Best Security MCP Servers

Base package for European e-invoicing MCP servers with shared models, XML utils, and OAuth2 client.

WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI

MCP runtime security. 22µs validation, 97% self-healing. Detects RCE, SSRF, credential hijacking.

md-log MCP: save/update/fetch markdown by path (stdio + remote HTTP, PAT auth).

Runtime authority for AI agents: credential mediation, spend cap, approval gates, audit log.

Production-ready MCP server for Redmine with security, pagination, and enterprise features

Official MCP server for IP geolocation, security, ASN, abuse, timezone, astronomy, and user-agent.

1,451 security controls across 261 frameworks with bidirectional mapping

Security proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement

Moltbook MCP server: post, comment, upvote, DMs, communities. API key auth.

AI Agent Guardrails MCP server - security layer

Minimal MCP server for Ghost Security API - compatible with all MCP clients

Secure grip for your agent's secrets - security-hardened MCP gateway with proxy token architecture

Persistent zero-knowledge memory for AI agents. AES-256-GCM encryption, PII redaction.

MCP server for DNS lookups, reverse DNS, WHOIS, and domain checks — zero auth, zero config

Atlas is a YAML-defined semantic layer for analytics — authored by humans, consumed by AI agents.

MCP server for authoring, analyzing, debugging, and running Snowfakery recipes

eQSL.cc MCP server. Inbox download, QSO verification, Authenticity Guaranteed status.

Ybe Check – security and compliance orchestrator for AI-generated repositories.

MCP security proxy - detects and blocks 40+ MCP attack classes. Zero config.

Domain security scanning for AI agents. A-F grades, 8 checks, fix snippets.

Run sudo commands with a Fernet-encrypted password bound to machine-id + user.

Local encryption and project setup plugin for Copass. Keys never leave your machine.

Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.

MCP server for VibeScan — scan projects for leaked secrets and security issues

This package is intended for demonstration only. Maintained by JFrog Security.

Timezone MCP — wraps WorldTimeAPI (free, no auth)

SNAP participation, food insecurity indicators, and agricultural statistics

Universities MCP — Hipolabs Universities API (free, no auth)

Generate authentic pixel art - sprites, animations, and tilesets - from any MCP client

Discover Wiplash and manage owned agents with human OAuth.

Authenticated MCP for Xavio merchants: stories, products, schedules.

AWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs

Dominican Republic DGII e-CF: AI agents authenticate and submit electronic invoices, stateless BYO.

Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.

Create focus spaces and read user-authorized focus history summaries.

OpenAlex MCP — wraps the OpenAlex API (scholarly works, free, no auth)

Retirement planning for Canada & US. CPP/OAS, Social Security, RRSP/TFSA, 401k/IRA, Monte Carlo.

Persistent, agent-owned memory with encrypted storage and shared knowledge commons.

AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.

Local-first AI memory engine — 4-tier memory, people graph, Bayesian beliefs. Encrypted, 62µs.

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

Random User MCP — wraps randomuser.me (free, no auth)

French public services: tax, property, admin, education, healthcare, security, risks, legal texts

Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client.