Security MCP servers for scanning, threat intelligence and audits: let an AI assistant check code, dependencies and infrastructure for risks. 3,537 servers in this category.
Deceive attackers by planting fake credentials that trigger alerts when used, providing an early warning system for network intrusions.
$claude mcp add lure -- uvx silentmesh-lure
Scans websites for vulnerabilities like DNS takeovers, orphaned cloud buckets, and security misconfigurations, providing attack paths and remediation fixes.
$claude mcp add fsv -- uvx fsv
Lets AI agents simulate and validate AWS infrastructure changes using a Git-style branching model and security lenses before applying them to production.
$claude mcp add emfirge -- npx -y @emfirge/mcp
Lets an AI client observe a domain's public technology footprint, including email providers, identity indicators, SaaS services, and cloud infrastructure.
$claude mcp add recon -- uvx recon-toolLets an AI client observe a domain's public technology footprint, including email providers, identity indicators, SaaS services, and cloud infrastructure.
$claude mcp add recon -- uvx recon-tool
Allows an AI agent to triage security findings, import scan reports and SBOMs, manage products, and generate VEX documents via the SecObserve API.
$claude mcp add secobserve-mcp -- uvx secobserve-mcp
Allows an AI client to query employee monitoring data, productivity metrics, risks, and idle time from the OctoWatch DLP Cloud.
$claude mcp add octowatch-mcp-server -- uvx octowatch-mcp
Enables AI agents to perform OSINT investigations, run Maltego transforms, and generate native .mtgx link graphs.
$claude mcp add mcp-maltego -- npx -y mcp-maltego
A governed MCP gateway that enforces policy gates on tool calls and provides hash-chained DSSE receipts for every result.
$claude mcp add hatun-mcp -- docker run -i --rm ghcr.io/szl-holdings/hatun-mcp:1.0.1
Lets AI agents verify stablecoin payments and x402 authorizations against sanctions, rules, and fraud patterns before signing transactions.
$claude mcp add sra-riskgate-mcp -- uvx sra-riskgate-mcp
Verifies links and payments locally to protect AI agents from phishing, typosquatting, and fraudulent transactions.
$claude mcp add scamgate -- uvx scamgate
Protects Postgres databases from AI agents by requiring approval for risky SQL and providing one-command undo for updates and deletes.
$claude mcp add pgbrake -- uvx pgbrake
Prevents AI agents from executing expensive or unauthorized Trino and Pinot queries by pricing them against a budget before they run.
$claude mcp add lagaam -- uvx lagaam
Provides an AI assistant with a local knowledge base of MITRE ATT&CK, NIST 800-53, and DISA STIG security controls, mitigations, and detections.
$claude mcp add stig-mcp -- uvx stig-mcp
Performs security scanning and semantic intent analysis for Model Context Protocol servers to identify suspicious tool descriptors and metadata.
$claude mcp add mcpsentinel -- uvx mcp-guardian-scan
Provides a local gateway to monitor, verify, and block unauthorized tool changes in Model Context Protocol servers.
$claude mcp add mcpgawk -- uvx mcpgawk
Provides a zero-code proxy for MCP servers that implements policy enforcement, human-in-the-loop gating, and tamper-evident verification ledgers.
$claude mcp add attest-proxy -- uvx attestlayerProvides a policy-driven verification layer that gates AI agent actions, verifies them via system read-back, and records evidence in a hash-chained ledger.
$claude mcp add attest -- uvx attestlayer
Provides a safety-first interface for OPNsense firewalls that uses read-only defaults, policy-checked planning, and automatic reverts for all writes.
$claude mcp add opnsense-guard-mcp -- uvx opnsense-guard-mcp
Allows an AI client to mount and unmount VeraCrypt containers using secure stdin password handling and OS keyring integration.
$claude mcp add veracrypt-mcp -- uvx veracrypt-mcp