安全 MCP 服务器
安全 分类 — 344 个 MCP 服务器,按 GitHub star 数排序。
MCP ZAP Server
Safe, self-hosted ZAP operator for guided AI security scans and reports.
bugsy
Mobb Vibe Shield identifies and remediates vulnerabilities in human and AI-written code.
MCP-Dandan
Real-time security framework for MCP servers that detects and blocks malicious agent behavior by analyzing tool call patterns and intent.
ZettelForge
Agentic memory for cyber threat intelligence. STIX graphs, actor aliasing, offline RAG, Sigma/YARA.
tengu
AI-powered penetration testing MCP server
super-trouper
MCP server for the Frida reverse engineering toolkit.
pentester-mcp
Elevate your AI assistants (like Claude & Cursor) into autonomous cybersecurity experts. Pentester-MCP integrates 200+ pentesting tools…
kastell
Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.
studio-mcp
Easily find and fix security issues in your applications leveraging Snyk platform capabilities.
mcp-security-audit
Audit npm package dependencies for security vulnerabilities with real-time checks against the npm registry.
roadrecon_mcp_server
Analyze ROADrecon gather results from Azure tenant enumeration.
volatility-mcp
Memory forensics with Volatility 3, exposing plugins such as pslist and netscan through REST APIs.
fr0gger/mcp_security
Query the ORKL API to fetch threat reports, analyze threat actors and retrieve intelligence sources.
database-sentinel
Read-only security audit for Supabase. Four tools surface RLS gaps, permissive policies, exposed functions and grants; an `audit` prompt…
mcp-dnstwist
MCP server for dnstwist: detect typosquatting, phishing and brand impersonation domains.
CodeInspectus
Local-first MCP security scanner and CLI for AI-generated applications.
authenticator_mcp
Securely interact with the Authenticator App.
mcp-panther
Use Panther's SIEM platform in natural language to write detections, query logs and manage alerts.
cyberchef-api-mcp-server
Use CyberChef operations through the CyberChef server API.
osv-mcp
Query the OSV (Open Source Vulnerabilities) database by package version or commit, batch-query multiple packages and get vulnerability…
bugbounty-mcp-server
Comprehensive MCP server for bug bounty hunting and web application penetration testing
dnspy-mcp
MCP server for .NET reverse engineering workflows (dnSpy/ILSpy ecosystem), built in C#.
VulnMCP
A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.
search-solodit-mcp
MCP server for searching and retrieving Solodit vulnerability reports.
opencti-mcp
MCP server for querying OpenCTI threat intelligence, indicators, reports, malware, and threat actors.
entraid-mcp-server
Microsoft Entra ID (Azure AD) directory, user, group, device, sign-in and security operations via Microsoft Graph.
OpenDeviceDB
Check 21,000+ devices with open firmware or protocols before reverse engineering one.
fastmcp-threatintel
AI-Powered Threat Intelligence MCP tool
PentestThinkingMCP
A systematic, AI-powered penetration testing reasoning engine (MCP server) for attack path planning, CTF/HTB solving, and automated…
pyghidra-lite
Token-efficient Ghidra RE: decompile, xrefs, Swift/ObjC, ELF/Mach-O, async analysis
agent-bom
AI supply-chain BOM: agents, MCP servers, packages and recorded reach. Scan and investigate via MCP.
ContrastAPI
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
cervonwong/ilspy-mcp
ILSpy MCP Server (Model Context Protocol) for AI-assisted reverse-engineering of .NET binaries for autonomous Malware Analysis and Reverse…
pentesting-cyber-mcp
🔐 50+ MCP Security Servers for AI-Powered Pentesting | Integrate Nmap, Burp Suite, Nuclei, Shodan, BloodHound, Semgrep, Trivy | Model…
Malware-Sandbox-mcp
Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox,…
qtty/jadx-mcp-server
A Pure-Java MCP Server for JaDX Android Reverse Engineering Tool
ida-cli
Headless IDA Pro MCP server for AI-assisted binary analysis, powered by idalib
doublegate/cyberchef-mcp
CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics.
mq1n/ghostmcp
Injectable MCP server for AI-driven reverse engineering inside processes
Ramune-ida
Headless IDA Pro MCP Server — expose IDA Pro's reverse engineering capabilities to AI agents for more efficient automated analysis.
Grasp — Code Architecture & Dependency Analysis
Codebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.
mcp-recon
Conversational recon with httpx and asnmap: domain analysis, security header inspection, certificate analysis and ASN lookups at multiple…
AynOps
AynOps is a reconnaissance focused MCP Server which gives reconnaissance capabilities to AI Clients
opencti_mcp_server
Natural language interface to OpenCTI threat intelligence. Built with Claude Code for $22. Part of Cooper Cyber Coffee.
Repository Intelligence
Analyze repos of any size - security scanning code analysis monorepo support
Prism Scanner
Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.
csl-core
Deterministic AI safety policy engine with Z3 formal verification: write, verify and enforce machine-verifiable constraints for AI agents.
CTRLRun Operator
Answer CTRLRun approvals from an MCP client: list what is held, inspect it, grant or deny.
operant-mcp
Security testing MCP server for penetration testing, forensics, and vulnerability assessment
warden-mcp
Manage Bitwarden and Vaultwarden vaults via the bw CLI: search, create, edit and organize logins, notes, cards, identities, SSH keys,…
intruder-mcp
Access Intruder to identify, understand and fix security vulnerabilities in your infrastructure.
Draugr
Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
mobsf-mcp-server
Static and dynamic analysis of Android and iOS apps with MobSF.
AIM-MCP
Security-focused safety guidelines and content analysis for AI agents.
nslookup-mcp
DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks
attestable-mcp-server
Demonstrates remote attestation of an MCP server running in a Gramine TEE via RA-TLS, so clients can verify the server before connecting.
mastyf.ai
Runtime proxy for MCP security, cost governance & audit
EchelonGraph CVE & Exposure
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
LucidShark
Local code quality and security scanner: lint, types, SAST, SCA, tests, coverage.
agentward
MCP proxy that enforces least-privilege YAML policies on tool calls, classifies PII/PHI, detects dangerous skill chains and generates…