Security MCP servers for scanning, threat intelligence and audits: let an AI assistant check code, dependencies and infrastructure for risks. 3,541 servers in this category.
Helps security researchers strengthen bug bounty reports by scanning for secrets, verifying evidence, and simulating triager reviews.
$claude mcp add --transport http bounty-operator https://bountyoperator.com/api/mcp
Provides security scanning, pentesting, and vulnerability detection for websites, repositories, and code directly within AI IDEs.
$claude mcp add jikida -- npx -y @jikida/mcp
Lints and autofixes Solidity smart contracts using the Solhint engine from any MCP client.
$claude mcp add solhint-mcp -- npx -y solhint-mcp
Provides a three-layer security firewall for MCP servers to prevent prompt injection, unauthorized egress, and dangerous tool actions.
$claude mcp add mcp-output-firewall -- npx -y mcp-output-firewall
Screens crypto addresses, ENS names, and payment URLs to detect sanctions, scams, and honeypot behavior before an AI agent executes a transaction.
$claude mcp add payment-guard-mcp -- npx -y payment-guard-mcpVets software packages for AI agents by checking for vulnerabilities, malware, typosquatting, and registry existence.
$claude mcp add package-guard-mcp -- npx -y package-guard-mcpProtects AI agents by scanning inbound emails for prompt injection and phishing, and outbound emails for secret leaks and PII.
$claude mcp add email-guard-mcp -- npx -y email-guard-mcpScans AI-generated code snippets or diffs for security vulnerabilities like injection, hardcoded secrets, and unsafe deserialization.
$claude mcp add code-guard-mcp -- npx -y @mlawsonking/code-guard-mcpProvides input and output safety for AI agents by scanning for prompt injections, leaked secrets, PII, malicious URLs, and compromised passwords.
$claude mcp add agent-firewall-mcp -- npx -y agent-firewall-mcp
Provides AI agents with a compact structural intermediate representation of JavaScript, TypeScript, and Python files to identify risks and capabilities.
$claude mcp add sentinel-ir-mcp -- npx -y sentinel-ir-mcp
Performs quantitative fixed-income valuation, OFAC sanctions screening, and SEC XBRL forensic accounting analysis.
$claude mcp add --transport http sec-forensics-whistleblower https://ariadnenexus.com/mcp/sec-forensics-whistleblowerPerforms OFAC SDN sanctions screening, bond valuation, and SEC forensic accounting analysis via institutional-grade financial tools.
$claude mcp add --transport http ofac-sanctions-escrow https://ariadnenexus.com/mcp/ofac-sanctions-escrowPerforms fixed-income CUSIP valuation, FINRA TRACE debt analysis, portfolio stress testing, OFAC sanctions screening, and SEC forensic accounting.
$claude mcp add --transport http ariadne-nexus-mcp https://ariadnenexus.com/mcp
Validates AI-written code and designs using deterministic veto checks and a Claude Haiku 5.5 review to prevent hallucinations and security risks.
$claude mcp add --transport http verificate-mcp-quickstart https://mcp.verificate.ai/mcp
Inventories every AI agent, MCP server, plugin, and AI extension on a machine to report their capabilities and potential exposure.
$claude mcp add geiger -- npx -y geiger-scan
Provides a structured knowledge base and methodology to transform autonomous AI agents into professional open-source intelligence analysts.
$claude mcp add osint-agent-skills -- npx -y @frangelbarrera/osint-agent-skills
Scans Solana and Anchor Rust code for security issues and serves the SOL-0XX ruleset to AI clients.
$claude mcp add solana-security-mcp -- npx -y @jelleo/solana-security-mcp
Stores secrets in the OS keychain and injects them into commands so an AI agent can use credentials without ever seeing plaintext.
$claude mcp add --transport http hush https://royashbrook.com/hush
Records, lists, and cryptographically verifies agent actions using an append-only, ERC-191-signed ledger.
Pins MCP tool contracts using sha-256 hashes to detect silent drift, tool poisoning, and unauthorized changes in CI/CD pipelines.
$claude mcp add rugsnare -- npx -y rugsnare