Security MCP servers for scanning, threat intelligence and audits: let an AI assistant check code, dependencies and infrastructure for risks. 3,538 servers in this category.
Lets an AI client analyze malware by decompiling, debugging, emulating, and triaging binaries through natural language prompts.
An agentic web pentesting engine that uses LLM-guided investigation and specialist tools to discover and validate security vulnerabilities.
Lets AI agents run cybersecurity operations—alert triage, threat hunting, incident response and Detection-as-Code—using on-demand security skills and MCP tools.
Lets an AI assistant drive GDB or LLDB to set breakpoints, run programs, read memory and walk the stack.
Accelerates cloud security workflows by providing AI skills for alert triage, impact analysis, compliance gap identification, and guided remediation.
Monitors Python MCP servers by capturing tool calls, session lifecycles, and module imports as structured NDJSON without code changes.
Enforces runtime security policies for LLM agent tool calls on Kubernetes using OPA/Rego.
Provides an open behavioral classification standard to identify, score, and map vulnerabilities in agentic AI components like MCP servers and system prompts.
Scans and fuzzes live MCP servers to find runtime vulnerabilities like injection flaws, crashes, and logic errors.
Provides intent-bound action authorization for AI agents using deterministic policies, human-in-the-loop approvals, and signed audit trails.
$claude mcp add delego -- uvx delego
Provides static indexing and reverse engineering capabilities for APK, AAR, and DEX files to assist in Xposed module development.
Lets an AI client query ZeroPath security issues, patches, and scans using direct tRPC V2 procedures.
Integrates StackHawk's security scanning platform into LLM-powered IDEs to automate project setup, run security scans, and triage vulnerabilities.
$claude mcp add stackhawk-mcp -- uvx stackhawk-mcp
Converts PDF, DOCX, and ZIP files into sanitized Markdown with support for LaTeX math, multi-column layouts, and PII masking.
Enables AI agents to perform static and dynamic security scanning, secret detection, and vulnerability remediation across multiple languages.
$claude mcp add sast-mcp-server -- uvx sast-mcp-server
Provides AI agents with a deterministic Unicode, domain-term, and security-scanning layer to prevent hallucinations and symbol-based attacks.
$claude mcp add omniglyph -- uvx omniglyph
Enables AI assistants to manage AWS Payment Cryptography key lifecycles, perform cryptographic operations, and analyze HSM migration paths.
$https://github.com/J8k3/aws-payment-cryptography-mcp/releases/download/v1.2.0/aws-payment-cryptography-mcp-1.2.0.mcpb
Provides an economic security layer for autonomous agents to audit smart contract executions and financial actions before they occur.
$claude mcp add xaps-sdk -- uvx xaps-sdk
Captures iPhone app traffic via a Windows mobile hotspot using passive packet capture and HTTPS interception to generate detailed service reports.
Runs garak vulnerability probes against MCP servers using an agent to detect tool misuse, leaked canaries, or budget violations.