"Ars Technica" matching MCP servers:

• arc-gate-mcp

  9hannahnine-jpg

  A

  license

  A

  quality

  A

  maintenance

  Runtime governance proxy for MCP tool calls. Inspects tool results for prompt injection and capability abuse before they reach your agent, blocking attacks that exploit the MCP trust boundary.

  Last updated 2026-05-31

  4

  1

  2

  AGPL 3.0

• AWS Security Posture Advisor

  timwukp

  A

  license

  A

  quality

  C

  maintenance

  Orchestrates multiple AWS security services to provide comprehensive security assessments, threat analysis, and multi-framework compliance monitoring. It enables users to perform automated remediation recommendations and incident investigations through a unified Model Context Protocol interface.

  Last updated 2026-05-16

  3

  1

  Apache 2.0

• ArkForge Trust Layer

  ark-forge

  A

  license

  A

  quality

  D

  maintenance

  Third-party certifying proxy — sign any HTTP call (AI agents, webhooks, microservices) with an independent Ed25519 signature, RFC 3161 timestamp, and Sigstore Rekor anchor.

  Last updated 2026-04-23

  4

  2

  MIT
• 

  AWS SRA Verify MCP Serverofficial

  awslabs

  A

  license

  A

  quality

  F

  maintenance

  Enables AI agents to assess AWS environments against the AWS Security Reference Architecture (SRA) by providing tools to discover, describe, and run security checks across AWS services and accounts.

  Last updated 2026-06-04

  5

  2

  Apache 2.0

• AWS‑IReveal‑MCP

  Brucedh

  A

  license

  A

  quality

  D

  maintenance

  AWS‑IReveal‑MCP

  Last updated 2025-08-11

  25

  8

  Apache 2.0

• aws-security-mcp

  jowhee327

  A

  license

  A

  quality

  A

  maintenance

  MCP server for automated AWS security scanning — 19 modules, risk scoring, zero write operations.

  Last updated 2026-07-10

  35

  42

  MIT

• ProjectDiscovery MCP Server

  intelligent-ears

  F

  license

  A

  quality

  D

  maintenance

  Integrates ProjectDiscovery security tools to perform automated reconnaissance, subdomain discovery, and vulnerability scanning. It enables comprehensive bug hunting workflows by chaining tools like subfinder, naabu, and nuclei into a unified pipeline.

  Last updated 2025-12-06

  7

  4

• mcp-blast-radius

  aos-standard

  A

  license

  B

  quality

  B

  maintenance

  MCP Blast-Radius Auditor — statically extract what an MCP server can touch and detect declaration divergences against manifest.json. Stdio MCP (mcp-blast-radius) plus CI gate (mcp-blast-radius-gate). pip install mcp-blast-radius==0.2.0

  Last updated 2026-07-13

  2

  MIT

• AWS Customer Playbook Advisor

  eisuke000111

  F

  license

  B

  quality

  D

  maintenance

  Provides real-time access to AWS security best practices, incident response playbooks, and preventive security measures from the official AWS Customer Playbook Framework repository. Enables users to query AWS security guidance for services like S3, IAM, EC2, and RDS through natural language.

  Last updated 2025-06-30

  3

• AWS Cognito MCP Server

  gitCarrot

  F

  license

  D

  quality

  D

  maintenance

  A Model Context Protocol server implementation that connects to AWS Cognito for authentication and user management, providing tools for user flows including sign-up, sign-in, and password management.

  Last updated 2025-03-23

  13

  2

• AWS MCP Audit

  oldcoder01

  F

  license

  D

  quality

  D

  maintenance

  Enables read-only assessment of AWS environments by inventorying resources, running security and operational checks, and generating actionable reports with cost analysis. Designed for contractors with support for assume-role authentication using external IDs.

  Last updated 2026-01-02

  10

• AWS Security MCP

  groovyBugify

  A

  license

  -

  quality

  D

  maintenance

  A Model Context Protocol server that connects AI assistants like Claude to AWS security services, allowing them to autonomously query, inspect, and analyze AWS infrastructure for security issues and misconfigurations.

  Last updated 2025-07-25

  84

  Apache 2.0

• MCP OAuth2.1 with AWS Cognito

  empires-security

  A

  license

  -

  quality

  F

  maintenance

  Demonstrates how to secure an MCP server with OAuth 2.1 using AWS Cognito, with support for dynamic client registration and client ID metadata documents.

  Last updated 2026-03-26

  66

  MIT

• AWS Security MCP Server

  skjortan23

  A

  license

  -

  quality

  D

  maintenance

  Enables management and analysis of AWS security groups, S3 buckets, and VPC connections via MCP.

  Last updated 2026-02-26

  7

  MIT

• MCP Credentials Broker

  ars-system

  A

  license

  -

  quality

  F

  maintenance

  Provides secure OAuth2-based credential management for MCP servers, allowing agents to obtain short-lived token references without exposing raw secrets.

  Last updated 2026-03-31

  11

  MIT

• mcp-dora

  ark-forge

  A

  license

  -

  quality

  D

  maintenance

  DORA compliance scanner MCP server that scans projects for regulatory gaps, classifies entities, generates reports, and optionally produces ICT registers and incident templates with cryptographic certification.

  Last updated 2026-04-09

  MIT

• arx-mcp-server

  GetHammerpath

  A

  license

  -

  quality

  D

  maintenance

  MCP server that integrates with ARXsec.io API to execute security scans, compliance checks, secrets management, and remediation actions with policy enforcement, audit logging, and human approval workflows.

  Last updated 2026-04-17

  MIT

• AWS Compliance MCP Server

  aditya0529

  A

  license

  -

  quality

  C

  maintenance

  Enables LLMs to perform automated compliance scanning of AWS infrastructure against PCI-DSS, CIS, and Well-Architected frameworks. It provides tools for scanning, remediation, and audit report generation.

  Last updated 2026-07-12

  MIT

• ARL MCP Improved

  Shaoshi17

  A

  license

  -

  quality

  C

  maintenance

  An MCP server for AI security analysis, enabling vulnerability scanning, sensitive information leak detection, and GitHub code leak monitoring via 48 tools.

  Last updated 2026-02-20

  MIT

• AWS Security Remediation MCP

  yslee96

  A

  license

  -

  quality

  D

  maintenance

  Provides automated security incident remediation tools for AWS, enabling real-time threat response by quarantining malicious S3 objects, restricting IAM access, and updating security groups.

  Last updated 2026-03-03

  MIT