Security MCP servers

Drive a self-hosted Woodpecker CI: read failing step logs, restart, cancel or approve pipelines, and manage secrets, registries, crons, agents and the queue.

Access openITCOCKPIT monitoring: host and service state, check history, logs, downtimes, acknowledgements, software inventory and pending security updates.

Notarize AI model outputs with signed Ed25519 attestations, SHA-256 content hashes and Merkle anchoring on Base or Solana, paid via x402.

JSON risk briefs for wallet addresses, tokens and URLs: scores, flags and sources from phishing, scam and URL-reputation heuristics, including OpenPhish.

Multi-agent LLM security layer detecting prompt injection and jailbreaks.

Governed local-LLM observability: model policy, prompt scanner, capture proxy, 21 tools.

Scan websites for AI visibility and marketing health with interactive dashboard.

Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.

MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

Scan any URL for WCAG accessibility issues (axe-core) and get per-element fixes for an AI agent.

Model Context Protocol server for AcuityScan — run website security, accessibility, performance, and SEO scans from Claude Desktop, Cursor, and any other MCP-compatible AI client.

AI agent security: prompt injection detection, semantic memory, output scanning, prompt hardening

Agent Readiness MCP — the free Agent Readiness scanner as an MCP server. Measures your ASO Score.

MCP security trust-check for agents before installing MCPs, Skills or tools.

Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.

Screen AI-work venues for inventory, funding, payouts, withdrawal, economics, and security risk.

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

MCP server for ALTR data security: databases, tags, policies, classification, access, audits

Deterministic execution boundary and reference MCP sidecar for Arcstone Security Stack

Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.

IBM i / RPG / DB2 bridge — parse, map, govern (IBM i security / SOX).

DeFi yields, staking routing, semantic research & security intel via x402 micro-payments on Base

CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm).

Audit any MCP server's security & quality — OWASP MCP Top 10 + explainable 0-100 MCP Score

Transparent MCP proxy that keeps a signed, hash-chained audit trail of agent tool calls, with YAML policy enforcement and OpenTelemetry export.

Auth infrastructure for coding agents. User pools, secrets vault, token management. As easy as git.

MCP server for the legacy Avanan SmartAPI: MSP tenant management plus per-tenant security tools.

Read-only safety checks for Base and EVM: honeypot and rug-pull detection, risky approvals, verified source, balances, ENS and Basenames, gas and prices.

Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner

AI-powered security scanning using Black Duck Signal for vulnerability detection.

Live honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors.

Zero-trust security proxy, pre-execution blast radius simulation, DLP secret redaction, and cryptographic audit logging for MCP.

MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.

MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.

Stops secrets, cross-tenant queries and unsafe migrations before they merge.

BridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...

AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt

Analyzes code for bugs, security vulnerabilities, and code smells

A paid remote MCP for developer endpoint scanner MCP, built to return verdicts, receipts, usage logs

Multi-CI security scanner with a live threat-intel feed of compromised CI components

Exact Claude API cost calc with real cache economics, plus a tiktoken-misuse scanner.

Scan website legal docs for missing or stale compliance clauses. Rule-based, no LLM.

AI agent payment security - spending limits, whitelists, and human approval.

One firewall and password manager for all your AI coding agents' MCP servers and secrets.

Cloudflare API v4 server: 28 tools across zones, DNS, WAF/firewall, rate limits, HTTP request logs, Security Center insights, and threat intelligence (IP/domain/ASN/WHOIS/passive DNS). Currently read-only. Install with `go run github.com/M-Yamashita01/cloudflare-mcp-go@latest`.

Cloudflare Workers MCP server: code-pattern-risk-scanner