60 # security MCP Servers & Clients

Lamda

firerpa

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.

Desktop Commander

wonderwhy-er

This is MCP server for Claude that gives it terminal control, file system search and diff file editing capabilities

MCP Containers

metorial

Connect any AI model to 1200+ integrations (MCP, CLI, API)

DevDocs by CyberAGI 🚀

cyberagiinc

Completely free, private, UI based Tech Documentation MCP server. Designed for coders and software developers in mind. Easily integrate into Cursor, Windsurf, Cline, Roo Code, Claude Desktop App

ToolHive - making MCP servers easy and secure

StacklokLabs

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

ToolHive - making MCP servers easy and secure

stacklok

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

Docker's official MCP Gateway and docker mcp CLI plugin: run Docker MCP Catalog servers as isolated containers behind one endpoint for any MCP client.

Agentic Radar

splx-ai

A security scanner for your LLM agentic workflows

MCP Kali Server

Wh0am123

MCP configuration to connect AI agent to a Linux machine.

SonarQube

SonarSource

Official SonarQube MCP Server for code quality and security in AI agents

awsome-kali-MCPServers

ccq1

awsome kali MCPServers is a set of MCP servers tailored for Kali Linux

Minibridge

acuvity

Make your MCP servers secure and production ready

Security Audit Tool

qianniuspace

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

BurpMCP

swgee

Burp Suite Extension with MCP Server to enhance manual application security testing

MCP Wireshark

khuynh22

An MCP server that integrates Wireshark/tshark with AI tools and IDEs. Capture live traffic, parse .pcap files, apply display filters, follow streams, and export JSON - all via Claude Desktop, VS Code, or CLI. Cross‑platform, typed, tested, and pip‑installable.

Trivy MCP Server Plugin

aquasecurity

Trivy plugin for starting an MCP server

Dynamic Shell Server

codelion

Dynamic Shell Command MCP Server

Asterisk MCP Server

getAsterisk

Asterisk Model Context Protocol (MCP) server.

Speclock

sgroy10

AI Constraint Engine — enforces CLAUDE.md, .cursorrules, AGENTS.md rules as laws. 51 MCP tools, 991 tests. Official MCP Registry. npx speclock protect

Security Copilot and Sentinel MCP Server

jguimera

MCP Server that integrates with Security Copilot, Sentinel and other tools (in the future). It enhance the process of developing , testing and uploading Security Copilot artifacts.

GUARDRAIL: Security Framework for Large Language Model Applications

nshkrdotcom

GUARDRAIL - MCP Security - Gateway for Unified Access, Resource Delegation, and Risk-Attenuating Information Limits

SchemaPin 🧷

ThirdKeyAI

The SchemaPin protocol for cryptographically signing and verifying AI agent tool schemas to prevent supply-chain attacks.

MCP Server - VMS Integration

jyjune

MCP server for controlling and accessing a video surveillance system

Code Reviewer Fixer Agent

gokborayilmaz

This AI agent analyzes code repositories, detects potential security vulnerabilities, reviews code quality, and suggests fixes based on Sentry error logs using Sentry and GitHub MCP servers!

ZeroPath MCP Server

ZeroPathAI

Open-source MCP server for querying ZeroPath security issues, patches, and scans using Claude, Cursor, Windsurf, or any AI assistant.

Mcp Spine

Donnyb369

Context Minifier & State Guard — Local-first MCP middleware proxy

Apimesh

mbeato

APIMesh — 23 pay-per-call web analysis APIs + 16-tool MCP server with autonomous API generation. Security audits, SEO, tech stack detection. x402 + Stripe MPP payments.

Table of Contents

aygp-dr

A secure, isolated environment for exploring Python development with Model Context Protocol (MCP) and Language Server Protocol (LSP)

mcp-security-sandbox

SirAppSec

MCP Security Playground - Hack with MCP Servers, MCP Clients. Try out different vulnerabilities and abuse LLMs and agents in a UI friendly experimentation lab

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

Skillaudit

megamind-0x

🛡️ Security scanner for AI agent skills — detect credential stealers, exfiltration, and malicious patterns before install

Shield MCP

modelShield

A shield for logging, deep debug and sanitization for MCP servers at development stage

q-ring

I4cTime

Quantum-inspired keyring for AI coding agents. Secure secrets with superposition, entanglement, tunneling, and teleportation — CLI + 44 MCP tools.

ClamAV MCP

a2amarket

ClamAV MCP Server to scan files for viruses

offprompt

offprompt

MCP server that lets Claude Code, Cursor or Codex ask you for API keys on a local page and write them to .env. The agent only ever sees key names.

MCP Password Generator

acidkeyxyz

A Model Context Protocol (MCP) server that generates random passwords with different character sets.

mcpsshclient

jonnadul

An Agentic MCP server sshclient

Agentvalet

AgentValet

IGA for AI agents. IETF AIMS-compliant identity, credential governance & MCP proxy. SPIFFE · RFC 7591 · AuthZEN · CIBA. npx @agentvalet/register

BinoculoMCP

girorme

Banner grabbing with LLM (MCP Server)

Arcjet - MCP Server

arcjet

Arcjet MCP server. Help your AI agents implement bot detection, rate limiting, email validation, attack protection, data redaction.

MCP DB Wizard

srmadscience

Oracle MCP server with no run-sql tool: It generates tools for each of the PL/SQL procedures, tables and approved SQL you choose. The server doesn't expose a SQL prompt, and can't reveal how it's connected to Oracle.

TruVerifAI Panel-review

TruVerifAI

TruVerifAI's Panel Review is the guardian agent for AI's highest-stakes coding decisions: four frontier models argue over an AI coding agent's riskiest designs, diffs, and commits before they execute, with local review g

Nizh

Nizh

Compliance frameworks delivered to AI agents. Nizh gives your agent read access to your organization's compliance program — SOC 2, ISO 27001, CMMC 2.0, NIST, and more — as MCP tools, so it can check posture, read a contr

Askew X402

rubix1138

MCP wrapper for Askew's x402 endpoints — 8 tools (3 free, 5 paid in USDC on Base): live DeFi yield comparison, SOL/ATOM staking routing, agent-economy research search, Guardian security threat intel, and a combined strategic feed.

prodready

Innovate d.o.o. (ProdReady)

Free enterprise-grade due diligence for the app you built, run by your own coding agent: 118 read-only checks plus an 18-dimension review, scored 1-5 with file-and-line evidence and a report page behind an access code. N

Provides a bridge for scripts and AI agents to interact with a self-hosted Vaultwarden instance.

Compliance & verification toolkit for AI agents. Screen counterparties against real OFAC sanctions data (782 crypto wallets + 19,086 names + 16 embargoed jurisdictions), score transaction fraud risk before payment, Know-Your-Agent trust scoring. MCP + HTTP + CLI. Free, no API key

MCP server that scans Next.js projects and returns a compact summary of routes, API endpoints, database schema, and security issues.

Find every leaked secret on your machine. Scans .env files, shell history, and config directories for API keys, tokens, and credentials. 35+ patterns including AWS, Stripe, GitHub, OpenAI, and more. Everything runs locally. Zero network calls.

Local guardrail proxy for AI coding agents. Wraps any MCP server (stdio or Streamable HTTP) and blocks destructive tool calls — DROP TABLE, rm -rf, force-push — before they execute. TOFU catalog pinning against rug pulls, plus tool-poisoning and result-injection scanning. Single

15 anti-Orwellian defense tools for AI agents. Analyze doublespeak, track surveillance funding, assess whistleblower risks, verify media provenance, search threat registries, map country risk, and more. Fully open, no API key required. CC-BY-4.0.

Full-featured MCP server for Apache Superset with 135+ tools for dashboards, charts, datasets, SQL Lab, security, and more

Trust

Jaden-JJH

Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with pr

Minibridge

verifiableb

Make your MPC servers secure and production ready acuvity, mcp, mcp-gateway, mcp-server, modelcontextprotocol, mtls, security

Project Scope

adityasasidhar

A production-ready MCP server that gives AI agents deep codebase understanding. Features AST-based semantic analysis, context-aware security scanning (zero false positives on source code), safe refactoring tools with previews, and comprehensive Git operations.

RowAttest

RowAttest

Run an eight-stage isolation test against a staging Supabase environment and receive a signed attestation.

Mcp Semgrep Scanner

archimedes-market

Curated by Archimedes Market. Static security analysis exposed as MCP tools. OWASP top 10, secrets detection, custom rule packs. Baseline scanning focuses on newly-introduced findings. Built for production-grade security review. → archimedes.market/assets/21c4a8ab-80dc-4a69-8444-