MCP Server Directory

asqi-carter/ftx-mcp

MCP server for FactoryTalk Optix: author, preview, and verify Studio changes via the emulator.

poliakarmai/gsc

Local security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.

mrfentmen/openapi-scout-mcp

Local read-only OpenAPI and Swagger inspection with secret-safe schema summaries. Tools include...

aplaceforallmystuff/mcp-threatintel

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker

gbrigandi/mcp-server-cortex

Cortex integration for observable analysis and automated security responses.

jyjune/mcp_vms

Retrieve live and recorded video from a CCTV recording program (VMS) and control it, such as opening live or playback dialogs for specific channels and times.

mcp-hangar/mcp-hangar

Self-hosted policy enforcement for MCP server fleets: deterministic admission and egress policies, attributable audit logs and SIEM export.

Top-Celestial-Company-Ltd/DROS-VajraClaw-Hacker

Deterministic execution governance gateway and W3C DID security guardrail for AI agent MCP tool calls.

gbrigandi/mcp-server-thehive

TheHive integration for collaborative security incident response and case management.

nickjlamb/redacta

Privacy boundary for healthcare AI agents: pseudonymises patient identifiers (NHS numbers, names, dates of birth, addresses; UK and US) into labelled tokens locally, keeps the reversal map out of agent context, and restores originals only at the trusted boundary.

Agnuxo1/enigmagent-mcp

Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.

pezhik/skilltotal

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

mopanc/depguard

Pre-install npm package checks: static analysis, supply-chain attack detection, vulnerability audits, AI hallucination guard and CycloneDX SBOM generation.

runtimeguard/runtime-guard

Runtime policy enforcement for AI agents that prevents accidental system damage and unauthorized access, with automatic backups before file writes.

sint-ai/sint-protocol

MCP governance proxy with capability tokens, tiered approvals, fail-closed execution and tamper-evident audit receipts, plus preflight tool-risk scanning.

sgateway/s-gw

Local credential gateway for coding agents: agents get handles instead of raw secrets, and one-time approvals inject credentials only into approved commands.

tomjwxf/scopeblind-gateway

Security gateway that wraps MCP servers with per-tool policies, approval gates and optional signed receipts, in shadow (log-only) or enforce mode.

hudsonkit/arc

Author, validate, lay out, render, and diff architecture diagrams as code.

mrfentmen/maltiverse-mcp

Threat intelligence for IPs and domains from Maltiverse. No key required.

mrfentmen/osv-mcp

Use this MCP server to OSV open source vulnerability data and package security checks. Tools...

FarzamHabibi/pre-production-checklist

4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.

kota1026/quantum-shield

BridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...

nickfluxk/safeweave

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

mrfentmen/unicode-security-mcp

Local first MCP checks for Unicode confusables, mixed scripts, invisible controls, and...

Rul1an/assay

Fail-closed policy-as-code proxy for MCP that denies risky tool calls, produces offline-verifiable evidence bundles and enforces egress via eBPF and Landlock.

hyai-dev/checkaifree-mcp

Inspect editable image source clues. No C2PA signature verification or authenticated origin.

gethelio/helio

Open-source governance for MCP agents: useful autonomy without unlimited authority

scrubguard-dev/scrubguard

Local-first PII and secret scrubber with checksum checks and reversible LLM tokens.

swnotmetal/Project-Koma/koma-gate-mcp

Classify input for prompt injection and out-of-scope content with Koma Gate's LLM-based classifier.

ninadphalak/LLM-Shield-Proxy

Checks whether your streaming redactor leaks a secret split across chunks; writes a pytest for it.

starloghq/index

Vet a package (CVEs, license, maintenance) before your AI agent uses it, plus capability discovery.

vulncheck-oss/mcp

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

rafapra3008/cervellaswarm/mcp-server

Verify agent communication protocols with session types and Lean 4 proofs to catch deadlocks and role violations; includes a linter, formatter and LSP.

simonkowallik/irulescan

:shield: MCP enabled code security analyzer for F5 iRules

bawbel/scanner

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

SPerekrestova/interactive-leetcode-mcp

Interactive LeetCode MCP server with authorization and solution submission capabilities

enessubass/mobiloop-mcp

Guarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.

adamsjack711-ux/pkgxray

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

visus-mcp/visus-mcp

Security-first web access for Claude. Sanitizes pages, blocks injection, redacts PII.

msgwing/ZeroSMTP

A free SMTP relay that still takes a username and password, for devices that cannot do OAuth 2.0.

yagobski/agentleak

Local privacy testing for AI agents: scan code for PII and secrets, score execution traces across internal channels, redact text, and track new or fixed findings through MCP tools.

forest6511/secretctl

Secrets manager that injects credentials into commands as environment variables so agents never see plaintext secrets, and sanitizes command output.

AperionAI/shield

Local guardrail proxy for MCP servers: blocks destructive tool calls, pins tool catalogs against rug pulls and scans for tool poisoning and prompt injection.

Ostico/bruno-mcp-studio

Author, edit and run Bruno collections as files: HTTP, WebSocket, gRPC, per-request pass/fail.

NetroDev/dmca-cases-public-mcp

DMCA.com cases. Your own token via Authorization: Bearer. No function key, no shared token.

0x1Adi/Klarion

Secret scanning for AI agents: rules and entropy find candidates, a model decides which are real.

arose26/make-audit-mcp

Audit Make.com blueprints before importing: hardcoded secrets, dangling refs, risky settings.

andrasfe/vulnicheck

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.