Security MCP Servers

Scan code for security vulnerabilities using Semgrep.

IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.

Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.

JADX decompiler plugin providing live, LLM-assisted reverse engineering.

Honeypot framework for building decoy MCP tools that an agent would never use in normal work, to detect prompt injection and malicious…

Protect your AI agents and IDEs from malicious open-source packages.

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

Native Ghidra integration with GUI configuration, logging and no external dependencies.

Automate reverse engineering of Android APKs with Apktool.

Exact-action approval for consequential agent actions: request, track, and verify signed receipts.

Binary Ninja plugin and bridge for automating binary analysis and reverse engineering.

Professional network analysis with tshark. Security audits, deep-dives, and threat detection.

Disassemble and inspect binaries for reverse engineering with the Radare2 disassembler.

Policy checks, approvals, records, and governed HTTP capabilities for unattended agents.

Search usernames across social networks and analyze URLs with maigret, an OSINT tool that collects account information from public sources.

Verifiable agent evidence; opt-in Codex guard and reference SOC alert review.

Access real-time security alerts and event data from Wazuh SIEM.

Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.

Security testing toolbox that combines open source tools behind a single interface for pentesting, bug bounty hunting and threat hunting.

MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.

Author, lint, validate and convert Sigma detection rules with RSigma, evaluate and explain detections against log events, and inspect…

MCP server for querying VirusTotal API with comprehensive security analysis tools.

Ghidra plugin for binary analysis: function inspection, decompilation, memory exploration and import/export analysis.

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

Query the CVE-Search API: browse vendors and products, get CVEs by ID and list the latest updated CVEs.

Manage and interact with the OPNsense open source firewall in natural language.

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

Automate cybersecurity assessment of documents, questionnaires and reports to surface risks, compliance gaps and remediations, using a RAG…

AWS security scanner with attack chain detection, IAM privilege escalation, and fixes

Safe, self-hosted ZAP operator for guided AI security scans and reports.

Real-time security framework for MCP servers that detects and blocks malicious agent behavior by analyzing tool call patterns and intent.

Mobb Vibe Shield identifies and remediates vulnerabilities in human and AI-written code.

Easily find and fix security issues in your applications leveraging Snyk platform capabilities.

Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.

Audit npm package dependencies for security vulnerabilities with real-time checks against the npm registry.

Analyze ROADrecon gather results from Azure tenant enumeration.

Memory forensics with Volatility 3, exposing plugins such as pslist and netscan through REST APIs.

Query the ORKL API to fetch threat reports, analyze threat actors and retrieve intelligence sources.

Local-first MCP security scanner and CLI for AI-generated applications.

MCP server for dnstwist: detect typosquatting, phishing and brand impersonation domains.

Read-only security audit for Supabase. Four tools surface RLS gaps, permissive policies, exposed functions and grants; an `audit` prompt…

Use Panther's SIEM platform in natural language to write detections, query logs and manage alerts.

Securely interact with the Authenticator App.

Use CyberChef operations through the CyberChef server API.

Query the OSV (Open Source Vulnerabilities) database by package version or commit, batch-query multiple packages and get vulnerability…

Microsoft Entra ID (Azure AD) directory, user, group, device, sign-in and security operations via Microsoft Graph.

AI supply-chain BOM: agents, MCP servers, packages and recorded reach. Scan and investigate via MCP.

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics.

Conversational recon with httpx and asnmap: domain analysis, security header inspection, certificate analysis and ASN lookups at multiple…

AynOps is a reconnaissance focused MCP Server which gives reconnaissance capabilities to AI Clients

Answer CTRLRun approvals from an MCP client: list what is held, inspect it, grant or deny.

Deterministic AI safety policy engine with Z3 formal verification: write, verify and enforce machine-verifiable constraints for AI agents.

Manage Bitwarden and Vaultwarden vaults via the bw CLI: search, create, edit and organize logins, notes, cards, identities, SSH keys,…

Security testing MCP server for penetration testing, forensics, and vulnerability assessment

Access Intruder to identify, understand and fix security vulnerabilities in your infrastructure.

Static and dynamic analysis of Android and iOS apps with MobSF.

Security-focused safety guidelines and content analysis for AI agents.

Demonstrates remote attestation of an MCP server running in a Gramine TEE via RA-TLS, so clients can verify the server before connecting.

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.