Security MCP servers for scanning, threat intelligence and audits: let an AI assistant check code, dependencies and infrastructure for risks. 3,540 servers in this category.
Verify the existence of web pages or documents at a specific date using a SHA-256 registry anchored in Bitcoin.
$claude mcp add --transport http empreintes https://temoinpublic.fr/mcp
Provides a deterministic policy engine that classifies autonomous agent actions into allow, require approval, or deny verdicts before execution.
$claude mcp add --transport http policy-gate https://policy-gate.3labsio.workers.dev/mcp
Verifies domain and package authenticity using live RDAP, npm, and PyPI data to detect typosquatting and homoglyph attacks.
$claude mcp add --transport http databutler-provenance https://databutler.dev/api/mcp/provenance
Enforces deterministic governance and security linting for MCP server configurations through rule-based auditing and preflight checks.
$claude mcp add mcp-nervous-system -- npx -y mcp-nervous-system
Inspect MCP servers for security risks like path traversal, shell execution, and hardcoded credentials using offline heuristic scanning.
$claude mcp add mcp-customs -- npx -y mcp-customs
Scans GitHub Actions and CI workflows locally to identify maintenance hygiene issues like unpinned actions and broad token permissions.
$claude mcp add taskbounty-check -- npx -y taskbounty-check
Provides machine-readable static analysis reports that allow AI agents to automatically identify, fix, and verify code vulnerabilities and quality issues.
$claude mcp add codemore -- npx -y codemore
Audits JavaScript and TypeScript repositories to identify AI features lacking governance guardrails like human-in-the-loop or output validation.
$claude mcp add aiglare -- npx -y @nugehs/aiglare
Lets AI clients validate URLs against a declarative network-egress policy to prevent unauthorized data access.
$claude mcp add agentguard-mcp -- npx -y @mukundakatta/agentguard-mcp
Provides signed timestamps, Bitcoin-anchored notarization, and public randomness for AI agents.
$claude mcp add --transport http tithonus-org https://tithonus.org/mcp
Verifies EVM addresses and cryptographically validates payment settlement details to prevent funds being sent to incorrect or tampered addresses.
$claude mcp add --transport http sendcheck-verify https://api.pennyforge.org/mcp
Scans text and git diffs for accidentally committed credentials using vendor-specific formats and entropy analysis.
$claude mcp add --transport http secrets-leak-audit-mcp https://secrets-leak-audit-mcp.mcpize.run/mcpAudits package.json files for typosquatting, malicious install scripts, unpinned versions, and hallucinated package names.
$claude mcp add --transport http npm-supply-chain-audit-mcp https://npm-supply-chain-audit-mcp.mcpize.run/mcpAudits MCP servers for tool poisoning, sensitive-path references, and tool shadowing to ensure agentic tool-calling security.
$claude mcp add --transport http mcp-trust-audit-mcp https://mcp-trust-audit-mcp.mcpize.run/mcpAudits GitHub Actions workflow YAML files for script injection, unpinned actions, missing permissions, and supply-chain vulnerabilities.
$claude mcp add --transport http github-actions-audit-mcp https://github-actions-audit-mcp.mcpize.run/mcpAudits Dockerfiles for security anti-patterns like root users, baked-in secrets, unpinned base images, and unsafe remote script execution.
$claude mcp add --transport http dockerfile-audit-mcp https://dockerfile-audit-mcp.mcpize.run/mcp
Allows AI agents to anonymously and encryptedly disclose AI alignment and safety failures with signed receipts.
$claude mcp add --transport http leaks-and-confessions-skills https://leaks.md/mcp
Provides a verifiable, chained receipt system for every read operation performed by an agent to ensure data integrity and accountability.
$claude mcp add --transport http rco-records https://mcp.rco-records.ai/mcp
Prevents AI coding agents from installing non-existent or malicious npm and PyPI packages by validating registry existence and package versions.
$claude mcp add --transport http exactground https://dropin-apis--exactground-api.apify.actor/mcp
Provides cryptographic agent passports, tamper-evident evidence, and verifiable audit trails for AI agent identity and handoffs.
$claude mcp add --transport http notary-protocol https://accordtrace.notary-labs.workers.dev/mcp