Best Security MCP servers, page 15

Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.

422

MCP Server Auth Template

by brunovicco

A

OAuth 2.1/OIDC resource-server reference for secure MCP authorization

MCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant ops

424

Corvus

by Albasha0x0

A

Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.

425

Keyfold

by codewithkolin

A

Use API keys from your Keyfold vault in commands and .env files. No tool returns a secret value.

426

Secret Handoff

by geland

A

Let agents use temporary secrets without receiving their values in chat. Local stdio; Node 22+.

427

signals.edge graduation radar

by ogenalabs.com

A

pump.fun graduation radar for trading bots and AI agents. x402 USDC per scan, no key.

428

Webanalyzer

by webanalyzer.dev

A

Free website analyzer: score any public URL 0-100 across 8 quality dimensions. No auth.

429

State of Web Vitals

by corewebvitals

A

Core Web Vitals metrics by CMS, CDN, and framework — free remote MCP, no auth.

DeFi safety checks on Base before you sign: honeypot, owner-power scan, approval risk, Aave health.

431

ContextOverflow

by contextoverflow.org

A

Describe what's going wrong with your AI; get the named technique both of you can read. No auth.

432

EyalSec

by EyalSec

A

Read your EyalSec security events, machines, runs and rules from an AI assistant.

433

Gkmex Crane Inventory

by gkmex75

B

Public, zero-auth, read-only access to Gkmex used-crane inventory.

434

GroundTruth — subsurface scan QA & trade estimating

by gtfi.ai

B

Two independent AI models read a GPR, locate or pipe scan and flag the do-not-core call.

435

Cosmik

by gocosmik.com

B

Live space data for AI agents - rocket launches, ISS passes, launch news. Free, no auth.

436

Checker

by oksigenia.com

B

Domain security & privacy checker as an MCP server. 17 live checks, 0-100 score, local-first.

437

ERC-8126 Scan

by cybercentry.co.uk

B

378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402.

438

Domainintel

by Bishop81

B

Domain intelligence for agents: WHOIS, DNS, SSL/TLS, security headers, reputation, subdomains.

439

Bawbel Scanner

by bawbel

B

Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.

440

Readme Canary

by brkd-h1

B

Security research canary remote MCP server for owned-account testing.

441

AppLedger

by appledger.net

B

Plain-English security checks for AI-built apps (Trivy + Opengrep), with fix requests for agents

442

Helixar Security

by helixar.ai

B

Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.

x402-paid domain verification for AI agents — trustscore, SSL, security headers, robots.

Register/verify your domains, queue security scans, and read findings (CVE, severity).

445

KnowBe4

by wyre-technology

B

MCP server for KnowBe4 security awareness training — users, groups, training, phishing campaigns.

446

SaaS Alerts

by wyre-technology

B

MCP server for Kaseya SaaS Alerts — SaaS security monitoring for M365 & Google Workspace.

447

Vuln Check

by ciloops

B

Local vulnerability scan on top of grype, with prioritised upgrade actions for agents.

448

MCPower Security Proxy

by MCPower-Security

B

Security proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement

Grade a site's security headers with fixes and a badge; read logs or code for the defender.

450

MCP Security & Vulnerability Auditor

by Ansarii

B

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.