Security MCP Servers

Bloodhound_mcp

A Model Context Protocol (MCP) server to converse with data in Bloodhound

CyberStrike

AI-powered offensive security agent. Autonomous pentesting with 13+ specialized agents, 120+ OWASP test cases, 15+ LLM providers, and Bolt remote tool servers. Your AI red team.

Casdoor

An open-source AI-first Identity and Access Management (IAM) /AI MCP & agent gateway and auth server with web UI supporting MCP, A2A, OAuth 2.1, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

Aderyn

Solidity Static Analyzer that easily integrates into your editor

Reverse Engineering Assistant

MCP server for reverse engineering tasks in Ghidra 👩‍💻

Unidbg

Allows you to emulate an Android native library, and an experimental iOS emulation

MCP server for secure passwords, passphrases, and strength checking.

Audit MCP servers from inside Claude Code. 10 OWASP checks, A-F grade, live leaderboard.

Pastewatch

Detects and obfuscates sensitive data before it reaches AI systems — clipboard, CLI, and MCP server

Claudit Sec

Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connectors, scheduled tasks, and permissions.

Toolhive

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

Mcp Auth Proxy

MCP Auth Proxy is a secure OAuth 2.1 authentication proxy for Model Context Protocol (MCP) servers

Wassette

Wassette: A security-oriented runtime that runs WebAssembly Components via MCP

Agentshield

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

Scanorama

Scanorama is a command-line tool to perform static analysis of any MCP-based server (built with official MCP SDKs) and detect potential security issues.

Reversecore_MCP

A security-first MCP server empowering AI agents to orchestrate Ghidra, Radare2, and YARA for automated reverse engineering.

Mcp Security Hub

A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.

LitterBox

A secure sandbox environment for malware developers and red teamers to test payloads against detection mechanisms before deployment. Integrates with LLM agents via MCP for enhanced analysis capabilities.

Heddle

Heddle — The policy-and-trust layer for MCP tool servers. Turn YAML configs into validated, policy-enforced MCP tools.

Lunar

lunar.dev: Agent native MCP Gateway for governance and security