Security MCP Servers
303 security MCP servers for Claude Code and AI agents, ranked by real installs from npm, PyPI and skills.sh. mcp-scanner leads with 124k installs a month.
#Type
- 1mcp-scannerA tool to scan MCP servers and tools for security findingsJul 2026
- 2hol-guardOpen-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs.Jul 2026
- 3agent-scanAgent supply chain security scanner.Jul 2026
- 4falcon-mcpConnects AI agents with CrowdStrike Falcon for security analysis and automation.Jul 2026
- 5pythonPlug-and-play auth for Python MCP servers.Aug 2025
- 6auth0-mcp-serverAuth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural languageJul 2026
- 7ida-pro-mcpVibe reversing with IDA ProJul 2026
- 8agent-bomOpen security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure.Jul 2026
- 9remnux-mcp-serverMCP server for using the REMnux malware analysis toolkit via AI assistantsJul 2026
- 10mcp-shell-serverMCP Shell Server - Execute shell commands via MCP protocolJul 2026
- 11medusaAI-first security scanner - 79 analyzers, 40,000+ detection patterns for AI/ML, LLM agents, MCP & RAG. Zero-setup, false-positive-hardened. Scan any repo with medusa scan --git user/repoJul 2026
- 12pentest-aiAutonomous AI pentesting with 200+ tools, exploit chaining, PoC validation, and credential-safe MCP serverJul 2026
- 13zscaler-mcp-serverZscaler Integration MCP Server is a Model Context Protocol (MCP) server designed for managing Several Zscaler Products using Large Language Models (LLMs).Jul 2026
- 14iam-policy-autopilotIAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves.Jul 2026
- 15infisical-mcp-serverOfficial Infisical MCP ServerApr 2026
- 16openosintAI-powered OSINT agent, MCP server, and CLI. Interactive REPL + 18 tools. Anthropic Claude or local Ollama. For authorized security research use only.Jul 2026
- 17whois-mcpMCP to lookup whois informationMar 2025
- 18agent-security-scanner-mcpnpm audit for AI agents and MCP servers: scan code, MCP tools, prompts, and hallucinated packages before agents trust them.Jul 2026
- 19mcp-serverBitwarden MCP ServerJul 2026
- 20mnemaA tamper-evident, local-first audit trail for AI-agent work — an MCP server giving Claude Code, Cursor and other agents typed tools behind workflow gates, with every action recorded in a SHA-256 hash-chained log.Jul 2026
- 21osint-mcp-serverOSINT intelligence MCP server — Shodan, VirusTotal, SecurityTrails, Censys, DNS, WHOIS, crt.sh, Wayback, BGPMar 2026
- 22attestralContinuous, audit-ready security design review for cloud and agentic systemsJul 2026
- 23warden-mcpVaultwarden/Bitwarden MCP server backed by Bitwarden CLI (bw).Jul 2026
- 24openclaw-mcpMCP server bridging Claude.ai/Desktop with self-hosted OpenClaw via OAuth 2.1.Jul 2026
- 25scalekit-mcp-serverModel Context Protocol server for Scalekit - manage organizations, users, connections via AI assistantsJul 2026
- 26security-detections-mcpAggregates security detection rules from Sigma, Splunk ESCU, Elastic, and KQL into a unified searchable SQLite database with MITRE ATT&CK mappings, CVE tracking, coverage analysis, and detection engineering intelligence for security analysts and threat hunters.Jun 2026
- 27okta-mcp-serverThe Okta MCP Server is a groundbreaking tool built by the team at Fctr that enables AI models to interact directly with your Okta environment using the Model Context Protocol (MCP).Apr 2026
- 28chiasmusNeurosymbolic verification engine - MCP server for formal reasoning with Z3 and SWI-Prolog (WASM)Jun 2026
- 29darknet-mcp-serverDark web intelligence MCP server — HIBP, ThreatFox, ransomware tracking, Tor .onion access, blockchain intel, exploit search, stealer logs, malware analysisJul 2026
- 30mythos-agentOpen-source AI security agent: SAST, DAST, and policy-as-code over MCP.May 2026
- 31aegisAuto-instrument AI agent frameworks with operational governance. Injection blocking, PII masking, action policy, audit trail. Includes governance API server and transparent MCP proxy.May 2026
- 32mcpsecSecurity scanner for MCP (Model Context Protocol) servers - pentest your AI agent's tool connectionsJul 2026
- 33kopplaA Model-Context-Protocol (MCP) Server for Active DirectoryApr 2025
- 34zettelforgeAgentic memory for cyber threat intelligence. STIX graphs, actor aliasing, offline RAG, Sigma/YARA.Jul 2026
- 35pyraspPython RASPNov 2025
- 36reverse-engineering-assistantReVa - AI-powered Reverse Engineering Assistant for Ghidra with MCP server and Claude CLI integrationJul 2026
- 37mcp-security-auditAudit your package.json dependenciesJul 2025
- 38mcp-eu-ai-actEU AI Act + GDPR compliance scanner. One call, no arguments, 10 seconds. 22 AI frameworks detected.Jun 2026
- 39defectdojo-mcpDefectDojo MCP server for integrating with DefectDojo vulnerability management systemApr 2025
- 40cve-mcp-serverProduction-grade MCP server with security intelligence tools across 20+ APIs, plus a v0.2.0 one-call triage_cve orchestrator (NVD/EPSS/KEV/PoC fan-out with KEV hard-override scoring)Jul 2026
- 41mcp-fenceLocal-first security scanner, MCP protocol inspector, dynamic fuzzer, sandbox runner, and report generator for Model Context Protocol servers.Jul 2026
- 42reversecore_mcpSecurity-first MCP server for reverse engineering, malware analysis, forensics, and SAST.Jul 2026
- 43keycloak-model-context-protocolMCP server for Keycloak administrationFeb 2025
- 44schemabrainThe trust and intelligence layer between AI agents and your database.Jul 2026
- 45fastmcp-threatintelAI-Powered Threat Intelligence MCP toolJul 2025
- 46aynopsA Model Context Protocol server that gives AI Clients real-time cybersecurity reconnaissance capabilities — WHOIS, DNS enumeration, port scanning, SSL inspection, CVE lookup, IP reputation, ASN lookup and more.Jul 2026
- 47enigma-python-mcpMCP server for historically accurate Enigma machine emulatorsMay 2026
- 48zebbern-kali-mcpMCP server for Kali Linux security tools — connects AI agents to 145+ pentest tools via DockerApr 2026
- 49mcp-vulnerability-scannerAn MCP server for scanning vulnerabilities on IP addressesSep 2025
- 50shodan-mcpMCP server for AI-powered internet intelligence with Shodan. IP reconnaissance, device search, and CVE enrichment for AI agents.Feb 2026
- 51evil-mcp-serverMCP server that simulates malicious behaviors for security testingJul 2026
- 52fastmcp-credentialsCredential injection middleware for FastMCP servers — keeps secrets out of the LLMJun 2026
- 53entraid-mcp-serverMCP server for interacting with EntraID through Microsoft Graph API.May 2025
- 54sysplantSysPlant - Your syscall factoryJul 2026
- 55sponsioRuntime contract enforcement for LLM agent systemsJul 2026
- 56agentwallRun AI agents safely on your local machine — policy-enforcing MCP proxyMay 2026
- 57tenguTengu — Pentesting MCP Server: intelligent abstraction layer over security toolsJun 2026
- 58deterministic-agent-control-protocolAgent Governance Gateway — bounded, auditable, session-aware control for AI agents with MCP proxy, shell proxy, and HTTP APIFeb 2026
- 59mcp-server-for-hashingAn MCP Server offering tools to calculate MD5 and SHA-256 cryptographic hashes for text data, designed for use with LLMs.Apr 2025
- 60mcp-defenderMCP DefenderJun 2026
- 61get-mcp-keysA lightweight utility that securely loads API keys for Cursor MCP servers from your home directory, preventing accidental exposure of secrets in repositories. Keep your credentials safe while maintaining seamless integration with AI coding assistants.Mar 2025
- 62mcp-guardMCP middleware that blocks dangerous AI agent actions using a simple YAML configJul 2026
- 63skillspectorSkillSpector: Security scanner for AI agent skills (Claude Code, Cursor, and similar). Scans skills for vulnerabilities, malicious patterns, and security risks before installation.Jul 2026
- 64hexstrike-aiHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research.Apr 2026
- 65cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.Jul 2026
- 66pentestagentAI penetration testingJul 2026
- 67skill-scannerSecurity scanner for Agent Skills packages - Detects prompt injection, data exfiltration, and malicious codeJul 2026
- 68vulnclawAI-powered penetration testing CLI tool for cybersecurity professionalsJul 2026
- 69burp-ai-agentBurp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and moreJul 2026
- 70agentAgentic offensive-security CLI for security engineers, professional penetration testers, and bug hunters.Jun 2026
- 71mcp-serverMCP Server for BurpJun 2026
- 72aireconAIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI.Jun 2026
- 73mcp-kali-serverMCP configuration to connect AI agent to a Linux machine.Mar 2026
- 74mcp-security-hubA growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.Apr 2026
- 75fofamapFofaMap v2.0 是一款基于 Python3 开发的全网首个 AI 驱动红队资产测绘智能体。在延续原有 FOFA 数据采集、存活检测、统计聚合、图标 Hash 及批量查询等核心功能的基础上，2.0 版本原生支持 MCP 协议，可无缝接入 Cursor、Claude 等 AI 平台。其核心内置了 AI 自我反思机制，能根据查询结果自动调优语法，并智能联动 Nuclei 推荐精准扫描策略，实现从“被动采集”到“主动智能决策”的红队作业进化。Apr 2026
- 76ironcurtainSecure agent runtime with trusted process mediationJul 2026
- 77agentguardGoPlus AgentGuard — Security guard for AI agents. Blocks dangerous commands, prevents data leaks, protects secrets. 20 detection rules, runtime action evaluation, trust registry.Jun 2026
- 78nexusGovern & Secure your AIMar 2026
- 79bloodhound-mcp-aiBloodHound-MCP-AI is integration that connects BloodHound with AI through Model Context Protocol, allowing security professionals to analyze Active Directory attack paths using natural language instead of complex Cypher queries.Jun 2025
- 80aegisRuntime policy enforcement for AI agents. Cryptographic audit trail, human-in-the-loop approvals, kill switch. Zero code changes.Jul 2026
- 81h1-brainMCP server that connects AI assistants to HackerOne for bug bounty huntingApr 2026
- 82nova-proximityNova-Proximity is a MCP and Agent Skills security scanner powered with NOVAMar 2026
- 83autoredteam-orchestratorLocal-first MCP-native security automation workbench for authorized testingJul 2026
- 84mcp-server-wazuhMCP Server for Wazuh SIEMDec 2025
- 85onionclawProvide AI agents with full Tor network access and dark web data through a zero-config OpenClaw skill or standalone tool.Jul 2026
- 86node9-proxyThe Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.Jul 2026
- 87wazuh-mcp-serverProduction-grade MCP remote server for Wazuh SIEM integration with SSE transportJun 2026
- 88permit0Stop AI agents from doing things they shouldn't. The action authorization layer — pre-execution, deterministic, policies included. Drop in. Day one.Jun 2026
- 89allama🔥🔥🔥 AI security automation platform. Build visual workflows, deploy autonomous agents, and automate threat detection and response. 80+ integrations with SIEM, EDR, ticketing, and cloud tools. Self-hosted SOAR alternative.Feb 2026
- 90mcp-observatoryMCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.Jul 2026
- 91wireshark-mcpA production-grade Model Context Protocol (MCP) server for WiresharkJul 2026
- 92burpmcp-ultraAI-powered MCP server for Burp Suite Professional — 149 tools across proxy, scanner, inline fuzzer, race conditions, guided injection, JWT/IDOR attacks, recon & OOB, with a real-time dashboard and hardened localhost security. Drive Burp from Claude Code or any MCP client.Jul 2026
- 93mcp-auditDiscover and audit MCP (Model Context Protocol) configurations across your organizationMay 2026
- 94ai_osint🤖 Curated AI OSINT resources — Google dorks, Shodan queries, GitHub dorks, and techniques to discover exposed LLM endpoints, leaked AI API keys, misconfigured vector databases, and unprotected AI agentsJun 2026
- 95mcp-shodanMCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.Mar 2026
- 96code-pathfinderCode intelligence MCP server: call graphs, type inference, and symbol search for Python/Go.Jul 2026
- 97pentest-mcpProfessional pentest MCP server with stdio + Streamable HTTP transports, bundled MCP Inspector launcher, bearer auth, SoW-aware reporting, and modern tooling across sniffing/finding/bruteforce/cracking/priv-esc/extraction workflows.Mar 2026
- 98mcp-virustotalMCP server for querying VirusTotal API with comprehensive security analysis tools.May 2026
- 99shellwardAI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.Jun 2026
- 100doberman-coreAdaptive authorization layer for coding agents (open core)Jul 2026
