Security MCP Servers

Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.

Find AWS waste with your own read-only credentials. Runs locally. Nothing is sent to CloudWise.

Generic Baserow API client MCP server with automatic 2FA (TOTP) auth and OpenAPI validation.

Use WhatsApp from AI apps through the Kaption extension. OAuth 2.1 relay that cannot read messages.

Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

eBay MCP — Browse + Taxonomy APIs via client_credentials OAuth

Cybersecurity training, simulation, and incident response MCP server

MCP B24

MCP server for Bitrix24 - wraps the REST API (CRM, Tasks, IM, Disk, Calendar, HR, Mail, Telephony, Workflows, Open Lines, Bots, Document Generator). 41 tools, ~870 actions, RU/EN, webhook + OAuth 2.0.

AI safety middleware — detects self-harm and criminal intent in LLM prompts.

Evidence-backed codebase understanding with file:line citations, for AI clients over MCP.

MCP server that reads C2PA Content Credentials: what an image declares about its own origin

Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.

Local MCP proxy: collapses N servers' tools into 4 meta-tools and compresses large tool outputs.

Cordon Cli

The security gateway for AI agents — firewall, auditor, and remote control for MCP tool calls

Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.

Authorization layer between AI agents and money: ALLOW/APPROVAL/DENY, budgets, audit.

Three-layer firewall for MCP: content, egress and action policy. Proxy or server.

Secure Rag Multi Agent

Secure Retrieval-Augmented Generation (RAG) with role-based access control using Mastra AI orchestration, with JWT Secure, also Deep Research built with Cedar & Next.js. Gemini, OpenAI, Openrouter, & Gemini CLI usable. Also exposes tools, agents as MCP Server Also A2A Agent Cards

Runtime governance enforcement for AI agents. Zero token overhead.