Best Security MCP servers

AI agent identity, signed credentials, delegated authority and governance evidence.

Commerce preflights, Walmart mappings, D365 authorization, and offer checks; no external writes.

Authorize consequential AI agent actions before execution

Exact-action approval for consequential agent actions: request, track, and verify signed receipts.

Local, deterministic review of Git changes: weakened tests and CI gates, risky flows, blast radius.

Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.

Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.

Deterministic security layer your AI can't be. 584 rules, 39 tools, CLI + doctor + host audit.

Fail-closed Cedar policy gate + Ed25519 signed receipts for agent tool calls. Denies on any error.

Email MCP server for Gmail, Outlook and any IMAP mailbox, hardened against prompt injection

Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.

MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.

MCP server for the SCF Controls Platform — 187 tools for controls, evidence, risk, and TPRM.

Wallet auth: send a wallet and conditions, get a signed boolean across 37 chains.

Network scanner for AI agents: discover hosts, scan TCP and UDP ports, query DNS and mDNS.

Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.

Scan prompts, tool definitions and model output for injection, and guard agent tool calls.

IP geolocation, security, ASN, abuse, time zones, astronomy, and user-agent parsing over stdio.

Security scanner and graph for agentic infrastructure — agents, MCP, runtime, and blast radius.

Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.

Read-only Postgres/Supabase RLS audit with a rolled-back probe that proves who can read which rows.

MCP server for dnstwist: detect typosquatting, phishing and brand impersonation domains.

React Native and Expo health check: upgrade blockers, store rules, crash risks, security findings

A security-focused MCP server for self-hosted n8n Community Edition.

MCP server for the Semantic Scholar API: search 200M+ papers, citations, authors, recommendations.

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

Save and use 1Password secrets locally without exposing plaintext to AI agents.

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

Pin MCP tool contracts by sha-256; catch silent drift, rug pulls and bait-and-switch in CI.

Chemical safety intelligence — 24 tools: compatibility, hazards, PPE, compliance, SDS lookup

Keep credentials out of AI coding agents with local approvals, scoped injection, and audit trails.

Input firewall for AI agents: scan text and files before an agent reads them. Local, no network.

Self-hosted gateway aggregating upstream MCP servers behind one authenticated HTTP endpoint.

Dependency graph + 24 MCP tools. Impact analysis, simulation, security, agent coordination

Offline TrustLint checks: EU AI Act Article 5, Article 50, GPAI, plus GDPR and HIPAA.

Check if an MCP server's tool definitions changed after approval, from a signed public log.

Final release; the checks moved to 9lives (9l mcp). Local QA MCP: scan, inspect, repro, run tests.

Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval

Safe, self-hosted ZAP operator for guided AI security scans and reports.

MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.

Check, test, prove and review a rowstile policy: access rules for Postgres row-level security

Scan, enumerate, and risk-score every MCP server configured on your machine.

VMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection.

Local-first MCP security scanner and CLI for AI-generated applications.

Electron.js MCP server — IPC scaffolding, security auditing, build tooling for AI assistants

CLI tool and MCP server that tests MCP servers for spec compliance

npm registry MCP server — package intelligence, security audits, dependency analysis

Read-first Redis MCP: SCAN key explorer, keyspace/TTL/memory/slowlog stats, DBA advisor

MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.

ASO Scanner — the free Agent Readiness scanner as an MCP server. Measures your ASO Score (Agent.

Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).

Local Sapiom developer MCP for authoring, testing, deploying, and inspecting agents.

Scans Greenhouse, Lever, Ashby, Workday, Rippling for roles in any category. Clay-ready.

Answers EU Digital Product Passport questions: scope, required fields, registry and law changes.

Find and fix drift between Supabase environments: schema, RLS, roles, auth, storage and more.

Microsoft Dataverse MCP server: CRUD, FetchXML, metadata, schema, audit, batch and security roles.

ASO Score MCP — the free ASO Score scanner as an MCP server. Measures your ASO Score (Agent.

Measure MCP servers, pin the approved tool surface, refuse calls to tools that changed. Local-first.

MCP server: seal & sign ISO 20022 readiness evidence into tamper-evident audit packs.

Scan news for funding rounds, exec moves, product launches, and acquisitions at any company.

Open-source AI context firewall for governed model, retrieval, memory, and tool access.

Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit

Guard AI agents' PostgreSQL/MySQL access via MCP: SQL audit, auth, masking, write approval

MCP server for Kenya Revenue Authority tax workflows and information

Real-device ad verification: malvertising and cloaking scans, AI policies, alerts, webhooks.

Compiles structured specs into SCORM 1.2/2004 e-learning packages. 43 tools, quality gate, no LLM.

Permission tiers, approval gates, and audit logging for MCP servers - the server is the gatekeeper

Codebase Q&A for Claude Code through Gemini's 1M-token window, with workspace scans and caching.

Converts photos or scans of printed sheet music to MusicXML with optical music recognition

Free licensed loops and authorized audio analysis: BPM, key, waveform. Estimate before paid use.

Turn a written policy into rules a program can check, and get the same answer every time.

Local-first MCP server: version-correct library docs, code map, and offline drift for your repo.

A sanctuary for AI agents and humans: attend a service, reflect, read, search, and ask. No auth.

Auditable memory for AI agents: provable deletion, tamper-evident audit, time-travel recall.

Extended Google Docs for Claude via gogcli — auth + full Docs and comments support

Extended Google Sheets for Claude via gogcli — auth + full Sheets support

Google Slides via gogcli for Claude — deck and slide authoring

Agent Readiness MCP — the free Agent Readiness scanner as an MCP server. Measures your ASO Score.

SEO authority, keyword, competitor, content, site-audit, and internal-link tools with optional.

Checks what an agent did NOT read. Coverage over a retrieval step or a folder.

MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments

Ask the human for API keys in a browser page and write them to .env. The model only sees key names.

Machine-verifiable Norwegian company authority: status, roles and coded signing authority.

Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…

Audit, reschedule and author Microsoft Project schedules. No Java, no Project install.

Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

Trust + counterparty-risk layer for x402 A2A trades: reputation, pre-hire check, escrow, disputes

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

Detect hardcoded secrets in source and config. Reports masked previews, never the values.

Counter-signed evidence records for agent commerce: receipts, verification, dispute envelopes.

Rust MCP server and CLI for Tailscale devices, users, keys, policies, and auth.

Turn a prompt and a link into a branded, print-ready QR code that always scans.

md-log MCP: save/update/fetch markdown by path (stdio + remote HTTP, PAT auth).