zinja-coder/apktool-mcp-server B MCP Server Maintained
zinja-coder/apktool-mcp-server
APKTool MCP Server is a MCP server for the Apk Tool to provide automation in reverse engineering of Android APKs.
Home › Categories › Security
Security
190 MCP servers and agent skills in the Security category, ranked by quality score.
Filters (2 active)
Category
Finance & Fintech27Developer Tools17Search & Data Extraction16Security13Knowledge & Memory12Databases9Other Tools and Integrations8Marketing7Multimedia Process7Data Platforms7Communication5Monitoring5Development and Testing5Biology, Medicine and Bioinformatics5Research5Data Science Tools5Specialized Domains5Browser Automation4Coding Agents4Home Automation4Aggregators3Workplace & Productivity3Art & Culture3Location Services3Results
zboralski/ida-headless-mcp B MCP Server Maintained
zboralski/ida-headless-mcp
Headless IDA Pro binary analysis via MCP. Multi-session concurrency with Go orchestration and Python workers. Supports Il2CppDumper and Blutter metadata import for Unity and Flutter reverse engineering.
Chimera-Protocol/csl-core C MCP Server Maintained
Chimera-Protocol/csl-core
Deterministic AI safety policy engine with Z3 formal verification. Write, verify, and enforce machine-verifiable constraints for AI agents via MCP.
loglux/authmcp-gateway C MCP Server Maintained
loglux/authmcp-gateway
Auth proxy for MCP servers: OAuth2 + DCR, JWT, RBAC, rate limiting, multi-server aggregation, and monitoring dashboard.
rafapra3008/cervellaswarm C MCP Server Maintained
rafapra3008/cervellaswarm/packages/mcp-server
Verify AI agent communication protocols using session types. Formal specification with Lean 4 proofs, linter, formatter, and LSP. Catches deadlocks and role violations before deployment.
yessGlory17/job-verify C MCP Server Maintained
yessGlory17/job-verify
Check whether a recruiter or job offer is a scam before you reply. Extracts entities (company, links, email, phone, wallets) from a pasted message and cross-checks company registration, domain age, look-alike/typosquat domains, phishing & malware blocklists, email deliverability, crypto-scam databases, and Internet Archive history — free OSINT, no API keys.
agentward-ai/agentward C MCP Server Maintained
agentward-ai/agentward
Permission control plane for AI agents. MCP proxy that enforces least-privilege YAML policies on every tool call, classifies sensitive data (PII/PHI), detects dangerous skill chains, and generates compliance audit trails. Supports stdio and HTTP proxy modes.
coreyhines/opnsense-mcp D MCP Server Maintained
coreyhines/opnsense-mcp
OPNsense firewall operations via API. Query ARP, DHCP, firewall rules, logs, interfaces, system status, and packet capture via STDIO or SSE.
co-browser/attestable-mcp-server D MCP Server Maintained
co-browser/attestable-mcp-server
An MCP server running inside a trusted execution environment (TEE) via Gramine, showcasing remote attestation using [RA-TLS](https://gramine.readthedocs.io/en/stable/attestation.html). This allows an MCP client to verify the server before conencting.
rob925/mcp-shield D MCP Server Maintained
rob925/mcp-shield
Static security scanner and MCP server for MCP servers and AI agent tools. Detects secrets, shell execution, risky tool descriptions, environment access, and prompt-injection phrases. `mcp-shield-server`
jimmyracheta/AI-Runtime-Guard D MCP Server Maintained
runtimeguard/runtime-guard
Runtime policy enforcement for AI agents - prevents accidental damage to your systems, unauthorized agent access and automates backup-before-write for any touched files.
Skyrxin/sast-mcp-server D MCP Server Maintained
Skyrxin/sast-mcp-server
SAST/DAST server exposing 11 security scanners (Bandit, Semgrep, Trivy, CodeQL, Checkov, Gitleaks, OSV-Scanner, Grype, OWASP ZAP, and more) with closed-loop remediation (scan→patch→re-scan→verify), SARIF/SBOM/VEX export, compliance reporting, and CI integrations (GitHub Advanced Security, DefectDojo, Slack, Jira).
9hannahnine-jpg/arc-gate-mcp D MCP Server Maintained
9hannahnine-jpg/arc-gate-mcp
Runtime governance for MCP tool calls. Blocks prompt injection and capability abuse before tool results reach your agent.