Security MCP servers for scanning, threat intelligence and audits: let an AI assistant check code, dependencies and infrastructure for risks. 3,537 servers in this category.
Lets an AI client analyze decompiled Android APKs in JADX, reading class source, manifests, resources, and cross-references.
Analyzes PCAP capture files for DNS, DHCP, ICMP, TCP, SIP, and file metadata using protocol-specific tools.
$claude mcp add mcpcap -- uvx mcpcap
Governs AI agent tool calls with YAML policies, approval gates, guardrails, and tamper-evident audit logging across frameworks.
$claude mcp add aegis -- uvx agent-aegis
Scans npm and PyPI packages, MCP servers, skills, and repos for security risks and blocks unsafe installs before an agent runs them.
$claude mcp add skilltotal -- uvx skilltotal
Performs Microsoft Entra ID sign-in and audit-log triage, Azure VM backup monitoring, and Microsoft 365 service health checks.
$claude mcp add entraadm-mcp -- uvx entraadm-mcp
Lets an AI client inspect IDA Pro disassembly and decompilation, rename symbols, add comments, and manage reverse engineering databases.
Provides AI agents with read-only, PII-masked access to local files and databases through contract-governed SQL queries.
$claude mcp add datacharter -- uvx datacharter
An open-source AI Security Operations Center that automates threat detection, investigation, and response using auditable AI agents.
An AI-driven penetration testing tool that uses machine oracles to verify vulnerabilities and generate reproducible proof capsules.
Enables AI agents to provide verifiable work records, review signed evidence, and perform guarded text-editing tasks.
$claude mcp add openworkproof -- uvx openworkproof
Lets an AI client discover, recommend, and run 670+ security tools through a governed, authorization-gated execution path for CTF, pentest, and DFIR work.
$claude mcp add cybersec-toolkit -- docker run -i --rm ghcr.io/26zl/cybersec-toolkit:1.4.0
Performs static security scanning on MCP servers and agent skill files to detect vulnerabilities and toxic attack chains using OWASP AIVSS scoring.
$claude mcp add scanner -- uvx bawbel-scannerPerforms static security scanning on MCP servers and agent skill files to detect vulnerabilities and toxic attack chains using OWASP AIVSS scoring.
$claude mcp add bawbel-scanner -- uvx bawbel-scanner
Provides lineage-aware agent memory governance on PostgreSQL and pgvector using row-level security to prevent unauthorized data derivation leaks.
$claude mcp add amu-pgvector -- uvx amu-pgvector
Converts local AIops audit trails into tamper-evident, framework-mapped compliance evidence bundles for HIPAA, PCI-DSS, SOC 2, and GDPR.
$claude mcp add compliance-aiops -- uvx compliance-aiopsProvides observability and governance for local LLMs by scanning prompts for secrets and PII, auditing model usage, and enforcing model policies.
$claude mcp add ai-guardian -- uvx ai-guardian-aiops
Verifies paid AI agent services using signed receipts and real-time measurements to prevent incorrect payments.
$claude mcp add --transport http botsrated https://botsrated.com/mcp
Connects AI assistants to HackerOne so they can search bug bounty history, scopes, and reports and generate hacking briefings.
Lets an AI client query Wazuh SIEM alerts, agents, vulnerabilities and compliance data, and dispatch active responses.
Provides threat intelligence by allowing AI agents to retrieve reports for files, URLs, domains, and IP addresses, and submit new analysis requests.
$claude mcp add virustotal-mcp -- uvx vt-mcp