Security MCP Servers

Predeploy security scanner. 80+ patterns. Runs locally. Optional x402 attestation.

Syncable Cli Mcp Server

MCP server for syncable cli which scans code repo for security risks, vulnerabilities and project overview.

Kolide Mcp Server

Model Context Protocol server for Kolide security platform

MCP server for interacting with 1Password via the CLI to read and manage credentials.

Cato Mcp Server

This repository provides a local mcp-server for Cato Network's public GraphQL API

Phantom Mcp

🔒 Ensure enterprise security and compliance with PHANTOM MCP, a robust framework for authorized security auditing and modern risk management.

MCPHammer

MCP security testing framework for evaluating Model Context Protocol server vulnerabilities

KALI_MCP_SERVER

KALI_MCP_SERVER —— 一个基于配置的容器化安全自动化平台，通过 JSON-RPC 统一编排和调用渗透测试工具。

Token-efficient Ghidra RE: decompile, xrefs, Swift/ObjC, ELF/Mach-O, async analysis

Tengu

AI-powered penetration testing MCP server

A secured scoped SSH MCP server for executing safe read-only diagnostic DevOps / SysOps commands

Nist Csf 2 Mcp Server

MCP server implementation for NIST Cybersecurity Framework 2.0

Mcp Server Conceal

Privacy-focused MCP proxy that intelligently pseudo-anonymizes PII in real-time before data reaches external AI providers, maintaining semantic relationships for accurate analysis

MasterMCP

A demonstration toolkit revealing potential security vulnerabilities in MCP (Model Context Protocol) frameworks through data poisoning, JSON injection, function overriding, and cross-MCP call attacks, exposing AI security issues while providing defense recommendations. For educational and research purposes only.

Prompt-injection firewall for AI agents — scan untrusted text before LLM calls.

AI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.

Vulnerable Mcp Servers Lab

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

MCP server for x64dbg debugger - 23 mega-tools for AI-powered reverse engineering and debugging

Japanese LLM security — prompt injection detection (jpi-guard) + PII masking (PII Guard). Free.