#security

Lamda

firerpa

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.

Desktop Commander

wonderwhy-er

This is MCP server for Claude that gives it terminal control, file system search and diff file editing capabilities

MCP Containers

metorial

Connect any AI model to 1200+ integrations (MCP, CLI, API)

DevDocs by CyberAGI 🚀

cyberagiinc

Completely free, private, UI based Tech Documentation MCP server. Designed for coders and software developers in mind. Easily integrate into Cursor, Windsurf, Cline, Roo Code, Claude Desktop App

ToolHive - making MCP servers easy and secure

stacklok

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

ToolHive - making MCP servers easy and secure

StacklokLabs

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

Agentic Radar

splx-ai

A security scanner for your LLM agentic workflows

MCP Kali Server

Wh0am123

MCP configuration to connect AI agent to a Linux machine.

😎 Contributing

Puliczek

🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️

SonarQube

SonarSource

Official SonarQube MCP Server for code quality and security in AI agents

awsome-kali-MCPServers

ccq1

awsome kali MCPServers is a set of MCP servers tailored for Kali Linux

Minibridge

acuvity

Make your MCP servers secure and production ready

Security Audit Tool

qianniuspace

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

BurpMCP

swgee

Burp Suite Extension with MCP Server to enhance manual application security testing

MCP Wireshark

khuynh22

An MCP server that integrates Wireshark/tshark with AI tools and IDEs. Capture live traffic, parse .pcap files, apply display filters, follow streams, and export JSON - all via Claude Desktop, VS Code, or CLI. Cross‑platform, typed, tested, and pip‑installable.

Trivy MCP Server Plugin

aquasecurity

Trivy plugin for starting an MCP server

Dynamic Shell Server

codelion

Dynamic Shell Command MCP Server

Asterisk MCP Server

getAsterisk

Asterisk Model Context Protocol (MCP) server.

Speclock

sgroy10

AI Constraint Engine — enforces CLAUDE.md, .cursorrules, AGENTS.md rules as laws. 51 MCP tools, 991 tests. Official MCP Registry. npx speclock protect

Security Copilot and Sentinel MCP Server

jguimera

MCP Server that integrates with Security Copilot, Sentinel and other tools (in the future). It enhance the process of developing , testing and uploading Security Copilot artifacts.

GUARDRAIL: Security Framework for Large Language Model Applications

nshkrdotcom

GUARDRAIL - MCP Security - Gateway for Unified Access, Resource Delegation, and Risk-Attenuating Information Limits

SchemaPin 🧷

ThirdKeyAI

The SchemaPin protocol for cryptographically signing and verifying AI agent tool schemas to prevent supply-chain attacks.

MCP Server - VMS Integration

jyjune

MCP server for controlling and accessing a video surveillance system

Code Reviewer Fixer Agent

gokborayilmaz

This AI agent analyzes code repositories, detects potential security vulnerabilities, reviews code quality, and suggests fixes based on Sentry error logs using Sentry and GitHub MCP servers!

ZeroPath MCP Server

ZeroPathAI

Open-source MCP server for querying ZeroPath security issues, patches, and scans using Claude, Cursor, Windsurf, or any AI assistant.

Mcp Spine

Donnyb369

Context Minifier & State Guard — Local-first MCP middleware proxy

Table of Contents

aygp-dr

A secure, isolated environment for exploring Python development with Model Context Protocol (MCP) and Language Server Protocol (LSP)

mcp-security-sandbox

SirAppSec

MCP Security Playground - Hack with MCP Servers, MCP Clients. Try out different vulnerabilities and abuse LLMs and agents in a UI friendly experimentation lab

Apimesh

mbeato

APIMesh — 23 pay-per-call web analysis APIs + 16-tool MCP server with autonomous API generation. Security audits, SEO, tech stack detection. x402 + Stripe MPP payments.

Skillaudit

megamind-0x

🛡️ Security scanner for AI agent skills — detect credential stealers, exfiltration, and malicious patterns before install

ClamAV MCP

a2amarket

ClamAV MCP Server to scan files for viruses

Shield MCP

modelShield

A shield for logging, deep debug and sanitization for MCP servers at development stage

mcpsshclient

jonnadul

An Agentic MCP server sshclient

MCP Password Generator

acidkeyxyz

A Model Context Protocol (MCP) server that generates random passwords with different character sets.

BinoculoMCP

girorme

Banner grabbing with LLM (MCP Server)

Agentvalet

AgentValet

IGA for AI agents. IETF AIMS-compliant identity, credential governance & MCP proxy. SPIFFE · RFC 7591 · AuthZEN · CIBA. npx @agentvalet/register

Arcjet - MCP Server

arcjet

Arcjet MCP server. Help your AI agents implement bot detection, rate limiting, email validation, attack protection, data redaction.

Safe MCP Manager

openshieldai

SafeMCP is an MCP tooling manager with simplicity and safety built in for your AI tools and Agents.

Governance middleware for AI agents — permission gates, human-in-the-loop approvals, compliance scanning across 8 frameworks, and hash-linked audit ledger. Hosted SSE endpoint, no self-hosting required.

Obfuscate Python & reverse-map stack traces from your agent. AST-based, no phone-home. PyArmor alt.

Gateplex

GateplexAI

Governance firewall for autonomous AI agents. Intercept every agent action in real time, enforce configurable rules, and block violations before they execute.

Open-source security audit framework covering all 10 OWASP Agentic AI threat categories (ASI01-ASI10). Scan multi-agent systems for prompt injection, data exfiltration, broken access control, and 7 more categories. Returns risk scores (0-100) with remediation priorities. Free tie

Marchward

marchward

Marchward is an Apache-2.0 open-source runtime authority for AI agents. It routes an agent's tool calls through one control point: credential mediation (the agent holds a single Marchward key and never your real downstream credentials), an inference spend cap enforced before the

Trust

Jaden-JJH

Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with pr

TraceHunt is an MCP server (and CLI) for OSINT username reconnaissance across 480+ platforms. Tools: hunt_username() returns where a handle exists, and footprint_score() returns a 0-100 digital-footprint score. Python, MIT, runs locally, no API keys, privacy-first.

MCP server giving AI agents full SSH access with secret-safe environment variable injection. Supports persistent sessions, structured command execution, SFTP file transfer, port forwarding, and automatic output redaction that prevents secrets from reaching the LLM.

On-chain Solana token safety — cabal, bundle, rug-deployer & live-dump detection, one Exit-Liquidity Risk verdict before you buy.

AI-native HTTP security testing toolkit (MCP server): 17 HTTP tools giving an AI agent low-level control over HTTP/1.1 and HTTP/2 (raw framing, connection pinning, intruder, race, OOB, chains) on its own Go engine. Free tier; docs at rqwstr.com.

MCP server security scanner that detects vulnerability patterns in MCP server configurations and outputs SARIF reports. Scans for prompt injection risks, tool poisoning, excessive permissions, and other security issues in Model Context Protocol servers.

Domain security reconnaissance for AI agents — 13 tools (DNS, SSL, HTTP headers, email auth, port scan, ASN, RDAP) with a 0–100 Health Score. Free, no API key

Snyk

snyk

Enhance security posture by embedding Snyk vulnerability scanning directly into agentic workflows.

MySSL MCP Server

trustasia-com

The MySSL MCP Server

Mcp Semgrep Scanner

archimedes-market

Curated by Archimedes Market. Static security analysis exposed as MCP tools. OWASP top 10, secrets detection, custom rule packs. Baseline scanning focuses on newly-introduced findings. Built for production-grade security review. → archimedes.market/assets/21c4a8ab-80dc-4a69-8444-

Run SSL/TLS scans, issue free Let's Encrypt certificates (private key stays local), and monitor certificate expiry from inside Claude Code or Cowork - through a single MCP server, no account needed for scans and issuance.

QuantumScan PQC Scanner

gaiabio12-design

Post-quantum cryptography (PQC) security scanner for blockchain and AI agents. Detects quantum-vulnerable algorithms (ECDSA, RSA, DH) and provides NIST FIPS 203/204/205 migration paths. Free, open-source, privacy-first. Scan any GitHub repository or smart contract via MCP tools:

Audits a GitHub repository's stargazers for signs of fake-star injection across five deterministic axes (burst, suffix-farm, sequential-id cluster, same-second cluster, inter-star gap regularity) over two windows (oldest 100 + newest 30), plus extended signals. Returns LOW / MEDI

Mlab - IOC & Threat Intelligence

mlab-sh

Threat intelligence MCP server for SOC analysts, DFIR and security researchers. Scan and enrich IOCs directly from Claude, Cursor or any MCP client: IP addresses (IPv4/IPv6), domains, file hashes and blockchain addresses. Search CVEs by keyword, vendor or product, retrieve full C