Security MCP servers

61 text, security, converter, calculator, and PDF tools -- callable via MCP on one host.

Security intelligence for AI agents. 27 x402 endpoints: honeypot, forensics, CAPTCHA, preflight.

Checks whether a website is readable and citable by AI systems (ChatGPT, Claude, Perplexity, etc.)

Front desk for the AIS MCP campus: lists our buildings (CVE, Flight Recorder), prices, how to pay

Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.

Geopolitical OSINT: sanctions, NOTAMs, maritime warnings, outages, conflict records with sources

Discover and vet MCP servers: search 200K+ AI tools with security verification and schemas.

Minimal MCP server for Ghost Security API - compatible with all MCP clients

Real-time sanctions screening, CVE, and company registry checks for agents.

Crypto security, honeypot detection, wallet analysis, and token risk scoring across 31 blockchains.

Free Article 50 website scanner, notice builder, and checksum verifier. No key or payment.

Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.

Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration)

A simple hello world MCP server by Cyata Security (for educational purposes only)

Signed security scores for what an AI agent runs and reads: skills, MCP servers, prompts, tokens.

Honeypot detection & token risk scan for ERC-20s. Risk score 0-100, tax, source verification.

Live Horry County construction leads for low-voltage, networking, security, AV, POS, and electrical.

Live Horry County construction leads for low-voltage, networking, security, AV, POS, and electrical.

AI-callable tools for API mocking, testing, monitoring, security, and automation.

Hyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key.

Agent-native security, trust, reliability, data and procurement tools for AI workflows.

Run OSINT queries and investigations with Indicia

Infisical API: manage secrets via universal auth.

Search 10k+ live cybersecurity jobs from 246 security companies, plus salary benchmarks and stats.

Runtime AI-to-AI security monitor. 23 anomaly types, OWASP MCP Top 10 coverage.

check-package: block malicious npm/PyPI deps before your AI agent installs them. Free, no key.

Security grades (A-F) for MCP servers. Check one before you install or trust it. mcpgrade.dev

Discover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface

Free, read-only security scanner for remote MCP servers, before you connect them.

Security-first Binance Spot MCP + honest crypto analyst. 25 tools, 5 prompts, human-gated orders.

Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Send and read one-time encrypted secrets with local encryption.

Live threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key.

Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.

AWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs

Ask about your Kodem Security data and act on findings in plain language, with your permissions.

Model Context Protocol server for Kolide security platform

AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.

35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report.

CVE, KEV, MITRE ATT&CK, CWE and detection graph for AI agents; every link names its source.

Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

Regulatory compliance scanner validating SEC, FTC, and anti-spam rules.

Anthropic logs audit filter and cybersecurity threat analyzer.

Brand trademark scanner and intellectual property auditor.

Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).

Is this dependency current, licensed, deprecated, or already carrying a CVE?