Security MCP servers

Verify agent communication protocols with session types and Lean 4 proofs to catch deadlocks and role violations; includes a linter, formatter and LSP.

Auth proxy for MCP servers: OAuth2 with DCR, JWT, RBAC, rate limiting, multi-server aggregation and a monitoring dashboard.

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

:shield: MCP enabled code security analyzer for F5 iRules

Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval.

Local guardrail proxy for MCP servers: blocks destructive tool calls, pins tool catalogs against rug pulls and scans for tool poisoning and prompt injection.

EU AI Act compliance scanner that detects regulatory violations in AI codebases, with risk classification and remediation guidance.

Security gateway that wraps MCP servers with per-tool policies, approval gates and optional signed receipts, in shadow (log-only) or enforce mode.

Conan C/C++ package manager: create projects, manage dependencies, check licenses and scan for security vulnerabilities.

MCP server for DM8 database operations with enhanced security. Provides read-only database access via Model Context Protocol.

Guarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.

OPNsense firewall operations via API: query ARP, DHCP, firewall rules, logs, interfaces, system status and packet captures.

SSH access with persistent sessions, SFTP and port forwarding, with secrets injected via stdin and redacted from output before reaching the LLM.

Secrets manager that injects credentials into commands as environment variables so agents never see plaintext secrets, and sanitizes command output.

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

Dynamic SOC security threat analysis for a Text2SQL AI agent.

AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

Zitadel identity management: manage users, projects, OIDC apps, roles and service accounts in natural language.

Attack-path engine for cloud and Kubernetes: list routes from internet exposure to sensitive assets, explain each hop, find choke points and simulate fixes.

DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

Thales CipherTrust Manager integration for key management, cryptographic operations and compliance monitoring.

OSINT sweep of a digital footprint: breaches, accounts, data brokers, domains and IPs

PostgreSQL MCP server for schema, query, health, security, and performance analysis.

Analyze GitHub repositories' tech stack, dependencies, architecture, health metrics and security indicators with deterministic JSON output.

Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org.

An MCP server that provides interaction with StackHawk's security scanning platform.

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

Fetch recent public X/Twitter posts by named handle for monitoring, comparison, OSINT, and research.

Injects a live, reversible MCP server into a running Express, FastAPI or Next.js app, with safe reads by default and writes gated behind human confirmation.

Supply chain risk scoring for npm, PyPI, Cargo and Go packages from behavioral signals: publisher depth, release consistency and maintenance patterns.

Check recruiters and job offers for scams: cross-checks company registration, domain age, look-alike domains, blocklists and crypto-scam databases.

OPA and Rego policy toolkit wrapping the OPA CLI and Regal: format, lint, evaluate, test and benchmark policies, manage the OPA REST API and explain decisions.

MCP server for unified threat intelligence - AlienVault OTX, AbuseIPDB, GreyNoise, and abuse.ch feeds

Security scanner for MCP servers and AI agent skills. Scan before you install.

Transparent proxy that intercepts, signs, rate-limits, redacts and audits MCP tool calls without modifying client or server.

Security-hardened Chrome automation and logins with post-quantum encryption, a credential vault, memory scrubbing and audit logging.

APK reverse engineering workspace that orchestrates jadx, apktool, adb and Frida through a workflow engine, on Termux (Android) or PC.

MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

MCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage

MCP server for web application security scanning

Security proxy for MCP servers: tool-definition pinning, tool-poisoning and exfiltration detection, injection blocking, secret redaction and audit trails.

45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.

MCP server providing Claude Code with real-time stock and crypto market data, SEC filings, insider trades, and technical analysis

URL scanning and phishing triage: capture DOM snapshots, network requests and screenshots, and hunt historical scans with a custom query language.

Enforces rules from existing agent instruction files (CLAUDE.md, .cursorrules) by blocking prohibited tool calls and logging per-rule compliance verdicts.

Security middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.