Security
Identity and security management tools. Enables authentication, data protection, and system monitoring.
MCP ServersBrowse all →
- AlicenseAqualityAmaintenanceAziel Runtime is a node-meshed MCP software orchestration suite for digital forensics, auditing, provenance, research, intelligence-support, and secure agent workflows, with a single gated execution path, compartmentalized engines, verifiable receipts, temporal integrity, and explicit capability refusal. It is not merely an API aggregator or generic tool router.362Apache 2.0
- AlicenseAqualityAmaintenanceAgent trust & data safety MCP: PII/secret redaction, email validation, sanctions screening, and OSV vulnerability checks for AI agents.4130MIT
- AlicenseAqualityAmaintenanceHand a secret to a coding agent without the secret entering the transcript.1232MIT

Draugrofficial
AlicenseAqualityAmaintenanceSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.6139Apache 2.0
Maplith Bridgeofficial
AlicenseAqualityBmaintenanceConnect your database to your AI agent, read-only, without sharing your password. Maplith Bridge serves a folder of data files over MCP behind a token you create, and fills it from PostgreSQL under a role that can only read.62171 npm1Apache 2.0
DeltaX Preflightofficial
AlicenseAqualityCmaintenanceLocal MCP decision gate for AI agents and CI/CD: check candidate actions against owner-controlled policy and proposal-bound evidence. Three read-only tools report admissible options, missing evidence, and SHA-256 receipts. No selection, execution, or DeltaX API key.123219 npm1Apache 2.0- AlicenseAqualityAmaintenanceProof of control for AI agents, through the proof.holdings API: verify domains, phone numbers and messenger accounts, ask a human to approve an action, and issue and verify Proofs of Delegation.2167351 npmMIT

RevClamp MCP Serverofficial
AlicenseBqualityBmaintenanceConnects MCP-compatible clients and CI pipelines to a hosted endpoint exposing tools for SaaS revenue-leak audits, ghost-usage evaluation, EU VAT validation, B2B net-terms reconciliation, webhook signature verification and replay simulation, dispute-evidence staging/linting, and ROI calculation.29MIT
WhisperGraphofficial
AlicenseAqualityDmaintenanceSelf-hostable MCP server for WhisperGraph — a graph of 7.39B nodes / 39B edges mapping DNS, BGP, GeoIP, WHOIS, and threat intelligence. Six read-only tools (Cypher query + schema introspection + threat assessment), six resources, eight investigation prompts. stdio and Streamable HTTP transports.870 npm1Apache 2.0
Strac MCP DLPofficial
AlicenseAqualityAmaintenanceDetect and redact PII, PHI, PCI and secrets — SSNs, credit cards, passports, API keys and cloud credentials — in text and in local files, using the Strac DLP API. Five tools: redact_text, detect_sensitive_data, detect_file, redact_file and detokenize.58MIT
ZeroPath MCP Serverofficial
AlicenseBqualityCmaintenanceAllows developers to query security findings (SAST issues, secrets, patches) using natural language within AI-assisted tools like Claude Desktop, Cursor, and other MCP-compatible environments.1710MIT
@verigent/mcp-serverofficial
AlicenseAqualityBmaintenanceMCP server for Verigent's AI agent verification, enabling agents to verify themselves, check other agents' status, and browse the leaderboard.1420 npmApache 2.0
BackBond Agent Scanofficial
AlicenseAqualityBmaintenanceLocal static inspection of MCP and AI-agent tool manifests before attachment, reporting findings and missing evidence without executing proposed tools. Results do not establish runtime safety.2113 npm1MIT
Fidensa MCP Serverofficial
AlicenseAqualityDmaintenanceEnables AI agents to verify trust scores, search certified capabilities, compare side-by-side, and submit experience reports through Fidensa's certification authority.7146 npmMIT
Mission MCPofficial
AlicenseBqualityAmaintenanceTrust Graduation gate for AI agents: visible approval ceremonies and receipt-backed boundaries for consequential actions.5100 npmApache 2.0
Bitwarden MCP Serverofficial
AlicenseBqualityBmaintenanceEnables AI assistants to securely manage Bitwarden vault items, folders, attachments, and organization administration through the Model Context Protocol.59344 npm298GPL 3.0
mailfact-mcpofficial
AlicenseAqualityCmaintenanceProvides read-only access to a Mailfact tenant, letting users list domains, sending sources, and aggregate reports, and query DMARC alignment, reporter coverage, and record-level data through MCP tools. It returns counts and rows only, without recommending policies or scoring domains.936 npmMIT
Hellō Admin MCP Serverofficial
AlicenseAqualityDmaintenanceEnables AI assistants to create and manage Hellō applications with full developer context, supporting app creation, updates, secret generation, and logo management through a single unified tool.1198 npm4MIT
a202-mcpofficial
AlicenseAqualityCmaintenanceOfficial reference MCP server for A202, the Verifiable Agreement Protocol for Agent-Led Commerce. Gives an agent the seven capabilities two organisations need to buy and sell directly: issue a mandate, check what an agent may do under it, approve an act needing a person, form an agreement, exchange obligations, verify a record by replay, and read the transaction record back.74Apache 2.0
PatrowlIntelMCPofficial
AlicenseAqualityDmaintenanceExposes PatrowlIntel vulnerability intelligence (CVEs, EPSS, CISA KEV, public exploits, trending attacks) via MCP tools like search_cves, get_cve, and list_trending_attacks.32MIT
Koru Shield MCP Serverofficial
AlicenseBqualityBmaintenanceEnables AI assistants to manage DNS filtering accounts by blocking or allowing domains, checking policies, reviewing blocked queries, and managing filter categories, schedules, and devices through natural language.1639 npm1MIT
Cork MCP Serverofficial
AlicenseAqualityBmaintenanceEnables AI assistants to query Cork's cyber-insurance API for MSPs, including client warranty status, cyber scores, risk/compliance events, software vulnerabilities, integrations, invoices, and installer metadata via MCP tools.23Apache 2.0
pageguard-mcpofficial
AlicenseAqualityFmaintenanceScan any project or website for privacy compliance issues directly in your AI coding tool. Detects tracking tech, cookies, and third-party data collection. Works in Claude Code, Cursor, and Windsurf.397 npm1MIT
aliasmail-mcpofficial
AlicenseAqualityCmaintenanceThis server enables AI agents to create instant, zero-log disposable inboxes for signups and automated workflows. It also provides robust tools for autonomous extraction of verification codes and deep email security auditing.12MIT- AlicenseAqualityBmaintenanceVerify sealed voice recordings (WAV) from any AI assistant: verdict (verified, unsealed, warning, alert) and the seconds that changed after sealing. Verify-only, no secrets.2Apache 2.0
- AlicenseAqualityAmaintenanceKnow-your-agent backed by ICP-Brasil: a company (e-CNPJ) or a person (e-CPF) signs that an AI agent acts for them, within a mandate. Signed credentials and verdicts, CRL checks, MCP + HTTP with x402, and an npm library to verify or issue without a hosted service.2102MIT

Sadu MCP Serverofficial
AlicenseAqualityBmaintenanceEnables AI assistants to read and search a bilingual CORF register, follow ISO 27001, PCI DSS and SWIFT CSCF crosswalks in any direction, and score exported assessments.12MIT- AlicenseAqualityCmaintenanceEnables MCP-capable agents to create and invoke OpenServerless endpoints, manage secrets, and configure integrations such as S3, PostgreSQL, Redis, Milvus, and MongoDB.13Apache 2.0

delentia-sovereignofficial
AlicenseAqualityAmaintenanceConnects autonomous AI agents and IDEs to the Delentia Sovereign Edge Network, providing deterministic security gating, structured reasoning, context compression, and swarm coordination tools.5329 npmApache 2.0
EyalSec MCP Serverofficial
AlicenseBqualityAmaintenanceGives Claude, Cursor and any other MCP client read-only access to an EyalSec account, so users can search and inspect security events, trace untrusted data to its sink, and check machine, run, rule and account status through plain-language questions. No write operations exist, so a full-access key still cannot change anything through it.1944 PyPIMIT
MCP ConnectorsBrowse all →
Pugi is an AI product team in your chat. Describe a business in a few sentences and Pugi plans, designs, builds and checks a real website, shows a live preview, and puts it live on its own address. Ask for changes in plain words. Pugi also draws four whole logos for a business name with a brand kit, checks any public website or GitHub repository for leaked keys, vulnerable dependencies and risky code, and helps you start from public site templates. Sign in with a Pugi account (OAuth).
Signed, traced record of what an npm package or file attempts when run, network included. No key.
External checks of TLS, HTTP, email domain, DNS, ports, blocklists and domain expiry
Verify claims, resolve FIGI identity, extract claims, and sign x402 delivery receipts over MCP.
Prompt-injection shield for agents: read pages, scan content, audit MCP servers and skills. x402.
Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs
Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.
Prove end users to agents and apps: login-links, OIDC clients, and API keys over remote MCP
Check without an account whether ProofSnap issued an evidence package, by the SHA-256 of its manifest.json. No sign-in needed.
Causal check on AI agent claims, from ad-spend/ROAS lift to any decision: pass, caution or hold.
WHOIS, RDAP, DNS, IP / ASN / CIDR and Web3 name (ENS, Unstoppable, Handshake) lookups. No API key.
Free vulnerability lookup and feeds for agents. Look up any CVE, GHSA or OSV ID, read vulnerability feeds filtered by technology, ecosystem, critical or CISA KEV, and check a lockfile for known vulns. Data is merged from the CVE List, GitHub Advisories, OSV, NVD, EUVD, CISA KEV, EPSS and Exploit-DB. No account or API key. Built by Sazabi.
Check whether a website is trustworthy: trust score, verdict, red flags and a citable report.
Pre-trade token safety check for AI agents. Simulates a sell before you buy, then returns one low/medium/high/unknown verdict with the signals behind it: sellability, buy/sell tax, liquidity depth, pair age, same-ticker impersonation, owner powers from bytecode. Ethereum, BSC, Base, Solana. Fail-closed - a check that cannot run answers unknown, never low. Publishes its own measured error rate with the benchmark harness in the repo. Free, no signup, no API key, MIT.
VPN, proxy, Tor, hosting and CDN detection for any IP address, from the VPNDetection API.
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
What breaks between versions, vulnerabilities, compatible versions, EOL dates: npm, PyPI, Rust, PHP.
Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.
Security patrol management: missed rounds, suspicious scans, incidents and checkpoint setup.
Brand protection: watch domains, trademarks, apps and search ads for impersonators, triage matches.