MCP Security Scanner
OfficialRelated Servers
Alternatives to MCP Security Scanner
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityDmaintenanceProvides real-time OWASP ASVS security guidance and vulnerability scanning for AI coding agents. Enables proactive security during code generation by checking security requirements, scanning code for vulnerabilities, and suggesting secure code fixes.3MIT

Cybrium MCP Serverofficial
AlicenseNot gradedqualityBmaintenanceProvides AI coding assistants with real-time security scanning superpowers, including SAST, secrets detection, dependency CVE scanning, and web vulnerability assessment.15 npmApache 2.0- AlicenseAqualityBmaintenanceEnables AI assistants to scan Terraform and Dockerfiles for security misconfigurations, returning structured Checkov findings that can be explained in plain language.2MIT
- AlicenseAqualityDmaintenanceEnables AI assistants to scan project dependencies and Infrastructure as Code files for security vulnerabilities and misconfigurations. It also provides automated fixing capabilities to remediate identified security issues.183MIT
- AlicenseAqualityBmaintenanceEnables AI agents to scan code for security vulnerabilities using multiple static analysis tools, with support for filtering, deduplication, and CI/CD integration.272MIT

Apiiro Guardian Agent MCPofficial
AlicenseNot gradedqualityCmaintenanceEnables AI coding assistants to leverage Application Security Posture Management (ASPM) capabilities, allowing developers to write secure code, query security risks, trigger diff scans, and manage security findings directly from their AI assistant.4Apache 2.0
TDQS
Scored across 15 tools
Multiple tools serve overlapping purposes: scan_with_bandit, scan_with_semgrep, and scan_with_ash all analyze source code snippets, while scan_with_checkov, scan_with_trivy, and scan_with_ash overlap for IaC snippets. Similarly, directory scan variants duplicate capabilities. The descriptions clarify differences, but the boundaries between using a specialized scanner versus the aggregated ASH scanner are unclear, causing potential misselection.
Tool names follow a consistent verb_noun pattern with snake_case: scan_with_<scanner> for snippets, scan_directory_with_<scanner> for directories, and utility verbs like get_supported_formats, check_ash_availability, generate_security_report. The naming clearly reflects the action and target.
15 tools is at the upper boundary of a reasonable count, but the presence of both snippet-level and directory-level variants for the same scanner, plus an aggregated scanner (ASH) that subsumes several individual scans, makes the set feel larger than necessary. Still, the count is not excessive for the breadth of scanners covered.
The server covers a comprehensive range of security scanning needs: code snippets (Semgrep, Bandit, ASH), IaC (Checkov, Trivy, ASH), directories (Grype, Checkov, Bandit, Semgrep, ASH, Syft), container images (Trivy), plus discovery utilities and report generation. There are no significant dead ends; the tool set fully addresses the stated security scanner domain.