MCP Server Directory

mrexodia/ida-pro-mcp

IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.

LaurieWired/GhidraMCP

Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.

zinja-coder/jadx-ai-mcp

JADX decompiler plugin providing live, LLM-assisted reverse engineering.

ENTERPILOT/GoModel

Self-hosted gateway aggregating upstream MCP servers behind one authenticated HTTP endpoint.

microsoft/powerbi-modeling-mcp

The Power BI Authoring MCP server lets an AI agent create and change Power BI semantic models.

hashgraph-online/hol-guard

Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.

duriantaco/skylos

Dead code detection, security scanning and code quality analysis for Python, TypeScript and Go, with AI-assisted remediation.

VibeTensor/attestix

AI agent identity, signed credentials, delegated authority and governance evidence.

zinja-coder/apktool-mcp-server

Automate reverse engineering of Android APKs with Apktool.

decionis/agent-safe-pipeline

Authorize consequential AI agent actions before execution

emiliaprotocol/emilia-protocol

Requires a named human's approval before irreversible agent actions such as payments or deploys, then issues an offline-verifiable Ed25519 trust receipt.

fosdickio/binary_ninja_mcp

Binary Ninja plugin and bridge for automating binary analysis and reverse engineering.

bx33661/Wireshark-MCP

Wireshark packet analysis: capture, protocol statistics, field extraction and security analysis.

radareorg/radare2-mcp

Disassemble and inspect binaries for reverse engineering with the Radare2 disassembler.

dengyier/OpenWorkProof

Verifiable execution protocol for agent tool calls: signed policy decisions, causal evidence chains and offline verification from a SQLite ledger.

gbrigandi/mcp-server-wazuh

Access real-time security alerts and event data from Wazuh SIEM.

JeanExtreme002/PyMemoryEditor

Read, write and scan the memory of running processes, Cheat Engine style: value scans that narrow down as the value changes, pointer chains, and scan results kept server-side behind a handle.

securityfortech/secops-mcp

Security testing toolbox that combines open source tools behind a single interface for pentesting, bug bounty hunting and threat hunting.

sjkim1127/Reversecore_MCP

Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.

thomasxm/CrowdSentinels-AI-MCP

AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics

MustacheCase/zanadir

Find what a repository's CI is missing, and which security checks cannot fail the build.

timescale/rsigma

Author, lint, validate and convert Sigma detection rules with RSigma, evaluate and explain detections against log events, and inspect correlation state.

sinewaveai/agent-security-scanner-mcp

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

13bm/GhidraMCP

Ghidra plugin for binary analysis: function inspection, decompilation, memory exploration and import/export analysis.

jnMetaCode/shellward

Agent security middleware with layered defenses: prompt injection detection, DLP data flow tracking, command blocking and PII detection.

arthurpanhku/dvalincode

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

paradoxsyn/rivemcp-releases

Author Rive; convert Lottie, After Effects, Animate and Figma into it; animate AI and pixel art.

roadwy/cve-search_mcp

Query the CVE-Search API: browse vendors and products, get CVEs by ID and list the latest updated CVEs.

debu-sinha/excalidraw-mcp-server

Security-hardened Excalidraw MCP server with auth, rate limiting, and 14 tools

cycodehq/cycode-cli

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.

vespo92/OPNSenseMCP

Manage and interact with the OPNsense open source firewall in natural language.

26zl/cybersec-toolkit

Install a large security toolset and discover and run it through an authorization-gated server for CTF, pentesting, bug bounty and DFIR.

danoszz/penthera

Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.

gebalamariusz/cloud-audit

AWS security scanner with attack chain detection, breach cost estimation and remediation snippets for CLI and Terraform.

82ch/MCP-Dandan

Real-time security framework for MCP servers that detects and blocks malicious agent behavior by analyzing tool call patterns and intent.

sassoftware/sas-mcp-server

Execute SAS code and query Compute, CAS, and model APIs on SAS Viya via OAuth 2.0.

RostislavMatov/mcpcut

Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval

nolindnaidoo/secrets-le

Detect hardcoded secrets in source and config. Reports masked previews, never the values.

doublegate/CyberChef-MCP

GCHQ CyberChef's encryption, encoding, compression and forensics operations, plus analysis tools such as hash identification, cipher solving and RSA attacks.

atomicchonk/roadrecon_mcp_server

Analyze ROADrecon gather results from Azure tenant enumeration.

Gaffx/volatility-mcp

Memory forensics with Volatility 3, exposing plugins such as pslist and netscan through REST APIs.

awslabs/mcp-server-for-oscal

AI agent tools for Open Security Controls Assessment Language (OSCAL)

Gowthaman90/mcp-bastion

Security proxy for MCP servers: tool-definition pinning, tool-poisoning and exfiltration detection, injection blocking, secret redaction and audit trails.

Synvoya/codeinspectus

Local security scanner for AI-generated JS/TS that combines Opengrep, Gitleaks and Trivy with checks for exposed secrets, Supabase RLS and prompt injection.

firstorderai/authenticator_mcp

Securely interact with the Authenticator App.

sshaaf/keycloak-mcp-server

designed to work with Keycloak for identity and access management, with about 40+ tools covering, Users, Realms, Clients, Roles, Groups, IDPs, Authentication. Native builds available.

mythos-agent/mythos-agent

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.

IvanBBaev/servicenow-mcp-ai

ServiceNow MCP server — 100 tools over the full REST surface, every auth method, flows, diagrams.