Best Security MCP Servers

WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI

Official MCP server for IP geolocation, security, ASN, abuse, timezone, astronomy, and user-agent.

Production-ready MCP server for Redmine with security, pagination, and enterprise features

1,451 security controls across 261 frameworks with bidirectional mapping

Security proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement

MCP server for DNS lookups, reverse DNS, WHOIS, and domain checks — zero auth, zero config

Atlas is a YAML-defined semantic layer for analytics — authored by humans, consumed by AI agents.

MCP server for authoring, analyzing, debugging, and running Snowfakery recipes

eQSL.cc MCP server. Inbox download, QSO verification, Authenticity Guaranteed status.

Ybe Check – security and compliance orchestrator for AI-generated repositories.

MCP security proxy - detects and blocks 40+ MCP attack classes. Zero config.

Local encryption and project setup plugin for Copass. Keys never leave your machine.

Moltbook MCP server: post, comment, upvote, DMs, communities. API key auth.

Run sudo commands with a Fernet-encrypted password bound to machine-id + user.

Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.

Domain security scanning for AI agents. A-F grades, 8 checks, fix snippets.

MCP server for VibeScan — scan projects for leaked secrets and security issues

This package is intended for demonstration only. Maintained by JFrog Security.

Secure grip for your agent's secrets - security-hardened MCP gateway with proxy token architecture

Minimal MCP server for Ghost Security API - compatible with all MCP clients

Retirement planning for Canada & US. CPP/OAS, Social Security, RRSP/TFSA, 401k/IRA, Monte Carlo.

AI Agent Guardrails MCP server - security layer

Base package for European e-invoicing MCP servers with shared models, XML utils, and OAuth2 client.

Universities MCP — Hipolabs Universities API (free, no auth)

OT security standards: IEC 62443, NIST 800-82/53, MITRE ATT&CK for ICS

AFIP — Argentine tax authority, electronic invoicing (Factura Electrónica)

Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis.

Assess destination risk: weather, disasters, health, security, multi-stop scoring, and travel win...

Official MCP server for Anytype API - your encrypted, local and collaborative wiki.

AWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs

Validate up to 75,000 URLs per job (status, redirects, response times). OAuth 2.1.

Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.

SNAP participation, food insecurity indicators, and agricultural statistics

Remote MCP server for HTML-to-PDF and screenshots with OAuth and API-key auth.

Decompose text into classified semantic units. Authority, risk, attention. No LLM.

French public services: tax, property, admin, education, healthcare, security, risks, legal texts

Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client.

Multi-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging.

Random User MCP — wraps randomuser.me (free, no auth)

MCP server for running Ox Security MegaLinter via mega-linter-runner

AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

Manage Authentik through AI assistants

OpenAlex MCP — wraps the OpenAlex API (scholarly works, free, no auth)

Symbiotic CLI MCP Server for security scanning and analysis

Persistent zero-knowledge memory for AI agents. AES-256-GCM encryption, PII redaction.

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.