MCP Servers List

SEC MCP — SEC EDGAR public APIs (free, no auth)

SpaceX MCP — wraps SpaceX API v4 (free, no auth)

AI agent security and governance. Register, verify, scan, and monitor agents.

MCP server for Architectural Decision Records: navigate, author, validate, link, and analyze them.

Preview release of FusionAuth API MCP server

Release gate agents call before they tell users a public website is ready to ship. Scans public websites across security, SEO, accessibility, legal compliance, and sustainability.

Cordon for MCP. Security gateway with policy enforcement, audit log, and HITL approvals.

MCP smart contract scanner with NEAR-focused security context.

Model Context Protocol server for CiviCRM — AuthX-first, schema-introspected, write-gated.

Security-first web access for Claude. Sanitizes pages, blocks injection, redacts PII.

Security scanning and threat detection for AI agents

Encrypted secrets and credential management for agents

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

AI agent security: prompt injection detection, semantic memory, output scanning, prompt hardening

Scan installed MCP servers for security vulnerabilities with 16 detection engines.

AI-powered threat intelligence, smart contract auditing, and cybersecurity OSINT.

OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation.

Security scanner that tests applications and infrastructure for vulnerabilities, generates SBOMs, and monitors projects using TypeScript and Go components.

Manage Clerk's authentication and user management organization management, session handling, and authorization features.

Personal knowledge platform that helps collect, organize, and recall information from various sources with end-to-end encryption and optional self-hosting.

Security harness that wraps MCP servers as stdio proxies with credential exfiltration prevention, DLP pattern matching, and SSRF protection.

Execute shell commands with strict security policies.

Remote Obsidian vault access over HTTPS with OAuth 2.0 authentication and Cloudflare Tunnel security.

Integrates with Socket's dependency security API to analyze npm and PyPI packages, returning detailed security and quality metrics for vulnerability assessment and dependency management.

Integrates with LLMs and AI agents, allowing you to perform various Auth0 management operations using natural language. For instance, you could simply ask Claude to create a new Auth0 app and get the domain and client ID.

Enables security professionals to inspect and analyze AWS infrastructure for security issues through natural language queries about GuardDuty findings, IAM permissions, S3 buckets, and CloudFront distributions.

Real-time OSINT intelligence platform for global security monitoring.

Integrates multiple AI text detection services to analyze content authenticity, writing style, and potential plagiarism.

Integrates with TIDAL music streaming service, enabling authentication, playlist management, and personalized music recommendations through natural language interactions.

Integrates with Descope's authentication platform to enable natural language-driven user management, authentication flows, and access control operations.

Security controls for 28 frameworks including ISO 27001, NIST, DORA, and PCI DSS with bidirectional mapping.

Enables secure hosting on Google Cloud Run with user-based IAM authentication, providing controlled access to custom servers over the internet for team collaboration.

Retrieves and cleans Microsoft Teams meeting transcripts via Microsoft Graph API with delegated OAuth 2.0 On-Behalf-Of authentication.

Integrates with Bitcoin SV blockchain to enable wallet operations, transaction management, and NFT interactions while maintaining local private key security

Self-hostable orchestration platform providing centralized management, routing, and multi-tenant access control for multiple MCP servers with enterprise-grade security and billing integration.

Integrates with REST APIs through OpenAPI specifications to fetch documentation, explore endpoints, execute authenticated requests, and validate responses with support for multiple authentication methods.

Bridges Java Management Extensions (JMX) with natural language monitoring and management of Java applications through their exposed MBeans, supporting both local JVM connections via the Attach API and remote JMX connections with authentication for multi-application management, MBean discovery, and operational control.

Wraps Nmap for automated security assessments with port scanning, host discovery, service detection, OS fingerprinting, and vulnerability scanning.

Integrates with Clerk authentication to enable secure interactions with protected API routes and server actions for AI-driven operations.

Interactive security operations dashboards for alert triage, threat hunting, and case management.

Unified gateway aggregating multiple MCP servers and API plugins behind a single authenticated endpoint.

Integrates with Illumio's Policy Compute Engine API to enable workload management, label operations, and traffic analysis for zero trust security environments.

Analyzes Solidity smart contracts through AST parsing to trace function execution flows, variable interactions, state changes, and external contract calls for debugging and security auditing.

Analyzes npm and Cargo packages for security risks through typosquatting detection, version analysis, and advisory scanning.

Integrates with Microsoft Graph API to enforce CISA Directive 25-01 security controls for Microsoft 365, enabling automated policy management and compliance monitoring.

Interact with REST APIs with automatic authentication, token caching, and OpenAPI endpoint discovery.

Authorization proxy for MCP servers with JWT validation, policy engine, and behavioral anomaly detection.

Connects to self-hosted Jira instances using Personal Access Token authentication