Best Security MCP servers, page 2

31

prodlint

by prodlint

A

Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.

32

Healthclaw Guardrails

by aks129

A

Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation

33

Pentest

by cyanheads

B

Offline methodology engine for authorized penetration testing, CTF, and security research.

34

SafeWeave

by safeweave.dev

C

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

35

spintax.net MCP server

by spintax.net

A

Write, validate, render and analyze spintax templates. Backed by @spintax/core. No auth.

36

Ts Template

by cyanheads

A

TypeScript template for building MCP servers with declarative tooling, observability, and auth.

37

Npm Sentinel

by Nekzus

A

Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

38

Unclaimed Sol

by nedim1511

B

The first Vibe Claiming MCP: AI agents scan and reclaim dormant SOL on Solana. Signs locally.

39

Code Factory

by zrk222

B

Read-only audit evidence for security, tests, native coverage, runtime failures and repair status.

40

pkgxray

by adamsjack711-ux

B

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

41

QualityMax QA MCP

by Quality-Max

A

Final release; the checks moved to 9lives (9l mcp). Local QA MCP: scan, inspect, repro, run tests.

42

EchelonGraph CVE & Exposure

by echelongraph.io

A

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

43

MCP ZAP Server

by dtkmn

B

Safe, self-hosted ZAP operator for guided AI security scans and reports.

44

Patch Tuesday

by jonnybottles

B

Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment

45

Canary

by mindstone

A

Mindstone-internal release-pipeline test connector; not for use. Single ping tool; no auth.

VMware NSX security: DFW policies, security groups, tags, Traceflow, IDPS — 21 MCP tools.

47

Backgen

by IbrahimKhaled19

A

Generate Express.js backend projects with ORMs, auth, payments, and DevOps

48

SPARDA

by zyx77550

A

AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.

49

Zn Gate

by usezn

B

The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.

50

n8n MCP Community

by drzamarian

B

A security-focused MCP server for self-hosted n8n Community Edition.

51

Servicenow AI

by IvanBBaev

B

ServiceNow MCP server — 100 tools over the full REST surface, every auth method, flows, diagrams.

52

Bawbel Scanner

by bawbel

B

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

53

Servicenow AI

by LeassTaTT

B

ServiceNow MCP server — 67 tools over the full REST surface, every auth method, flows, diagrams.

54

AgentPlaybooks

by agentplaybooks.ai

A

Vendor-neutral home for portable agents: skills, MCP tools, memory, canvas, and secret proxy.

55

Trent

by trent.ai

A

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

56

Royal

by royalplugins.com

A

Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org.

VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.

58

Security Proxy

by GuardBee

A

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

59

crosscheck

by crosscheckapi.com

A

Checks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.

60

Secret Scanner

by 4hmetuyar

A

Scans files for leaked secrets and API keys