Security MCP servers

Secrets, credentials, authentication, scanning and vulnerability management servers.

CertScore.ai MCP Lightby certscoreFree website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.

Streamable HTTP

HHelixar Securityby helixarSecurity tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.

Streamable HTTP

Kolonie AIby kolonieA colony of AI citizens: join with no credential, prove skills, earn, vote on the rules.

Streamable HTTP

MMasnaviby masnaviRumi's complete Masnavi (25,635 beyts) — search, quote, verify and explain. Free, no auth.

Streamable HTTP

SSlidingbox Hydrate/Dehydrateby slidingboxHand off a secret as an encrypted pay-per-read token; pre-flight an x402 endpoint before paying it.

npm

CCERT-FR Security Advisories — buy per-query in-session (certfrwatch)by a2awireCERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly

Streamable HTTP

CCVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewatch)by a2awireCVE advisories: high/critical NVD vulns, daily digest. Register in-session — free testnet funds.

Streamable HTTP

DDebian Security Advisories — buy per-query in-session (debianwatch)by a2awireDebian Security Advisories (DSA). $0.01/query. Register in-session — free testnet funds.

Streamable HTTP

DDependency Vulnerability Tracker — package security advisories ($0.01/query)by a2awireDependency vulns & malicious-package advisories. Register in-session — free testnet funds.

Streamable HTTP

RRust Crate Security Advisories — buy per-query in-session (rustsecwatch)by a2awireRust crate vulns: CVEs, patched versions. $0.01/query. Register in-session — free testnet funds.

Streamable HTTP

UUbuntu Security Notices / USN (usnwatch) — buy per-query in-sessionby a2awireUbuntu security: USNs per CVE, patched versions. Register in-session — free testnet funds.

Streamable HTTP

MMicrosoft Windows Security Updates (MSRC CVRF) — buy per-query in-session (msrcwatch)by a2awireMSRC Windows updates: CVE rollups, Patch Tuesday. Register in-session — free testnet funds.

Streamable HTTP

GGuide Registryby aiengineerprofessionalRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

BBlackVeil DNS & Email Security Scannerby blackveilsecurityDNS and email security scanner with 80 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

Streamable HTTP

NNexusby civicZero-setup MCP gateway securely connecting AI to your tools with authentication and workflows

Streamable HTTP

DDanube AIby danubeaiMarketplace gateway: 100+ services and 1,400+ tools behind one MCP connection with unified auth

Streamable HTTP

GGuide Registryby dataengineerprofessionalRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

DDecionis CommerceGate MCPby decionisCommerce preflights, D365 authorization, signed evidence, and reports; no marketplace or ERP writes.

npm

FFlightQueueby flightqueueAirport security wait times, forecasts, FAA delays, EES border queues and baggage stats.

Streamable HTTP

AAepby focusgtsFull-CRUD server for AEP, Journey Optimizer and CJA. 61 tools from one OAuth credential.

npm

Tailscale RMCPby dinglebearRust MCP server and CLI for Tailscale devices, users, keys, policies, and auth.

npm

VVetby getvetDiscover and vet MCP servers: search 200K+ AI tools with security verification and schemas.

npm

BBlack Duck Security Scannerby blackduckAI-powered security scanning using Black Duck Signal for vulnerability detection.

npmmcpb

CCinderfi — Retirement Planningby cinderfiRetirement planning for Canada & US. CPP/OAS, Social Security, RRSP/TFSA, 401k/IRA, Monte Carlo.

Streamable HTTP

MMcp Safeguardby cognivatorsMCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.

Python

MMcp Serverby correctoverMCP runtime security. 22µs validation, 97% self-healing. Detects RCE, SSRF, credential hijacking.

npm

MMcp Shieldby craftedtrustTrust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.

Streamable HTTP

TToolsby freedailypro61 text, security, converter, calculator, and PDF tools -- callable via MCP on one host.

Streamable HTTP

VValet Parking Directoryby getvaletparkingMCP server for valet parking: 789 US operators across 31,186 cities. 7 tools. No auth.

Streamable HTTP

Arketoby arketoDraw your app's architecture on a live canvas and flag the bottlenecks and security gaps.

Streamable HTTP

ByteRay AIby byterayHunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: [email protected]

Streamable HTTP

OOneDroid Synapseby onedroidGoverned MCP gateway: one endpoint for your tools, with credential custody and audit log.

Streamable HTTP

SScoreIA Open Chamberby scoreiaYou are the model under test. Enter ScoreIA Open Chamber; signed cards include failures. Auth none.

Streamable HTTP

SScoreIA Open Labyrinthby scoreiaEnter ScoreIA Open Labyrinth. Auth none. Sealed cards include failures. Not the Chamber.

Streamable HTTP

Tthe drainby thedrainPlain-text security bulletin board for AI agents: read, search, post, reply. No auth to read.

Streamable HTTP

KKanbai — public project templates and SOPsby kanbaiRead-only access to Kanbai's public project templates and SOPs. Public, no authentication.

Streamable HTTP

OOne's Vibeby onesvibeSearch a curated gallery of live, tryable AI-built products for prior art. Read-only, no auth.

Streamable HTTPSSE

Insuroby auFree insurance vault MCP: OAuth policies, renewals, coverage Q&A, file PDFs. Global; not advice.

Streamable HTTP

BBAM Kaarsen catalogby beSearch and browse the BAM Kaarsen candle catalog and white-label offering. Read-only, no auth.

Streamable HTTP

MMANDAby bzSearch Japan's M&A marketplace MANDA - public business-for-sale listings (read-only, no auth)

Streamable HTTP

Bright Securityby brightsecEnables AI agents to access Bright Security tools for app discovery and security testing.

Streamable HTTP

CCve Intelligenceby cve-securityCVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions. All tools keyless.

Streamable HTTP

MMcpby domainpostureRemote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).

Streamable HTTP

IIs This Site Down?by downforjustmeoreveryoneCheck if any website is down, from two continents, with uptime history and TLS expiry

Streamable HTTP

RRecords Vaultby eformogiConsent-scoped vault access and free verification of family-issued learning records.

Streamable HTTP

Feranor Resilienceby feranorScan/purge hidden text & score web domains: TLS, DNS, headers, speed. Free scans, $0.01 actions.

Streamable HTTP

FFillTrust security questionnaire corpusby filltrustGuidance for answering vendor security questionnaires. Every result carries the page it came from.

Streamable HTTP

FFindWeedNYby findweednyLicensed NY cannabis dispensaries, brands, deals, license checks and lab-anchored reviews. No auth.

Streamable HTTP

FFramekeep Public Discoveryby framekeepRead-only discovery of Framekeep capabilities, security boundaries, and public resources.

Streamable HTTP

HHuffines for Comptroller AI Gatewayby getbotlensMCP gateway for donhuffines.com: articles, search and full text. Read-only, no auth.

Streamable HTTP

BBotLens AI Gatewayby getbotlensMCP gateway for getbotlens.com: articles, search and full text. Read-only, no auth.

Streamable HTTP

MMano DeAyala AI Gatewayby getbotlensMCP gateway for manoforstaterep.com: articles, search and full text. Read-only, no auth.

Streamable HTTP

RRaconteur AI Gatewayby getbotlensMCP gateway for raconteur.com: articles, search and full text. Read-only, no auth.

Streamable HTTP

TThe Texas Voice AI Gatewayby getbotlensMCP gateway for thetexasvoice.com: articles, search and full text. Read-only, no auth.

Streamable HTTP

IInfoSec Job Boardby infosecjobboardSearch 10k+ live cybersecurity jobs from 246 security companies, plus salary benchmarks and stats.

Streamable HTTP

LLegalAIMCP Directoryby legalaimcpSearch a curated directory of AI tools and MCP servers for law firms. Read-only, free, no auth.

Streamable HTTP

DDynamic Health Monitorby getvdaGive it one seed; it finds every service and checks HTTP, TCP, SSL and DNS.

Streamable HTTP

OOccludra — MCP Gateway (AI Security Gateway)by occludraSecurity & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.

Streamable HTTP

YYuhuison Mediawiki Mcp Server Authby smitheryConnect to your MediaWiki using simple credentials and manage content without OAuth. Search, read,…

Streamable HTTP

SSitejar Web Compliance Scannerby sitejarScan a web page for accessibility, security, privacy, quality and SEO issues, with fixes.

Streamable HTTP

DDefici Marketplace MCP Serverby deficiSearch and browse global classifieds across 80 markets. No auth required for read-only access.

Streamable HTTP

MMcp Serverby httpstatusAI-callable tools for API mocking, testing, monitoring, security, and automation.

Streamable HTTP

PPassword Hashing And Jwt Serviceby getvdaPassword Hashing and JWT Service

Streamable HTTP

GGoogle Oauth Credential Serviceby getvdaGoogle OAuth Credential Service

Streamable HTTP

FFastapi Auth Token Jwt Serviceby getvdaFastAPI Auth Token JWT Service

Streamable HTTP

RRuntimeby formathoSelf-hosted MCP server: 26 deterministic dev, security, and EVM tools.

DockerStreamable HTTP

AAuth Token Mcp Traced Serviceby getvdaAuth Token MCP Traced Service

Streamable HTTP

FFastapi Auth Token Serviceby getvdaFastAPI Auth Token Service

Streamable HTTP

ThornGuardby qwadyRemote MCP security gateway for auth, redaction, policy enforcement, and audit logging.MMCPLookupby mcplookupLook up independent trust ratings and security, maintenance, and adoption evidence for MCP servers.

npmStreamable HTTP

HHolster MCPby nautaaiLocal-first secret scanning, rotation, vault, and audit-log tools for AI agents.

Python

Scanndby scanndTrigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.

npm

SyteCheckby sytecheckScan a website for SEO, accessibility, performance and security issues, and read the report.

npm

TTLS Radarby tlsradarSSL/TLS scanning, free Let's Encrypt issuance, and certificate-expiry monitoring.

Streamable HTTP

TToolYourby toolyourRemote MCP: plan, run, verify for SEO/security/ship-gate. Same REST API key; 500 free credits/month.

Streamable HTTPSSE

VVirohana Businessby virohanalifeVirohana business catalogue, pricing, company info & quote intake. Bearer auth, rate-limited.

Streamable HTTP

WWP HealthKitby wphealthkitSecurity audits for WordPress plugins and themes — 62 verification layers, fix plans and SBOMs.

npmStreamable HTTP

WWebsite Searchby zeltserImprove security writing, score it against rubrics, plan IR, CTI, vuln, and product strategy.

Streamable HTTP

EEcoaby ecoaVerificação de segurança e conformidade de sites: cabeçalhos, TLS, DNS, e-mail, LGPD e pentest.

Streamable HTTP

MMcpby mcpgradeSecurity grades (A-F) for MCP servers. Check one before you install or trust it. mcpgrade.dev

npm

WWebanalyzerby webanalyzerFree website analyzer: score any public URL 0-100 across 8 quality dimensions. No auth.

Streamable HTTP

AAnsvar: EU Compliance & Legal Intelligenceby euCited EU & global law, regulations & security frameworks via Ansvar Gateway. OAuth, free + paid.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

SSalesleader Deskby guideRead-only Sales Leader Guide desk: writers roster and magazine pieces. Public, no authentication.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

GGuide Registryby guideRead-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Streamable HTTP

VaultVision Hyperliquid Vault Researchby 0xkayserRead-only Hyperliquid vault search, risk, drawdown, rankings, TVL, alerts, and comparisons.

Streamable HTTP

11Claw Vaultby 1clawAIHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

npm

PPassword Strength Analyzer APIby Br0ski777Password strength scoring with entropy, crack time estimation, common password detection. x402.

SSE

SSSL Checker APIby Br0ski777SSL certificate check — validity, expiry, issuer, chain, grade. x402 micropayment.

SSE

SSolana Security Standardby Copenhagen0xScan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.

npm

Arkon Vaultby Havix0101Private projects, preflight, decisions, and handoffs that keep work continuous across AI tools.

Streamable HTTP

BBright Securityby NeuraLegionAI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

SSE

Ddazai — burn-after-reading secret (motokano)by New1DirectionServe a secret to an agent exactly N times from locked RAM, then wipe it and self-destruct.

mcpb

AAbnormal Securityby WYRE-AIMCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

Docker

HHares — MCP security scannerby alialrikabi313Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration)

npm

AAPI Lockerby apilockerEncrypted credential vault: LLM, service & OAuth keys. 21-tool MCP server for your AI agent.

npm

IInsAIts - AI Communication Security Monitorby Nomadu27Runtime AI-to-AI security monitor. 23 anomaly types, OWASP MCP Top 10 coverage.

Python

TTruss Threat Intelligenceby truss-securityQuery Truss threat intelligence via hosted MCP (OAuth). Growth+ plans.

Streamable HTTP

MMCP Server Auth Templateby brunoviccoOAuth 2.1/OIDC resource-server reference for secure MCP authorization

Docker

CChecker Mcpby oksigeniaDomain security & privacy checker as an MCP server. 17 live checks, 0-100 score, local-first.

npm

CCopass Localby olaneLocal encryption and project setup plugin for Copass. Keys never leave your machine.

Python

CCosync Localby olaneLocal encryption and project setup plugin for CoSync. Keys never leave your machine.

Python

MMcp Serverby pentest-toolsMCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

Streamable HTTP

OOnepasswordby pulsemcpMCP server for interacting with 1Password via the CLI to read and manage credentials.

npm

VVault Knowledgeby seanwinslowRead-only MCP over a vault's typed knowledge graph: concept search, contradictions, article fetch.

npm

Mcpby secdimPersonalised developer security learning pathways from SecDim's challenges and courses.

Streamable HTTP

SSkillsSafe Security Scannerby skillssafeAI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.

npmSSE

DDependency Management Mcp Serverby sonatypeSonatype component intelligence: versions, security analysis, and Trust Score recommendations

Streamable HTTP

SStackhawkby stackhawkAn MCP server that provides interaction with StackHawk's security scanning platform.

Python

CCybersec Toolkitby 26zlAuthorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

Docker

MMcp Server Vaultby AIWerkBitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets.

npm

DDomainintel Mcpby Bishop81Domain intelligence for agents: WHOIS, DNS, SSL/TLS, security headers, reputation, subdomains.

npm

11passwordby CakeRepositoryMCP server for 1Password service accounts — tools and resources for vaults and credentials

npm

VVault MCPby Chill-AI-SpaceMCP server for credential isolation — bots use passwords and API keys without seeing them

npm

Directory total: 8,821 servers.