Security MCP servers
Auth, secrets, scanning, and security tools.
33 servers
gin-vue-admin
flipped-aurora
🚀Vite+Vue3+Gin拥有AI辅助的基础开发平台，企业级业务AI+开发解决方案，内置mcp辅助服务，内置skills管理，支持TS和JS混用。它集成了JWT鉴权、权限管理、动态路由、显隐可控组件、分页封装、多点登录拦截、资源权限、上传下载、代码生成器、表单生成器和可配置的导入导出等开发必备功能。
mcp-for-beginners
microsoft
This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable, and secure AI workflows from session setup to service orchestration.
ENScan_GO
wgpsec
一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。支持MCP接入
jshookmcp
vmoranv
js hook toolkit that all you need
cve-mcp-server
mukul975
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
mcp-scanner
cisco-ai-defense
Scan MCP servers for potential threats & security findings.
cheatengine-mcp-bridge
miscusi-peek
Connect Cursor, Copilot & Claude AI directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.
wassette
microsoft
Wassette: A security-oriented runtime that runs WebAssembly Components via MCP
mcpc
apify
A universal CLI client for MCP. mcpc supports persistent sessions, stdio/HTTP, OAuth 2.1, tasks, JSON output for code mode, proxy for AI sandboxes, x402, and more.
cross-code-organizer
mcpware
Cross-Code Organizer (formerly Claude Code Organizer): cross-harness config dashboard for Claude Code, Codex CLI, MCP servers, skills, memories, agents, sessions, security scanning, context budget, and backups.
h1-brain
PatrikFehrenbach
MCP server that connects AI assistants to HackerOne for bug bounty hunting
claudit-sec
HarmonicSecurity
Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connectors, scheduled tasks, and permissions.
MCP-Defender
MCP-Defender
Desktop app that automatically scans and blocks malicious MCP traffic in AI apps like Cursor, Claude, VS Code and Windsurf.
osint-tools-mcp-server
frishtik
MCP server exposing multiple OSINT tools for AI assistants like Claude
falcon-mcp
CrowdStrike
Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting
toolhive-studio
stacklok
ToolHive is an application that allows you to install, manage and run MCP servers and connect them to AI agents
BurpMCP-Ultra
Cy-S3c
AI-powered MCP server for Burp Suite Professional — 149 tools across proxy, scanner, inline fuzzer, race conditions, guided injection, JWT/IDOR attacks, recon & OOB, with a real-time dashboard and hardened localhost security. Drive Burp from Claude Code or any MCP client.
http-oauth-mcp-server
NapthaAI
Remote MCP server (SEE + Streamable HTTP) implementing the MCP spec's authorization extension. Use directly from your agents, or from Cursor / Claude with mcp-remote
mcp-breach-to-fix-labs
PawelKozy
Hands-on MCP security lab: 10 real incidents reproduced with vulnerable/secure MCP servers, pytest regressions, and Claude/Cursor battle-tested exploit walkthroughs
caido-mcp-server
c0tton-fluff
MCP server for Caido proxy integration. Enables AI assistants like Claude Code to browse, analyse, and interact with HTTP traffic.
pfsense-mcp-server
gensecaihq
pfSense MCP Server enables security administrators to manage their pfSense firewalls using natural language through AI assistants like Claude Desktop. Simply ask "Show me blocked IPs" or "Run a PCI compliance check" instead of navigating complex interfaces. Supports REST/XML-RPC/SSH connections, and includes built-in compliance and guardrail
modelcontextprotocol-security.io
ModelContextProtocol-Security
Official website and documentation hub for the Model Context Protocol Security initiative. Provides security guidance, best practices, tools, and community resources for safely deploying MCP servers and AI agents. A Cloud Security Alliance community project.
mcpserver-audit
ModelContextProtocol-Security
mcpserver-audit: Helps you check if MCP servers are safe before using them. Examines servers for security problems, supports publishing findings in audit-db and vulnerability-db. Part of the Model Context Protocol Security initiative, a Cloud Security Alliance project.
defectdojo-mcp
jamiesonio
An experimental ModelContextProtocol server connecting LLMs to DefectDojo for AI-powered security workflows. Enables natural language interaction with vulnerability data, simplifies security analysis, and automates reporting through a lightweight middleware integration.
mcp-oauth2.1-server
QuantGeekDev
Reference mcp server implementation of draft mcp oauth spec https://modelcontextprotocol.io/specification/draft/basic/authorization#2-3-authorization-server-discovery
mcpserver-security-orchestrator
ModelContextProtocol-Security
mcpserver-security-orchestrator: Intelligent entry point to MCP security workflows. Coordinates discovery, audit, building, and deployment across open ecosystem including third party tools and services. Teaches or executes based on user preference. Part of the Model Context Protocol Security initiative, a Cloud Security Alliance project.
mcpserver-operator
ModelContextProtocol-Security
MCP Operations Expert - Teaches users how to securely deploy and operate MCP servers through guided operational security education. Provides practical deployment guidance while building user expertise in operational security and risk management. Part of the Model Context Protocol Security initiative.
mcpserver-builder
ModelContextProtocol-Security
MCP Development Expert - Teaches users how to build secure, well-architected MCP servers through guided development education. Provides practical scaffolding and templates while building user expertise in secure development practices. Part of the Model Context Protocol Security initiative.
mcpclient-security
ModelContextProtocol-Security
MCP Client security guidance and information
modelcontextprotocol-security
khemegha
modelcontextprotocol-security — MCP server.
modelcontextprotocol-security.io
khemegha
modelcontextprotocol-security.io — MCP server.
mcpserver-security-tools
ModelContextProtocol-Security
Lists and information about MCP server security tools
forge-mcp
randyquaye
Claude Code plugin for building enterprise-grade MCP servers — guided discovery, security audits, code generation using @modelcontextprotocol/sdk