zinja-coder/apktool-mcp-server B MCP Server Maintained
zinja-coder/apktool-mcp-server
APKTool MCP Server is a MCP server for the Apk Tool to provide automation in reverse engineering of Android APKs.
Home › Categories › Security
Security
190 MCP servers and agent skills in the Security category, ranked by quality score.
Filters (1 active)
Category
Finance & Fintech83Developer Tools73Product Management Skills by Pawel Huryn65Security45Knowledge & Memory38Search & Data Extraction38Workplace & Productivity29Databases25Marketing25Communication23Other Tools and Integrations21Aggregators19Social Media18Monitoring17Cloud Platforms16Browser Automation16Art & Culture14Multimedia Process13Coding Agents12Development and Testing12Data Platforms12Travel & Transportation11Specialized Domains11File Systems10Results
zboralski/ida-headless-mcp B MCP Server Maintained
zboralski/ida-headless-mcp
Headless IDA Pro binary analysis via MCP. Multi-session concurrency with Go orchestration and Python workers. Supports Il2CppDumper and Blutter metadata import for Unity and Flutter reverse engineering.
BurtTheCoder/mcp-virustotal B MCP Server Maintained
BurtTheCoder/mcp-virustotal
MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.
jnMetaCode/shellward C MCP Server Maintained
jnMetaCode/shellward
AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII detection. 7 MCP tools, zero dependencies.
13bm/GhidraMCP C MCP Server Maintained
13bm/GhidraMCP
MCP server for integrating Ghidra with AI assistants. This plugin enables binary analysis, providing tools for function inspection, decompilation, memory exploration, and import/export analysis via the Model Context Protocol.
Chimera-Protocol/csl-core C MCP Server Maintained
Chimera-Protocol/csl-core
Deterministic AI safety policy engine with Z3 formal verification. Write, verify, and enforce machine-verifiable constraints for AI agents via MCP.
loglux/authmcp-gateway C MCP Server Maintained
loglux/authmcp-gateway
Auth proxy for MCP servers: OAuth2 + DCR, JWT, RBAC, rate limiting, multi-server aggregation, and monitoring dashboard.
rafapra3008/cervellaswarm C MCP Server Maintained
rafapra3008/cervellaswarm/packages/mcp-server
Verify AI agent communication protocols using session types. Formal specification with Lean 4 proofs, linter, formatter, and LSP. Catches deadlocks and role violations before deployment.
tomjwxf/scopeblind-gateway C MCP Server Maintained
tomjwxf/scopeblind-gateway
Security gateway that wraps any MCP server with per-tool policies, approval gates, and optional Ed25519-signed receipts. Shadow mode logs every tool call; enforce mode blocks, rate-limits, or requires approval.
takleb3rry/zitadel-mcp C MCP Server Maintained
takleb3rry/zitadel-mcp
MCP server for Zitadel identity management — manage users, projects, OIDC apps, roles, and service accounts through natural language.
P4ST4S/mcp-audit C MCP Server Maintained
P4ST4S/mcp-audit
Transparent Go proxy that intercepts, signs, rate-limits, redacts, and audits all MCP JSON-RPC tool calls without modifying client or server.
piiiico/proof-of-commitment C MCP Server Maintained
piiiico/proof-of-commitment
Supply chain risk scoring for npm, PyPI, Cargo, and Go packages. 9 tools for behavioral trust signals — publisher depth, release consistency, maintenance patterns. Both axios and node-ipc scored CRITICAL before they got attacked. Free CLI, CI gate, REST API. No API key required.
yessGlory17/job-verify C MCP Server Maintained
yessGlory17/job-verify
Check whether a recruiter or job offer is a scam before you reply. Extracts entities (company, links, email, phone, wallets) from a pasted message and cross-checks company registration, domain age, look-alike/typosquat domains, phishing & malware blocklists, email deliverability, crypto-scam databases, and Internet Archive history — free OSINT, no API keys.
agentward-ai/agentward C MCP Server Maintained
agentward-ai/agentward
Permission control plane for AI agents. MCP proxy that enforces least-privilege YAML policies on every tool call, classifies sensitive data (PII/PHI), detects dangerous skill chains, and generates compliance audit trails. Supports stdio and HTTP proxy modes.
ajipurn/fida C MCP Server Maintained
ajipurn/fida
Local-first MCP gateway for coding agents that redacts detected secrets from file reads and command output before they reach model context.
MARUCIE/authbox C MCP Server Maintained
MARUCIE/authbox
Zero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access (scope, rate limits, time windows, step-up approval), 70+ API key providers, and hash-chain audit trail. Go + Next.js + TypeScript.
ScopeBlind/verify-mcp C MCP Server Maintained
ScopeBlind/verify-mcp
Offline verification of signed artifacts -- receipts, manifests, audit bundles. Ed25519 + JCS. No accounts, no API calls. Apache-2.0.
behrensd/mcp-firewall C MCP Server Maintained
behrensd/mcp-firewall
Deterministic security proxy (iptables for MCP) that intercepts tool calls, enforces YAML policies, scans for secret leakage, and logs everything. No AI, no cloud.
toan203/osv-ui C MCP Server Maintained
toan203/osv-ui
Visual CVE audit dashboard for npm, Python, Go, and Rust. Scan from Claude/Cursor, opens a browser UI for human review (human-in-the-loop), applies fixes with explicit confirmation. Powered by OSV.dev.
kent-tokyo/shohei D MCP Server Maintained
kent-tokyo/shohei
Rust infrastructure diagnostics MCP server for AI agents: DNS checks, TLS certificate chain inspection, email security, global DNS propagation, and DNS latency benchmarking.
rudraneel93/mcp-guardian D MCP Server Maintained
rudraneel93/mcp-guardian
Security and governance proxy for MCP infrastructure. Enforces YAML-configurable policies (blocklists, rate limits, token budgets), tracks real token costs via tiktoken, monitors server health with live JSON-RPC probes. Features include OAuth 2.1/OIDC with RBAC, web dashboard with Prometheus metrics, payload normalization against encoding bypasses, semantic shell AST analysis, mTLS zero-trust netw
inkog-io/inkog-mcp D MCP Server Maintained
inkog-io/inkog-mcp
AI agent security scanner. Audits MCP servers for vulnerabilities, detects prompt injection, infinite loops, token bombing, and missing human oversight across 20+ frameworks. Maps findings to EU AI Act, OWASP LLM Top 10.
coreyhines/opnsense-mcp D MCP Server Maintained
coreyhines/opnsense-mcp
OPNsense firewall operations via API. Query ARP, DHCP, firewall rules, logs, interfaces, system status, and packet capture via STDIO or SSE.
eliottreich/taskbounty-check D MCP Server Maintained
eliottreich/taskbounty-check
Local-only GitHub Actions and CI maintenance scanner for AI-built apps. Exposes `scan_repo`, `explain_finding`, and `generate_fix_plan` to MCP clients; reads only allowlisted workflow and update configuration, modifies nothing, makes no outbound requests by default, and has zero runtime dependencies. Run with `npx -y taskbounty-check@0.1.6 mcp`.
ppcvote/misp-mcp-server D MCP Server Maintained
ppcvote/misp-mcp-server
MISP (Malware Information Sharing Platform) MCP server with built-in prompt injection defense via [prompt-defense-audit](https://github.com/ppcvote/prompt-defense-audit). 8 read-only threat-intel tools (events, attributes, search, tags, feeds, galaxies). Scans every MISP response for adversarial seeding before returning to LLM. Tracks [MISP/MISP#10745](https://github.com/MISP/MISP/issues/10745). M
Chronolapse411/sicarius-guard D MCP Server Maintained
Chronolapse411/sicarius-guard
Solana token safety oracle for AI agents and trading bots. Byte-level SPL mint analysis, honeypot detection, freeze/mint authority checks, Birdeye market enrichment, and composite risk scoring. Deployed on Google Cloud Run.
co-browser/attestable-mcp-server D MCP Server Maintained
co-browser/attestable-mcp-server
An MCP server running inside a trusted execution environment (TEE) via Gramine, showcasing remote attestation using [RA-TLS](https://gramine.readthedocs.io/en/stable/attestation.html). This allows an MCP client to verify the server before conencting.
qinisolabs/qiniso D MCP Server Maintained
qinisolabs/qiniso
56 deterministic fact-checkers in one server (IBAN, VAT, VIN, GTIN/barcodes, national & tax IDs, crypto addresses, phone, dates, holidays) — verify the structured facts an agent emits against checksums and curated data.
vinaybhosle/agentstamp D MCP Server Maintained
vinaybhosle/agentstamp
Trust intelligence for AI agents — identity stamps, reputation scoring (0-100), registry, forensic audit trails, and A2A passports via x402 micropayments.
Perufitlife/web-exposure-mcp D MCP Server Maintained
Perufitlife/web-exposure-mcp
Points an AI agent at a live URL and confirms publicly-served secret files by fetching the bytes — exposed `.git`, `.env`, JS source maps, backup/SQL dumps, directory listing, and dotfiles. Zero dependencies, read-only.
chrbailey/promptspeak-mcp-server D MCP Server Maintained
chrbailey/promptspeak-mcp-server
Pre-execution governance for AI agents. Intercepts and validates every agent tool call through an 8-stage pipeline before execution — risk classification, behavioral drift detection, hold queue for dangerous operations, and complete audit trail. 45 tools, 658 tests.
rob925/mcp-shield D MCP Server Maintained
rob925/mcp-shield
Static security scanner and MCP server for MCP servers and AI agent tools. Detects secrets, shell execution, risky tool descriptions, environment access, and prompt-injection phrases. `mcp-shield-server`
BeBraveBeKind/mcpskills-server D MCP Server Maintained
BeBraveBeKind/mcpskills-server
Pre-install trust layer for MCP servers, AI skills, and npm packages. Scores any repo or package across 15 signals (incl. OSV/KEV/EPSS vulnerability intelligence) with safety scanning for prompt injection, credential theft, and supply-chain risk; the `auto_gate` tool returns a go/no-go install decision. Listed in the official MCP Registry as `io.mcpskills/server`. npm: `@mcpskillsio/server`. https
jimmyracheta/AI-Runtime-Guard D MCP Server Maintained
runtimeguard/runtime-guard
Runtime policy enforcement for AI agents - prevents accidental damage to your systems, unauthorized agent access and automates backup-before-write for any touched files.
jamjet-labs/jamjet-policy D MCP Server Maintained
jamjet-labs/jamjet-policy/packages/mcp-shim
MCP stdio interceptor (`@jamjet/mcp-shim`) that applies one YAML policy file (block / require_approval / audit / budget cap) to `tools/call` requests before they reach the real MCP server. The same policy also runs in Claude Code PreToolUse hooks (`@jamjet/claude-code-hook`), OpenAI Agents SDK guardrails (`@jamjet/openai-guardrail`), and JamJet's Python/TS SDKs — `jamjet audit show` tails every de
Skyrxin/sast-mcp-server D MCP Server Maintained
Skyrxin/sast-mcp-server
SAST/DAST server exposing 11 security scanners (Bandit, Semgrep, Trivy, CodeQL, Checkov, Gitleaks, OSV-Scanner, Grype, OWASP ZAP, and more) with closed-loop remediation (scan→patch→re-scan→verify), SARIF/SBOM/VEX export, compliance reporting, and CI integrations (GitHub Advanced Security, DefectDojo, Slack, Jira).
KOVY/agentforge-trust-mcp D MCP Server Maintained
KOVY/agentforge-trust-mcp
Query the AgentForge Trust Score (0-100 across five dimensions: security, code health, behavioral audit, community trust, EU compliance) for any MCP server before connecting. Exposes `check_trust`, `evaluate_policy`, `list_trusted`, and `recommend` tools. 3,600+ servers audited, free public API.
Bichev/agentradar-mcp D MCP Server Maintained
Bichev/agentradar-mcp
On-chain trust oracle for the ERC-8004 + x402 agent economy. 18 tools for verifying AI agents: 6-signal composite trust scoring (0-100), 272-wallet scam database, ERC-8004 identity lookup, EAS attestations on Base mainnet. x402-payable. Free `get_score` / `check_scam`. Live at [vvpro.ai](https://vvpro.ai) · npm [`@agentradar/mcp`](https://www.npmjs.com/package/@agentradar/mcp).
rev2ret/SecureAudit-MCP D MCP Server Maintained
rev2ret/SecureAudit-MCP
Model Context Protocol (MCP) server for static C/C++ memory-safety scanning and compiled PE/ELF binary protections auditing (ASLR, DEP/NX, SafeSEH, PIE) with secure templates remediation.
uchit/mcp-regulated-ai-compliance D MCP Server Maintained
uchit/mcp-regulated-ai-compliance
Regulated-industry AI compliance knowledge as MCP. 6 tools (lookup_control · classify_use_case · crosswalk · walk_playbook · get_anti_pattern · list_regulations), 53 resources, 5 prompts. Covers EU AI Act, APRA CPS 230/234, NIST AI RMF, ISO 42001, AU AI Safety Standard (DISR Aug 2024), OWASP LLM Top 10, SLSA, SSDF, OAIC APPs, GDPR, DORA + 17 more frameworks. 56 controls × 28 regulations × 261 tool
9hannahnine-jpg/arc-gate-mcp D MCP Server Maintained
9hannahnine-jpg/arc-gate-mcp
Runtime governance for MCP tool calls. Blocks prompt injection and capability abuse before tool results reach your agent.
forgemeshlabs/x402-notary-mcp D MCP Server Maintained
forgemeshlabs/x402-notary-mcp
Cryptographic receipts for AI outputs: notarize any model inference with a signed Ed25519 attestation, sha256 content hash, and Merkle chain-anchor on Base or Solana. $0.001 per call via x402 USDC micropayments; verification is free and needs no wallet. Notarizes the hash, never your prompts. `npx -y @forgemeshlabs/x402-notary-mcp`
node-man/dechonet-mcp D MCP Server Maintained
node-man/dechonet-mcp
Domain security reconnaissance for AI agents. 13 tools — DNS + DNSSEC, SSL/TLS chain & grade, HTTP security headers, SPF/DKIM/DMARC email auth, TCP port scan, ASN, RDAP/WHOIS — plus a one-shot `security_scan` returning a 0-100 Health Score (A–F). Free, no API key. `npx -y dechonet-mcp`
bluetieroperations-create/blackwall-mcp F MCP Server Maintained
bluetieroperations-create/blackwall-mcp
Pre-action risk gate for AI agents. One `forecast` tool the agent calls before any irreversible action (send money, run SQL, delete data); returns a risk score (0–100), reversibility class, named red flags from 28 failure modes, and a gate: proceed / confirm / human-required.
hernaninverso/eleion-scanner-mcp F MCP Server Maintained
hernaninverso/eleion-scanner-mcp
Register/verify your domains, queue security scans (headers, TLS, DNS, ports, CVEs + AI-specific checks) and read findings, for AI agents. Install with `npx -y eleion-scanner-mcp`.