Security MCP servers

Analyze repos of any size - security scanning code analysis monorepo support

Local security reconnaissance: WHOIS, DNS and subdomain enumeration, Nmap scanning, TLS inspection, tech fingerprinting, CVE and IP reputation lookups.

Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.

Execution safety for agent actions: a YAML-policy gateway that allows, holds or denies tool calls, plus an approval queue and hash-chained receipts.

Codebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.

Access Intruder to identify, understand and fix security vulnerabilities in your infrastructure.

Security testing tools for penetration testing, network forensics, memory analysis and vulnerability assessment.

MCP server for Cinema 4D — entity CRUD, parameter-level access, batched undo, security controls.

GCHQ CyberChef's encryption, encoding, compression and forensics operations, plus analysis tools such as hash identification, cipher solving and RSA attacks.

Security-focused safety guidelines and content analysis for AI agents.

Static and dynamic analysis of Android and iOS apps with MobSF.

Cloud infrastructure analysis: detect IaC drift, missing indexes, security gaps and performance anti-patterns across AWS services and databases.

Demonstrates remote attestation of an MCP server running in a Gramine TEE via RA-TLS, so clients can verify the server before connecting.

DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks

Runtime security proxy for MCP that blocks prompt injection, SSRF, shell/SQL injection and credential exfiltration, plus trust scores for npm MCP packages.

MCP server for libSQL databases with comprehensive security and management tools. Supports file, local HTTP, and remote Turso databases with connection pooling, transaction support, and 6 specialized database tools.

Ephemeral data sandbox for AI workflows with guardrails and security

Deterministic AI safety policy engine with Z3 formal verification: write, verify and enforce machine-verifiable constraints for AI agents.

MCP proxy that enforces least-privilege YAML policies on tool calls, classifies PII/PHI, detects dangerous skill chains and generates compliance audit trails.

Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.

Manage Bitwarden and Vaultwarden vaults via the bw CLI: search, create, edit and organize logins, notes, cards, identities, SSH keys, folders and Sends.

Policy-based governance for agent tool calls across LangChain, OpenAI, Anthropic and MCP: YAML policies, approval gates, risk assessment and audit logging.

FAOSTAT data for 245 countries: crops, trade, food security, and emissions via 23 MCP tools.

Local-first MCP gateway for coding agents that redacts detected secrets from file reads and command output before they reach model context.

Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…

Self-hosted policy enforcement for MCP server fleets: deterministic admission and egress policies, attributable audit logs and SIEM export.

Cortex integration for observable analysis and automated security responses.

Retrieve live and recorded video from a CCTV recording program (VMS) and control it, such as opening live or playback dialogs for specific channels and times.

Deterministic execution governance gateway and W3C DID security guardrail for AI agent MCP tool calls.

Network scanner for AI agents: discover hosts, scan TCP and UDP ports, query DNS and mDNS.

Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.

TheHive integration for collaborative security incident response and case management.

Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.

Local credential gateway for coding agents: agents get handles instead of raw secrets, and one-time approvals inject credentials only into approved commands.

Governance proxy that wraps MCP servers with policy evaluation, human approval workflows and hash-chain audit trails.

Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.

Trust, W3C DID identity and EigenTrust reputation for AI agents, with attestations, disputes, sybil detection and IPFS audit anchoring.

Pre-install npm package checks: static analysis, supply-chain attack detection, vulnerability audits, AI hallucination guard and CycloneDX SBOM generation.

GitHub security posture audit tools for AI agents — organization, repository, Actions, secrets, supply chain analysis via MCP

4,372 pre-production checks: security, performance, scale, integrations, post-launch.

Runtime policy enforcement for AI agents that prevents accidental system damage and unauthorized access, with automatic backups before file writes.

MCP governance proxy with capability tokens, tiered approvals, fail-closed execution and tamper-evident audit receipts, plus preflight tool-risk scanning.

Credential isolation proxy that injects secrets at the network boundary, with domain restrictions, agent authentication and audit logging.

Post-quantum readiness: scan code for quantum-vulnerable cryptography (RSA, ECDH, ECDSA, DH), get ML-KEM/ML-DSA/SLH-DSA migration guidance and verify fixes.

Query the NIST National Vulnerability Database (NVD) API.

Deterministic pre-execution filter for agent tool calls that blocks scope creep (credential reads, SSRF, destructive shell/SQL) and prompt injection.

Fail-closed policy-as-code proxy for MCP that denies risky tool calls, produces offline-verifiable evidence bundles and enforces egress via eBPF and Landlock.

Classify input for prompt injection and out-of-scope content with Koma Gate's LLM-based classifier.