MCP Server Directory

45,118 Model Context Protocol servers for Claude Code, Claude Desktop, Cursor and every MCP client. Filter by what they do, whether they run locally or remotely, and whether they're free.

Submit your MCP server

844 servers in Security & Identity

Bug Bounty Intelligence

11

holistis/bug-bounty-intelligence-mcp

AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

RemoteFreeSecurity & Identity

Bunkerweb

10

bunkerity/bunkerweb-mcp

Official BunkerWeb WAF integration to manage services, instances, IP bans, configurations, plugins, and scheduler jobs over stdio or streamable HTTP.

LocalFreePythonSecurity & Identity

Anwani

0305

Anwani-app/anwani-mcp

Anwani MCP: create and manage permanent 9-digit address codes through OAuth (9code.app).

Local + RemoteFreeSecurity & Identity

Krita Codex

10

cyyprezz/krita-codex-mcp

Control Krita through a secure local MCP server and authenticated Windows bridge.

LocalFreeSecurity & Identity

Niro

10

apxlabs-ai/niro

AI pentester for PRs — finds exploitable bugs and hands your developer agent the fix.

LocalFreeSecurity & Identity

Omnideck

0286

aapd-studio/omnideck-mcp

Local privacy-first tools: redact secrets, decode JWTs, compare LLM costs. No network calls.

LocalFreeSecurity & Identity

PnP PowerShell

10

pnp/pnp-powershell-mcp-server

Manage Microsoft 365 in natural language with PnP PowerShell and author PnP PowerShell scripts.

LocalFreeSecurity & Identity

Protocol Conformance

0290

studiomeyer-io/mcp-protocol-conformance

MCP conformance test harness. JSON-RPC, OAuth 2.1 PKCE, schemas, smoke, annotations. CLI + lib.

LocalFreeSecurity & Identity

Secret Hygiene

0297

mrfentmen/secret-hygiene-mcp

Count secret-like patterns in bounded local files without returning values, keys, paths,...

LocalFreeSecurity & Identity

Ssl Labs

293

mrfentmen/ssl-labs-mcp

TLS security grades from SSL Labs. No key required.

LocalFreeSecurity & Identity

warden

10

ermoluk/mcp-warden

Local credential broker: agents call APIs, SSH and DBs via scoped presets; secrets stay in keychain.

LocalFreeSecurity & Identity

Webcheck

3220

yifanyifan897645/webcheck-mcp

Website health analysis: SEO, accessibility, performance, security, and broken links

LocalFreeSecurity & Identity

PerspectiveGraph

9

luiacuaniello/perspectivegraph

Attack-path engine for cloud and Kubernetes: list routes from internet exposure to sensitive assets, explain each hop, find choke points and simulate fixes.

LocalFreeGoSecurity & Identity

Code Sentinel

3172

salrad22/code-sentinel

Code quality analysis MCP server - detects security issues, deceptive patterns, and placeholders

LocalFreeSecurity & Identity

Corvus

9

Albasha0x0/Corvus

Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.

LocalFreeSecurity & Identity

Draugr

9

draugr-dev/draugr

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

LocalFreeSecurity & Identity

hexvero

93.7k

maximilianfeix/hexvero

Electron release diff for security review: what changed in IPC, contextBridge, windows and hosts.

LocalFreeSecurity & Identity

Microsoft Project

9

HorizunGroup/horizun-msproject-mcp

Audit, reschedule and author Microsoft Project schedules. No Java, no Project install.

LocalFreeSecurity & Identity

Power Automate

2195

sapientsai/power-automate-mcp-server

Inspect, operate, and author Microsoft Power Automate cloud flows from an agent context.

LocalFreeSecurity & Identity

RealAgent

1227

RedDateTech/RealAgentMCP

AI agent real-name identity: SM2 keypair, QR real-name link, SD-JWT VP generate/verify.

LocalFreeSecurity & Identity

Audit

8

P4ST4S/mcp-audit

Transparent proxy that intercepts, signs, rate-limits, redacts and audits MCP tool calls without modifying client or server.

LocalFreeGoSecurity & Identity

AENA Flights

2176

MrGo2/aena-mcp

Flight data for Spain's 50 AENA airports over the public and OAuth2 REST APIs

LocalFreeSecurity & Identity

Agent Envelope

1220

BlackBoxEngineering/agent-envelope-mcp

Neutral MCP server for AgentEnvelope authority: sovereign verify + vault verify/lookup/mint.

LocalFreeSecurity & Identity

Aikido Security Analysis Platform

2177

Bajuzjefe/Aikido-Security-Analysis-Platform

Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.

LocalFreeSecurity & Identity

Decantr

8

decantr-ai/decantr

Stable eight-tool MCP server for changed-UI assurance, authority-aware UI task context, and repair.

LocalFreeSecurity & Identity

Google Sheets Full

0252

moooonad/mcp-google-sheets-full

Full Google Sheets MCP: 26 tools + run_sheets_script escape hatch. User OAuth, no service account.

LocalFreeSecurity & Identity

Nel Veil

0231

NELPROINC/nel-veil-mcp

Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.

LocalFreeSecurity & Identity

PLCWare - TIA Portal (tia)

8

renanlido/tia-openness

Drive Siemens TIA Portal V21 from AI: author, compile, export and gated download via Openness.

LocalFreeSecurity & Identity

Safety Warden

8

gautamvarmadatla/mcpsafetywarden

MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

LocalFreeSecurity & Identity

Shipcheck

0246

TateLyman/shipcheck-mcp

Read-only Shipcheck launch-risk scans for authorized JS, TS, and MCP repos.

LocalFreeSecurity & Identity

ssh

8

gelse/ssh-mcp

MCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.

LocalFreeSecurity & Identity

Arai

7

taniwhaai/arai

Enforces rules from existing agent instruction files (CLAUDE.md, .cursorrules) by blocking prohibited tool calls and logging per-rule compliance verdicts.

LocalFreeRustSecurity & Identity

Bastion

7

vaquarkhan/MCP-Bastion

Security middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.

LocalFreeSecurity & Identity

Figuard Core

2160

figuard/figuard-core

Pre-flight spend authorization for AI agents. Set a budget, enforce limits, audit every decision.

LocalFreeSecurity & Identity

GenPark Secure Secret Token Redactor

7

alphaparkinc/genpark-secure-secret-token-redactor-skill

High-speed regex and entropy-based scanner redacting API keys, JWT tokens, and credentials

LocalFreeSecurity & Identity

Guardrails

1188

ExpertVagabond/guardrails-mcp-server

AI Agent Guardrails MCP server - security layer

LocalFreeSecurity & Identity

Hadith Checker [Dorar.net]

7

ibnsaleem29/dorar-hadith-mcp

Research Hadith, authenticity, grading, Takhrij and Sharh [commentaries] in Claude Desktop for free.

LocalFreeSecurity & Identity

Judges Panel

7

KevinRabun/judges

45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.

LocalFreeSecurity & Identity

M2M2 Engine

211

JOSEPH-CEO/M2M2-Engine

Real-time sanctions screening, CVE, and company registry checks for agents.

LocalFreeSecurity & Identity

McpHub

7

Soflutionltd/McpHub

One MCP endpoint for all your servers: a few meta-tools, Keychain secrets, sandbox, audit, OAuth.

LocalFreeSecurity & Identity

OpenHCS

7

OpenHCSDev/OpenHCS

Inspect, author, validate, and run high-content microscopy workflows.

LocalFreeSecurity & Identity

Outlook SNDS

7

optipub/outlook-snds-mcp

Outlook.com SNDS IP Data and IP Status reports via the OAuth-secured REST API.

LocalFreeSecurity & Identity

Authbox

6

MARUCIE/authbox

Zero-knowledge password manager and MCP credential gateway: policy-gated agent access, deterministic passwords, BIP-39 recovery and a hash-chain audit trail.

LocalFreeTypeScriptSecurity & Identity

Ida Headless

6

zboralski/ida-headless-mcp

Headless IDA Pro binary analysis with concurrent sessions and Il2CppDumper and Blutter metadata import for Unity and Flutter reverse engineering.

LocalFreePythonSecurity & Identity

Verify

6

ScopeBlind/verify-mcp

Offline verification of Ed25519/JCS-signed artifacts such as receipts, manifests and audit bundles.

LocalFreeTypeScriptSecurity & Identity

Guardvibe

66.8k

goklab/guardvibe

Security scanner for vibe-coded apps (Next.js, Supabase, Stripe, Prisma and more): taint analysis, auto-fix, SARIF export, pre-commit hook and CVE detection.

LocalFreeTypeScriptSecurity & Identity

Lachesis

6

UnboundCompute/lachesis

Code property graph for C, Python and TypeScript: callers/callees, data and taint flow with source-to-sink witnesses, points-to and guard/sink structure.

LocalFreePythonSecurity & Identity

mcpwall

186

behrensd/mcp-firewall

Deterministic security proxy for MCP that intercepts tool calls, enforces YAML policies, scans for secret leakage and logs everything.

LocalFreeTypeScriptSecurity & Identity