"Official GitHub MCP server" matching MCP servers:

Enables querying GitHub Security Advisories from a local cloned advisory database using tools like list_advisories and get_advisory.

A web application for securely managing GitHub tokens and providing centralized access to various development tools integrated with GitHub accounts.

Enables Claude to authenticate with GitHub OAuth and access tools for user information, calculations, and GitHub repositories.

An MCP server with GitHub OAuth for remote connections, providing tools for arithmetic, GitHub user info, and image generation.

Audits GitHub Actions workflow files for supply-chain risks like script injection, leaked tokens, unpinned actions, and broad permissions.

Scans diffs, files, and snippets for leaked secrets like AWS keys, GitHub tokens, and private keys, returning redacted findings while running fully locally without network calls.

Enables AI assistants to monitor GitHub repository health by calculating health scores, fetching repository metadata, analyzing Dependabot alerts, checking CI/CD status, and retrieving code scanning alerts.

Enables LLMs to access realtime CVE intelligence aggregated from NVD, CISA KEV, EPSS, GitHub advisories, PoC discovery, and Metasploit/Nuclei tooling, providing vulnerability details, exploitation signals, and prioritized triage verdicts.

Official VirusTotal MCP server for AI agents: threat intelligence, file analysis, and recovery through VTAI.

Enables capturing evidence, retrieving platform takedown processes, and drafting DMCA/legal notices for content removal, using the Official AI API.

Enables reviewing GitHub Actions workflows for outdated actions, deprecated Node runtimes, retired runners, deprecated commands, and security risks, with file, line, and fix for each finding.

Official vetkit MCP server. Audit GitHub and Bitbucket Cloud repositories for leaked secrets, vulnerable dependencies, insecure code, AI code risks and production readiness, then read findings and reports from Cursor, VS Code, Codex or Claude. Agent guardrails check packages before install and scan changes before commit. Write tools need user confirmation; releases carry npm provenance.

Supply chain risk scoring for npm, PyPI, and GitHub repos

Analyzes GitHub Pull Request diffs for security vulnerabilities and data leaks, using a deterministic filter to skip trivial changes and an AI-powered analysis for logic changes.

Enables safe GitHub automation by queuing write operations for admin approval before execution.

Enables AI agents to pay per call for live package-safety and GitHub merge-readiness trust signals via the x402 protocol.

An MCP server that enables AI agents to perform comprehensive GitHub security audits across org settings, repositories, Actions workflows, secrets, supply chain, and access control using 39 tools and 45 checks.

Enables AI assistants to search, inspect, compare, and evaluate GitHub repositories using read-only tools, including topic discovery, repository health scoring, security advisories, dependency audits, and supply-chain risk checks. It returns concise, readable results and can work without a token, with optional authentication for higher rate limits and code search.

Enables AI agents to administer GitHub Enterprise (Cloud & Server) — organizations, members, teams, repositories, rulesets, security alerts, and Actions — through guarded MCP tools that are read-only, org-scoped, audited, and human-confirmed by default. It also ships an opinionated security-posture baseline that scores a live organization and can apply hardening fixes.

Analyzes Microsoft Sentinel solutions from GitHub repositories to map data connectors to Log Analytics tables and query security content like detections and playbooks. It provides instant access to the official Content Hub or private repositories through a high-performance pre-built index.

Enables AI coding agents to read GitHub issues and pull requests and to add comments only on allowlisted repositories, with every call recorded in an append-only redacted audit log.

This server integrates with GitHub Advanced Security to load security alerts and bring it into your context. Supports Dependabot Security Alerts, Secret Scanning Alerts, Code Security Alerts

Enables an AI assistant to read, search, summarize, and triage GitHub issues and repository activity through an allowlisted, read-only set of tools, prompts, and resources. Every input is validated, every repository must be explicitly approved, and all third-party issue text is fenced off and marked as untrusted before it reaches the model.

Enables AI clients such as ChatGPT and Claude to safely read, analyze, update, verify, and audit GitHub Projects v2 through OAuth-secured MCP connections with role-based access control, guarded writes, bulk preview/approval/apply, checkpoints/deltas, and durable audit trails.

Audits infrastructure configurations (Dockerfiles, GitHub Actions, Kubernetes, Terraform/Compose) against 14 deterministic security rules, returning BLOCK/REVIEW/PASS verdicts and signing attestations. Helps agents verify deployment configs before applying them.

Enables agents to authenticate and route webhooks from Shopify, Stripe, GitHub, Slack, and PayPal using HMAC-SHA256 constant-time verification and timestamp replay-window validation. It then multiplexes verified events into agent workflows without external runtime dependencies.

Security scanning for AI agent skills exposed as MCP tools, enabling skill analysis from ClawHub, GitHub, skills.sh, or raw URLs.

Enables AI agents to scan GitHub repositories and user profiles for malware signals before cloning, providing risk verdicts pinned to specific commits.

MCP server for interacting with Keepit backup and data protection services. Enables monitoring, management, and security operations through natural language.

The official MCP Server for Cylera. Brings context about device inventory, threats, risks and utilization powered by the Cylera Partner API into an LLM.

Official MCP server built into Casdoor, the open-source identity and access management (IAM) and single sign-on (SSO) platform. It exposes Casdoor's users and applications as MCP tools over a JSON-RPC endpoint at /api/mcp, with per-tool authorization driven by OAuth scopes, and can also act as an MCP gateway that proxies and authorizes agent access to upstream MCP servers.

MCP server for AI search crawler governance, brand safety, and search infrastructure auditing. Provides tools to audit robots.txt, canonical links, sitemaps, redirects, and send IndexNow notifications.

A read-only MCP server that verifies public GitHub commits against static contracts and returns signed receipts, supporting only exact lowercase 40-character commit SHAs.

The official WhoisXML API MCP server: 35 first-party tools for WHOIS, DNS, IP geolocation, threat intel, typosquatting, email verification, and bulk — in Claude, Cursor, VS Code, or any MCP client.

Scan-as-a-Service for MCP servers. Wraps the compuute-scan static security scanner with HTTP and MCP endpoints to analyze public GitHub repos for MCP-specific vulnerabilities.

MCP server for securely managing GitHub & GitLab credentials in an encrypted vault, allowing AI agents to retrieve tokens by org or group name automatically.

Exposes a stateless Model Context Protocol endpoint that MCP clients reach over Streamable HTTP and sign in to with GitHub OAuth, exposing example tools such as example_echo_message that demonstrate annotations, scope checks, and error mapping.

Enables AI agents to securely perform privileged actions like creating GitHub issues by minting short-lived, single-purpose tokens on demand, with policy enforcement and audit logging.

Enables read-only, source-backed vulnerability investigations, recent intelligence discovery, CVE/package evidence review, and observed-change timelines through cached MCP tools covering briefings, CISA KEV, EPSS, GitHub advisories, and OSV records.

Enables users to list their open GitHub pull requests and verify their identity through Keycard-backed, short-lived tokens while connecting via Claude Code.