Security MCP servers

Query the CVE-Search API: browse vendors and products, get CVEs by ID and list the latest updated CVEs.

Encrypted secrets for Next.js. AES-256-GCM with no vault needed.

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.

Improve AI-generated code quality with prompt-based analysis across 10 dimensions, from complexity to security vulnerabilities.

Automate cybersecurity assessment of documents, questionnaires and reports to surface risks, compliance gaps and remediations, using a RAG knowledge base.

Manage and interact with the OPNsense open source firewall in natural language.

Security-hardened Google NotebookLM access: session-based conversations, notebook library management and source-grounded answers, with post-quantum encryption.

Sonatype component intelligence: versions, security analysis, and Trust Score recommendations

AWS security scanner with attack chain detection, breach cost estimation and remediation snippets for CLI and Terraform.

Install a large security toolset and discover and run it through an authorization-gated server for CTF, pentesting, bug bounty and DFIR.

Mobb Vibe Shield identifies and remediates vulnerabilities in human and AI-written code.

Self-hosted OWASP ZAP integration with guided security scans, findings summaries and report generation.

Real-time security framework for MCP servers that detects and blocks malicious agent behavior by analyzing tool call patterns and intent.

Agent identity, trust and audit trails: Ed25519 agent registration, permission checks, tamper-evident audit events, trust scores and credential delegation.

Agentic memory for cyber threat intelligence. STIX graphs, actor aliasing, offline RAG, Sigma/YARA.

EGC is a local-first MCP runtime that gives every AI agent the same brain: persistent shared memory, security guardrails, and up to 90% token savings across 20 AI coding tools.

Server security auditing and hardening (SSH, firewall, Docker, TLS) with CIS/PCI-DSS/HIPAA mapping, fleet management and forensic evidence collection.

Apache Superset: dashboards, charts, datasets, SQL Lab, security (users, roles, RLS, groups) and permissions audit, with built-in safety validations.

MCP knowledge server for zapret2 DPI bypass tool and blockcheckw strategy scanner

MCP server for automated web accessibility scanning with Playwright and Axe-core.

Audit npm package dependencies for security vulnerabilities with real-time checks against the npm registry.

Embeds Snyk's security engines into agentic workflows to secure AI-generated code in real time and work through vulnerability backlogs faster.

Every Action1 endpoint, plus fleet-wide patch and vulnerability views across all your organizations.

AI agent tools for Open Security Controls Assessment Language (OSCAL)

Analyze ROADrecon gather results from Azure tenant enumeration.

Query the ORKL API to fetch threat reports, analyze threat actors and retrieve intelligence sources.

Memory forensics with Volatility 3, exposing plugins such as pslist and netscan through REST APIs.

Run dnstwist, a DNS fuzzing tool, to detect typosquatting, phishing and corporate espionage.

Local security scanner for AI-generated JS/TS that combines Opengrep, Gitleaks and Trivy with checks for exposed secrets, Supabase RLS and prompt injection.

Use Panther's SIEM platform in natural language to write detections, query logs and manage alerts.

Securely interact with the Authenticator App.

Developer utilities: SEO optimization, document conversion, domain lookup, email validation, QR codes, weather data, social media posting and security scanning.

Use CyberChef operations through the CyberChef server API.

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.

Query the OSV (Open Source Vulnerabilities) database by package version or commit, batch-query multiple packages and get vulnerability details by ID.

A Python MCP server for Microsoft Entra ID (Azure AD) directory, user, group, device, sign-in, and security operations via Microsoft Graph.

Proof-of-behavior enforcement for AI agents: define permit/forbid/require rules, enforce them at runtime and keep hash-chained, tamper-evident audit logs.

Model Context Protocol (MCP) server for Firewalla MSP API - Provides real-time network monitoring, security analysis, and firewall management through 28 read-only tools, plus 11 opt-in write tools, compatible with any MCP client

Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.

Parallel multi-model code review, security analysis and debate with ChatGPT, Claude and Gemini, including consensus and OWASP Top 10 checks.

MCP server enabling AI assistants to securely execute SSH commands, transfer files via SFTP, manage port forwarding, and use parameterized command templates with comprehensive security controls

OSINT MCP server — 23 tools: DNS, WHOIS, Shodan, breaches, GEOINT, crypto. Works with Claude Code.

Architectural analysis for software projects: technology stack detection, ADR management, security checks, TDD workflow and deployment readiness validation.

Security intelligence: CVE/EPSS/KEV lookups, domain recon (DNS, WHOIS, SSL, subdomains), IOC threat intel, OSINT and code scanning for secrets and injection.

Query problems, logs, events, SLOs, security insights and performance metrics from self-hosted Dynatrace Managed environments.

Analyze code quality, security issues, and coverage across repositories

AI supply chain security scanner: discovers MCP clients, scans dependencies for CVEs, maps blast radius to credentials and tools, and generates SBOMs.

Conversational recon with httpx and asnmap: domain analysis, security header inspection, certificate analysis and ASN lookups at multiple recon levels.