844 servers in Security & Identity
Bug Bounty Intelligence
holistis/bug-bounty-intelligence-mcp
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
Bunkerweb
bunkerity/bunkerweb-mcp
Official BunkerWeb WAF integration to manage services, instances, IP bans, configurations, plugins, and scheduler jobs over stdio or streamable HTTP.
Anwani
Anwani-app/anwani-mcp
Anwani MCP: create and manage permanent 9-digit address codes through OAuth (9code.app).
Krita Codex
cyyprezz/krita-codex-mcp
Control Krita through a secure local MCP server and authenticated Windows bridge.
Niro
apxlabs-ai/niro
AI pentester for PRs — finds exploitable bugs and hands your developer agent the fix.
Omnideck
aapd-studio/omnideck-mcp
Local privacy-first tools: redact secrets, decode JWTs, compare LLM costs. No network calls.
PnP PowerShell
pnp/pnp-powershell-mcp-server
Manage Microsoft 365 in natural language with PnP PowerShell and author PnP PowerShell scripts.
Protocol Conformance
studiomeyer-io/mcp-protocol-conformance
MCP conformance test harness. JSON-RPC, OAuth 2.1 PKCE, schemas, smoke, annotations. CLI + lib.
Secret Hygiene
mrfentmen/secret-hygiene-mcp
Count secret-like patterns in bounded local files without returning values, keys, paths,...
Ssl Labs
mrfentmen/ssl-labs-mcp
TLS security grades from SSL Labs. No key required.
warden
ermoluk/mcp-warden
Local credential broker: agents call APIs, SSH and DBs via scoped presets; secrets stay in keychain.
Webcheck
yifanyifan897645/webcheck-mcp
Website health analysis: SEO, accessibility, performance, security, and broken links
PerspectiveGraph
luiacuaniello/perspectivegraph
Attack-path engine for cloud and Kubernetes: list routes from internet exposure to sensitive assets, explain each hop, find choke points and simulate fixes.
Code Sentinel
salrad22/code-sentinel
Code quality analysis MCP server - detects security issues, deceptive patterns, and placeholders
Corvus
Albasha0x0/Corvus
Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.
Draugr
draugr-dev/draugr
Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
hexvero
maximilianfeix/hexvero
Electron release diff for security review: what changed in IPC, contextBridge, windows and hosts.
Microsoft Project
HorizunGroup/horizun-msproject-mcp
Audit, reschedule and author Microsoft Project schedules. No Java, no Project install.
Power Automate
sapientsai/power-automate-mcp-server
Inspect, operate, and author Microsoft Power Automate cloud flows from an agent context.
RealAgent
RedDateTech/RealAgentMCP
AI agent real-name identity: SM2 keypair, QR real-name link, SD-JWT VP generate/verify.
Audit
P4ST4S/mcp-audit
Transparent proxy that intercepts, signs, rate-limits, redacts and audits MCP tool calls without modifying client or server.
AENA Flights
MrGo2/aena-mcp
Flight data for Spain's 50 AENA airports over the public and OAuth2 REST APIs
Agent Envelope
BlackBoxEngineering/agent-envelope-mcp
Neutral MCP server for AgentEnvelope authority: sovereign verify + vault verify/lookup/mint.
Aikido Security Analysis Platform
Bajuzjefe/Aikido-Security-Analysis-Platform
Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.
Decantr
decantr-ai/decantr
Stable eight-tool MCP server for changed-UI assurance, authority-aware UI task context, and repair.
Google Sheets Full
moooonad/mcp-google-sheets-full
Full Google Sheets MCP: 26 tools + run_sheets_script escape hatch. User OAuth, no service account.
Nel Veil
NELPROINC/nel-veil-mcp
Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.
PLCWare - TIA Portal (tia)
renanlido/tia-openness
Drive Siemens TIA Portal V21 from AI: author, compile, export and gated download via Openness.
Safety Warden
gautamvarmadatla/mcpsafetywarden
MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.
Shipcheck
TateLyman/shipcheck-mcp
Read-only Shipcheck launch-risk scans for authorized JS, TS, and MCP repos.
ssh
gelse/ssh-mcp
MCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.
Arai
taniwhaai/arai
Enforces rules from existing agent instruction files (CLAUDE.md, .cursorrules) by blocking prohibited tool calls and logging per-rule compliance verdicts.
Bastion
vaquarkhan/MCP-Bastion
Security middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.
Figuard Core
figuard/figuard-core
Pre-flight spend authorization for AI agents. Set a budget, enforce limits, audit every decision.
GenPark Secure Secret Token Redactor
alphaparkinc/genpark-secure-secret-token-redactor-skill
High-speed regex and entropy-based scanner redacting API keys, JWT tokens, and credentials
Guardrails
ExpertVagabond/guardrails-mcp-server
AI Agent Guardrails MCP server - security layer
Hadith Checker [Dorar.net]
ibnsaleem29/dorar-hadith-mcp
Research Hadith, authenticity, grading, Takhrij and Sharh [commentaries] in Claude Desktop for free.
Judges Panel
KevinRabun/judges
45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.
M2M2 Engine
JOSEPH-CEO/M2M2-Engine
Real-time sanctions screening, CVE, and company registry checks for agents.
McpHub
Soflutionltd/McpHub
One MCP endpoint for all your servers: a few meta-tools, Keychain secrets, sandbox, audit, OAuth.
OpenHCS
OpenHCSDev/OpenHCS
Inspect, author, validate, and run high-content microscopy workflows.
Outlook SNDS
optipub/outlook-snds-mcp
Outlook.com SNDS IP Data and IP Status reports via the OAuth-secured REST API.
Authbox
MARUCIE/authbox
Zero-knowledge password manager and MCP credential gateway: policy-gated agent access, deterministic passwords, BIP-39 recovery and a hash-chain audit trail.
Ida Headless
zboralski/ida-headless-mcp
Headless IDA Pro binary analysis with concurrent sessions and Il2CppDumper and Blutter metadata import for Unity and Flutter reverse engineering.
Verify
ScopeBlind/verify-mcp
Offline verification of Ed25519/JCS-signed artifacts such as receipts, manifests and audit bundles.
Guardvibe
goklab/guardvibe
Security scanner for vibe-coded apps (Next.js, Supabase, Stripe, Prisma and more): taint analysis, auto-fix, SARIF export, pre-commit hook and CVE detection.
Lachesis
UnboundCompute/lachesis
Code property graph for C, Python and TypeScript: callers/callees, data and taint flow with source-to-sink witnesses, points-to and guard/sink structure.
mcpwall
behrensd/mcp-firewall
Deterministic security proxy for MCP that intercepts tool calls, enforces YAML policies, scans for secret leakage and logs everything.