Security MCP servers for scanning, threat intelligence and audits: let an AI assistant check code, dependencies and infrastructure for risks. 3,541 servers in this category.
Checks TRON USDT (TRC20) addresses for Tether blacklists, sanctions matches, and generates comprehensive AML reports.
$claude mcp add tron-usdt-mcp -- npx -y tron-usdt-mcp
Enables AI agents to perform on-chain address screening, AML compliance checks, and payment intent verification across EVM, Tron, and Solana.
$claude mcp add oceanalt-aml-mcp -- npx -y oceanalt-aml-mcp
Allows AI agents to manage and use credentials like SSH, HTTP, and database secrets without exposing them in the prompt or logs.
$claude mcp add demipass -- npx -y demipass
Lets an AI client inspect, edit, clean up, and security-scan Claude Code, Codex CLI, OpenCode, and DSH configs, MCP servers, skills, and memories.
Lets AI clients run CyberChef's 504 data operations for encoding, encryption, compression, forensics and analysis.
$claude mcp add cyberchef-mcp -- docker run -i --rm ghcr.io/doublegate/cyberchef-mcp_v4:4.2.0
Enforces project constraints so AI coding agents check edits, shell commands, and commits against rules before acting.
$claude mcp add speclock -- npx -y speclock
Provides a local AES-256-GCM encrypted vault to manage secrets for AI agents without exposing raw API keys to LLMs.
$claude mcp add enigmagent-mcp -- npx -y enigmagent-mcp
Enables AI clients to manage users, applications, roles, authentication, and security settings via the OneLogin API.
$claude mcp add onelogin-mcp -- npx -y @onelogin/onelogin-mcp
Performs health checks for React Native and Expo apps, identifying upgrade blockers, store compliance issues, crash risks, and security vulnerabilities.
$claude mcp add nativekeel -- npx -y nativekeel
Redacts PII, secrets, and credentials from text and files locally before they are sent to remote LLM providers.
$claude mcp add privacyscrubber-mcp -- npx -y @privacyscrubber/mcp-server
Enables AI clients to audit smart contracts, analyze Solana token risks, track whale flows, and verify HTTP 402 payment challenges.
$claude mcp add --transport http diogenes-web3-security-mcp https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security
Inspects MCP tool manifests and agent configurations locally to identify potential risks before tool attachment.
$claude mcp add agent-scan -- npx -y @backbond/agent-scan
Enables AI agents to perform mobile reverse engineering through automated Frida hooking, app unpacking, anti-detection bypass, and binary analysis.
Performs AI-powered security analysis on Solidity smart contracts to identify potential vulnerabilities and business-logic flaws.
$claude mcp add --transport http bug-bounty-intelligence-mcp https://wazir-x402.duckdns.org/api/bug-intel
Prevents AI agents from installing hallucinated or malicious npm and PyPI packages by verifying package names against real registry data.
$claude mcp add pkgtruth -- npx -y pkgtruth
Provides deterministic per-function side effect analysis, allowing AI agents to query code blast radius, network access, and policy compliance.
$claude mcp add candor-ts -- npx -y candor-tsScans npm packages, lockfiles, and MCP servers for malicious behavior and known vulnerabilities.
$claude mcp add lazaretto-mcp -- npx -y lazaretto-mcp
Verifies x402 endpoints to ensure price accuracy, wallet legitimacy, and uptime before an AI agent executes a payment.
$claude mcp add lumiere-paycheck -- npx -y lumiere-paycheck-mcp
Audits AI agent security, MCP schemas, delegation graphs, and behavioral stability with real-time circuit breakers and compliance reporting.
$claude mcp add systemores-plugin -- npx -y @systemores/systemores-plugin
Allows AI agents to verify credential availability and service status via HashiCorp Vault without exposing raw secrets to the model.
$claude mcp add keymaster-mcp -- npx -y @akari-os/keymaster-mcp