Security MCP Servers

Datalab Extension Mcp

Local MCP server that exposes the DataLab Tools browser extension's read-only tools to an MCP host. Holds no credentials; every call runs inside your own browser session.

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Real-time Python package and vulnerability data for AI coding agents.

Ms Sentinel Mcp Server

MCP server for Microsoft Sentinel. Enables access to Sentinel logs, incidents, analytics, and Entra ID data via a modular, queryable interface. Strictly non-production. Designed for use with Claude and other LLMs.

Kru

Local-first MCP password and credential manager for AI agents. Use passwords, API keys, SSH identities, and TOTP without exposing hidden plaintext to the model.

CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.

End-to-end frontend engineering and design orchestrator across 16 foundational pillars.

Governed Obsidian vault access: hybrid retrieval, Markdown-native memory, HITL confirmations.

Accurate Cyber Box Alpha

Accurate-Cyber-Box, an advanced, MCP-server-integrated cybersecurity tool built specifically for penetration testing and cyber drills.

MCP security firewall: stdio wrap proxy or inspection tools; zero runtime dependencies.

AI agent governance: content scanning, audit logs, policy evaluation, session management.

ABAP development from Claude and other MCP hosts: source, transports, tests, ATC, debugger

PostgreSQL schema intelligence from a committed snapshot. No connection, no credentials.

npm registry MCP server — package intelligence, security audits, dependency analysis

MCP server for dnstwist: detect typosquatting, phishing and brand impersonation domains.

Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.

Input firewall for AI agents: scan text and files before an agent reads them. Local, no network.

Experimental reverse CAPTCHA with signed badges and credentials. Not proof of identity or substrate.

Pentesting Mcp Servers Checklist

A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth flows, and remote server risks. Maintained by Appsecco and licensed for remixing.