AI & agent security MCP servers
214 listed servers in Security. Each row shows the automated checks, the secrets asked for and an install command.
No keys needed, every check passed
- Sharphy4/4Runs locally
- log-ai-compressor7/7Runs locally
- The Agent Commons6/6Runs locally
- dotrepo6/6Runs locally
- IntoDNS.ai DNS & Email Security Scanner8/8Runs locally
Draugr4/4Runs locally- valvur7/7Runs locally
- KubeStellar MCP4/4Runs locally
- MCP Server for OSCAL7/7Runs locally
- IA-QA Security — 30 tools4/4Hosted
AI & agent security servers 214
Now showing are unlisted. These entries didn't pass our listing filter: no source repo, a very short or duplicated description, or a publisher with 100+ servers. Same automated checks, shown as-is. How we check
| Type | Secrets | Version | Actions | ||||
|---|---|---|---|---|---|---|---|
★ 1 io.github.baharmaulidiii/sharphy CLR Intelligence and Runtime Forensic Bridge for AI Coding Agents. | 4/4All passed | 45health of 100 | NuGetRuns locally | Noneno keys asked | 1.0.6 | ||
★ 1 io.github.hu-chenyu/log-ai-compressor Local log forensics: compress logs into citable evidence with root-cause confidence tiers. | 7/7All passed | 73health of 100 | PyPIRuns locally | Noneno keys asked | 2.13.0 | ||
io.github.startekenterprises-ai/agent-commons Read-only MCP access to The Agent Commons: shared security findings for AI agents and their tools. | 6/6All passed | 48health of 100 | MCPBRuns locally | Noneno keys asked | 1.0.0 | ||
★ 16 ai.skilltotal/skilltotal Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally. | 5/71 failed | 40health of 100 | PyPIRuns locally | Noneno keys asked | 0.85.0 | ||
★ 1 io.github.maxwellsantoro/dotrepo Trust-aware repository facts for agents: build, test, docs, license, and security, no scraping. | 6/6All passed | 62health of 100 | MCPBRuns locally | Noneno keys asked | 2.0.0-rc.1 | ||
io.github.whois-api-llc/mcp-whoisxmlapi 34 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API. | 5/5All passed | 61health of 100 | npmLocal or hosted | 1secret asked | 1.9.2 | ||
★ 2 ai.intodns/scanner DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools. | 8/8All passed | 64health of 100 | npmLocal or hosted | Noneno keys asked | 1.11.3 | ||
★ 1k io.github.hashgraph-online/hol-guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. | 6/71 failed | 40health of 100 | PyPIRuns locally | Noneno keys asked | 3.58.0 | ||
★ 8 dev.draugr/draugr Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk. | 4/4All passed | 68health of 100 | MCPBRuns locally | Noneno keys asked | 0.157.0 | ||
★ 64 io.github.Servosity/acronis-mcp The first real CLI for the Acronis Cyber Protect Cloud platform - every tenant, agent, and usage | 4/51 warning | 63health of 100 | MCPBRuns locally | 4secrets asked | 0.1.10 | ||
★ 4 io.github.IPGeolocation/ipgeolocation-io-mcp IP geolocation, security, ASN, abuse, time zones, astronomy, and user-agent parsing over stdio. | 7/7All passed | 56health of 100 | npmRuns locally | 1secret asked | 2.0.2 | ||
ai.topy/cso Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes. | 8/8All passed | 52health of 100 | npmLocal or hosted | 1secret asked | 0.1.0 | ||
io.github.MaverickHQ/valvur Offline security scanning for AI-generated code: seven open-source scanners in one MCP server. | 7/7All passed | 53health of 100 | PyPIRuns locally | Noneno keys asked | 1.6.0 | ||
★ 6 io.github.goklab/guardvibe Deterministic security layer your AI can't be. 624 rules, 39 tools, CLI + doctor + host audit. | 6/71 warning | 55health of 100 | npmRuns locally | Noneno keys asked | 3.66.0 | ||
★ 2 io.github.kubestellar/kubestellar-mcp AI-powered Kubernetes diagnostics, RBAC analysis, security checks, and app deployment via MCP | 4/4All passed | 64health of 100 | DockerRuns locally | Noneno keys asked | 0.9.21-nightly.20261027 | ||
io.github.dfkunstler/mcp-server-for-oscal AI agent tools for Open Security Controls Assessment Language (OSCAL) | 7/7All passed | 64health of 100 | PyPIRuns locally | Noneno keys asked | 0.7.1 | ||
io.github.JcJamet/ia-qa-security Agent security: prompt injection, PII & secret scans, TLS/header/CORS audits, MCP checks. Free. | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 1.0.1 | ||
★ 3 io.github.getmcpm/cli MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls. | 6/71 warning | 60health of 100 | npmRuns locally | Noneno keys asked | 0.47.7 | ||
io.github.4DA-Systems/4da-mcp-server Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans. | 7/7All passed | 53health of 100 | npmRuns locally | Noneno keys asked | 6.2.5 | ||
★ 3 io.github.DevHusnainAi/zerodom The deterministic attack-surface perception layer for AI security agents | 7/7All passed | 67health of 100 | PyPIRuns locally | Noneno keys asked | 0.1.3 | ||
io.github.som2026-commits/kestrova Solidity smart contract vulnerability scan (Slither) for AI agents. Free preview; paid full report. | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 0.3.0 | ||
★ 73 io.github.danoszz/penthera Offline, rule-based security checks for your repo, dependencies, AI agent config and local app. | 6/71 failed | 40health of 100 | npmRuns locally | Noneno keys asked | 2.0.0 | ||
★ 18 io.github.poliakarmai/gsc-scanner Local security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix. | 4/4All passed | 54health of 100 | DockerRuns locally | Noneno keys asked | 1.0.0 | ||
★ 1 io.github.MvikManners/aw1-circuit-breaker Deterministic sub-0.2ms AST security circuit breaker and agent containment engine. | 3/3All passed | 45health of 100 | RemoteHosted | Noneno keys asked | 2.2.1 | ||
★ 675 io.github.SonarSource/sonarqube-mcp-server Official Sonar Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. | 3/52 warnings | 59health of 100 | DockerRuns locally | 3secrets asked | 1.30.0 | ||
★ 1 io.github.ciloops/vuln-check Local vulnerability scan on top of grype, with prioritised upgrade actions for agents. | 6/71 warning | 55health of 100 | npmRuns locally | Noneno keys asked | 0.1.3 | ||
com.ismalicious/mcp-server Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans | 8/8All passed | 54health of 100 | npmLocal or hosted | 2secrets asked | 0.8.0 | ||
★ 64 io.github.Servosity/abnormal-mcp Abnormal Security email threats, cases, and reporting in your terminal and your AI agents. | 4/4All passed | 67health of 100 | MCPBRuns locally | 1secret asked | 0.1.7 | ||
io.github.t-crew/memory-pulse Give any agent self-improving memory you can trust in production. Built-in memory security. | 6/71 warning | 60health of 100 | npmRuns locally | 1secret asked | 0.16.1 | ||
★ 2 io.github.Damien829/aipaygen Website and company intel for agents: DNS, WHOIS, SSL, tech stack, email security, profiles | 4/4All passed | 47health of 100 | RemoteHosted | Noneno keys asked | 2.0.0 | ||
★ 274 io.github.CrowdStrike/falcon-mcp Connects AI agents with CrowdStrike Falcon for security analysis and automation. | 7/81 warning | 70health of 100 | PyPIRuns locally | 3secrets asked | 0.20.0 | ||
io.github.makash/feedmyagent Agent-readable feed: AI/agent tech news, security advisories, compliance deadlines, and live events. | 8/8All passed | 51health of 100 | npmLocal or hosted | 1secret asked | 1.2.0 | ||
io.github.ictechgy/apsa Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents. | 7/7All passed | 52health of 100 | PyPIRuns locally | Noneno keys asked | 1.6.2 | ||
★ 68 io.github.dtkmn/mcp-zap-server Safe, self-hosted ZAP operator for guided AI security scans and reports. | 4/4All passed | 62health of 100 | DockerRuns locally | 2secrets asked | 0.17.1 | ||
★ 1 io.github.GuardBee/vulnerability-scanner Triggers GuardBee scans, queries findings, AI-assisted remediation guidance | 7/7All passed | 66health of 100 | npmRuns locally | Noneno keys asked | 0.3.2 | ||
★ 1 io.github.GuardBee/unbounded-consumption-auditor Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6) | 7/7All passed | 65health of 100 | npmRuns locally | Noneno keys asked | 0.2.2 | ||
★ 1 io.github.GuardBee/threat-rules GuardBee MCP bridge to Agent Threat Rules (ATR) for runtime agent/MCP threat detection | 7/7All passed | 65health of 100 | npmRuns locally | Noneno keys asked | 0.4.2 | ||
★ 2 io.github.rubrikinc/rubrik-mcp Connect AI assistants to the Rubrik Security Cloud GraphQL API to discover, query, and automate. | 7/7All passed | 54health of 100 | PyPIRuns locally | 1secret asked | 0.10.20261012 | ||
io.github.kimmawla/vuln-triage-mcp Tells your AI agent which vulnerabilities to fix first, using OSV.dev, FIRST EPSS, and CISA KEV. | 7/7All passed | 55health of 100 | PyPIRuns locally | Noneno keys asked | 0.1.0 | ||
io.github.ankitkumarjha515/web-scan Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify. | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 1.0.0 | ||
dev.agentdiet/mcp-security Real-time MCP & A2A prompt-injection, jailbreak, and tool-schema poisoning firewall for AI agents. | 4/4All passed | 45health of 100 | RemoteHosted | Noneno keys asked | 7.0.17 | ||
dev.agentdiet/github-audit Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c. | 4/4All passed | 45health of 100 | RemoteHosted | Noneno keys asked | 7.0.17 | ||
dev.agentdiet/assay Live behavioral security verifier, schema auditor, and trust oracle for A2A, MCP & x402 agents. | 4/4All passed | 45health of 100 | RemoteHosted | Noneno keys asked | 7.0.17 | ||
ai.sekura/sekura Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent. | 3/3All passed | 45health of 100 | RemoteHosted | Noneno keys asked | 1.0.0 | ||
★ 2 io.github.usezn/zn-gate The local security layer for coding agents: secret redaction, injection checks and an MCP proxy. | 6/71 warning | 64health of 100 | npmRuns locally | 1secret asked | 1.13.1 | ||
io.enterno/site-diagnostics HTTP, DNS, SSL, WHOIS, ping, security-header, SEO and AI-readiness checks for any website. | 3/3All passed | 44health of 100 | RemoteHosted | Noneno keys asked | 1.1.0 | ||
★ 2 io.github.tide-foundation/raziel MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis | 8/8All passed | 62health of 100 | npmLocal or hosted | Noneno keys asked | 1.9.33 | ||
★ 1 io.github.co2water/agentegress See which AI agent and MCP server talks to what on Windows, with a rule-based security verdict | 5/61 warning | 47health of 100 | MCPBRuns locally | Noneno keys asked | 0.1.3 | ||
★ 5 dev.safeweave/safeweave Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST. | 8/8All passed | 54health of 100 | npmLocal or hosted | 1secret asked | 0.7.5 | ||
io.github.EyalSec/eyalsec-mcp Read your EyalSec security events, machines, runs and rules from an AI assistant. | 7/7All passed | 49health of 100 | PyPIRuns locally | 1secret asked | 0.1.1 |
Showing 1 to 50 of 214