Security MCP servers

Screen x402 payment counterparties before paying: address sanity, payTo swap, transport safety and spend policy checks with an allow, review or block verdict.

Website safety and trust analysis. Verify domain reputation and detect phishing with GridinSoft.

Agent compliance and identity: verify an agent's X.509 certificate scope, read its behavioral risk score and append to an immutable audit trail.

Security-focused access to self-hosted n8n Community Edition: workflows, executions, credentials, tags and diagnostics, read-only by default.

Generate, audit, fix and compile smart contracts on Ethereum, Solana, Base and other chains, with adversarial multi-agent pen testing and honeypot detection.

The runtime security layer for AI agent commerce. Drop-in CLI + MCP server — blocks hallucinated purchases and keeps card credentials out of agent context. It only takes 0.1% of hallucination to drain 100% of your wallet.

Privacy and approval gateway between AI assistants and Gmail, Drive, Slack, Salesforce, Jira and more: human approval for sensitive reads and writes, local PII detection and an audit log.

Verify IBAN, VAT, VIN, barcodes, national and tax IDs, crypto addresses, phone numbers, dates and holidays against checksums and curated data.

Regulated-industry AI compliance knowledge: control lookup, use-case classification and crosswalks for EU AI Act, NIST AI RMF, ISO 42001, APRA, GDPR and more.

Crypto token risk intelligence: rug pull detection, honeypot scoring, deployer tracking, holder analysis, KOL shill detection, social OSINT and LLM forensics.

Sealgate MCP server: a thin MCP proxy to your organisation's Sealgate AI security gateway and data firewall.

SecObserve vulnerability and license management: triage observations, manage products and rules, import scan reports and SBOMs, run scans and generate VEX.

Encrypted secrets vault for Claude Code that injects secrets into local files so the AI never sees raw values, with audit logs and per-model access rules.

MCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics.

MCP server for the ThreatCluster threat-intelligence API: incident clusters, entity profiles, CVEs and ransomware leak-site victims as tools for Claude, Cursor, VS Code and any MCP client

Security gateway for MCP agents: blocks prompt-injection-driven tool calls before they execute.

URL security signals: redirects, brand impersonation, domain age, SSL validation, parked-domain detection, structural analysis and DNS enrichment.

Burn-after-read encrypted Volta Notes for agents: hand off credentials between users and agents without secrets appearing in chat history.

Scans dependency lockfiles for vulnerabilities, prioritizes them by EPSS exploit probability and recommends fix versions, with monitoring and alerting.

AI visibility for ChatGPT/Perplexity/Claude — triple score (AEO+GEO+Agent) with fix code. Free.

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.

Admission control for agent file edits: checks syntax, structural-cost regressions and workspace boundaries, returning BLOCK, WARN or PASS verdicts.

Input/output safety for AI agents: known-pattern injection and obfuscation scan, URL/IP, secrets.

Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.

Query AgentForge Trust Scores for MCP servers before connecting, covering security, code health, behavioral audit, community trust and EU compliance.

Agentic SDLC governance and security controls for AI coding agents working with GitHub.

Security guardrails for AI agent payments

An MCP server for Arcjet - the runtime security platform that ships with your AI code.

Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.

ASO Score MCP — the free ASO Score scanner as an MCP server. Measures your ASO Score (Agent.

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

Agentic CVE remediation platform for Node.js. Correlates threat intelligence, applies policy-governed fixes, and delivers auditable remediation outcomes across CI/CD pipelines, agent workflows, and service portfolios.

MCP server for Check Point Harmony Email & Collaboration (Avanan) email security.

MCP server for Check Point Harmony Email & Collaboration (Avanan) email security.

Scan and generate barcodes and QR codes.

Marks every base image in your Dockerfiles, compose files and CI workflows whose security patches ha

Security suite for AI agents: flag drains, permit-phishing & risky actions before signing.

Security scanner for AI agents that detects prompt injections using regex patterns.

Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

Cordon for MCP. Security gateway with policy enforcement, audit log, and HITL approvals.

Reads your SECURITY.md against the EU Cyber Resilience Act reporting clock that started on 11 Septem

Real-time DNS security analysis — DNSSEC, email auth, and RDAP. Built for SOC investigations.

DataFood: 16 data sources (crypto/DeFi/security/news/finance) via one MCP. Bundles save ~92%.

Enumerate AWS IAM data, analyze effective permissions and visualize access relationships across users, roles and resources, based on dAWShund.

Deterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.

MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding