, DKIM, MX), blacklist status and domain/SSL expiry, with deterministic, validated fix records.Local + RemoteAccount needed2
  39. 375MINT ProtocolFoundryNet/mint-mcpMINT Protocol work attestation for agents: cryptographically attest, verify, rate and discover agent work to build portable on-chain reputation.RemoteAccount needed2
  40. 376Agentdevx SDKmirajmahmudul/agentdevx-sdkIdentity and credential gateway for agents: Ed25519 identity, encrypted credential vault, OPA policies with audit logging, per-agent memory and web scraping.LocalAccount needed2
  41. 377AgentValetAgentValet/AgentValetIdentity and credential broker for MCP servers: issues scoped, short-lived credentials per agent, with audit logging and human approval gates.LocalAccount needed2
  42. 378Arc Gate9hannahnine-jpg/arc-gate-mcpRuntime governance for MCP tool calls that blocks prompt injection and capability abuse before tool results reach the agent.LocalFree2
  43. 379Bytesmithlaszlopere/mcp-bytesmithOffline byte toolbox: hex/Base64/Base58 encoding, cryptographic and CRC hashing, base conversion, secure tokens, plus optional Ethereum/EVM tools.LocalFree2
  44. 380Fetch GuardErodenn/fetch-guardURL fetcher and HTML-to-Markdown converter with layered prompt injection defense: hidden-element sanitization, risk scanning and content boundary wrapping.LocalFree2
  45. 381Horizon Shieldogasurfproject-jpg/horizon-shield/hs-jidec-mcpVerify AI-agent evidence records on the Bitcoin-anchored JIDEC ledger: fetch record bytes, recompute the SHA-256 and check the OpenTimestamps timestamp.LocalAccount needed2
  46. 382Jamjet Policyjamjet-labs/jamjet-policy/mcp-shimMCP interceptor that applies one YAML policy (block, require approval, audit, budget cap) to tool calls, also usable in Claude Code hooks and agent SDKs.LocalFree2
  47. 383Mispppcvote/misp-mcp-serverRead-only MISP threat intelligence (events, attributes, search, tags, feeds, galaxies) with prompt injection scanning of every response.LocalFree2
  48. 384Opentermsjstibal/openterms-mcpEd25519-signed consent receipts and a policy engine for agents: spending caps, action allowlists, escalation thresholds and JWKS-backed provider verification.LocalAccount needed2