Security MCP servers

Universal code development MCP server — search, analyze, navigate, review any codebase. 29 tools, semantic search, AST parsing, security scanning, dead code detection, complexity heatmaps, DB schema parsing, API discovery, IaC analysis, CI/CD parsing, mon

Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.

Policy-as-code guardrails for AI coding agents, validated via OPA, Conftest, Checkov & Semgrep.

MCP smart contract scanner with NEAR-focused security context.

Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.

Security scanning for websites, public repositories, and Open CLAW skills.

MCP server for DNSFilter's DNS security/filtering API.

Drive a self-hosted Darkmoon Pro AI pentest instance: start runs, read campaigns and findings.

Scan a project for security issues locally with the open-source Data Hogo engine.

Inspect PDF, Office, and iWork documents without rendering: counts, metadata, security signals

Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.

Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis.

License check, outdated deps, security for AI agents

Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.

Website & Server Diagnostics MCP Server. DNS, SSL, HTTP headers, security scan, performance audit.

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

MCP server providing Docker Desktop release notes and security information.

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

DNS resolution, HTTP security headers, and SPF/DMARC email hygiene audits.

Domain History Lookup - WHOIS History + Past Owner Contacts

Website intelligence for AI agents: tech stack, hosting, security posture, SEO, and DNS.

Domain overviews for security and sales: registration, infrastructure, and risk signals.

Domain intelligence for agents: WHOIS, DNS, SSL/TLS, security headers, reputation, subdomains.

Coding & security oracle grounded in 1855 real books. Cited answers via MCP.

Pre-flight MCP security. Blocks compromised deps + tool drift. HMAC-signed. Dredd judges.

378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402.

MCP server for ESET PROTECT's ESET Connect API - device, EDR, vulnerability, patch, and user data.

Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.

Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.

MCP server for accessing EUVD (European Vulnerability Database) and ENISA security data

Domain security scanning for AI agents. A-F grades, 8 checks, fix snippets.

Technology intelligence feed for AI agents: tech stack, compliance, security.

Marketplace of vetted agents with automated security scans plus human review, credential-to-host binding and sandboxed hosted code with default-deny egress.

Company filing/CVE snapshots, status and optional feedback. Remote MCP or local stdio. Free Phase A.

Airport security wait times, forecasts, FAA delays, EES border queues and baggage stats.

Audit architecture, security, memory, and code quality in Flutter, Laravel, Node, Python, & Vue.

Live npm/PyPI dependency-health verdicts so AI agents stop recommending stale or CVE'd packages

Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

Cross-venue perp funding rate arb — Hyperliquid, Binance, Bybit, OKX spreads. x402.

Scan website GDPR compliance: consent, privacy policy, trackers. Score 0-100. x402.

AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

MCP server for Google Workspace security auditing — login audit, external sharing, daily brief

Run AI-driven web-app and API security scans (DAST) from Claude or any MCP agent. Windows.

HTTP MCP gateway that attaches a principal to tool calls and SSE streams, with allowlists and vault rotation.

AI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.