MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
MCP server that lets Claude Code use secrets without seeing them.
★ 5 -
domain-security-super-auditor-mcp-apigithub.com/deepakshe/domain-security-super-auditor-mcp-apiactive
Automated DNS, SPF, DMARC, DKIM, and SSL security posture auditor. Detect email spoofing risks & open relays. MCP Server & Python SDK.
MIT -
mcp-servergithub.com/middleBrick/mcp-serverupdated this year
MCP server for middleBrick API security scanning — scan APIs for vulnerabilities from Claude, Cursor, or any MCP-compatible AI tool
Apache-2.0 -
Talk to the SecurityScorecard API in natural language from Claude and other MCP clients. Community-built MCP server: 9 tools for issue triage, asset discovery, email-security checks and score insights, with hybrid semantic search across 500+ API endpoint. Unaffiliated with SecurityScorecard, Inc.
npm NOASSERTION -
A modern, full-stack web application for checking the security status of domains, IP addresses, and file hashes using the VirusTotal API v3, Vectara RAG, and Anthropic Claude LLM. Now includes AI-powered enrichment, RAG search, and color-coded UI for enhanced security insights.
MIT ★ 1 -
HTTP security headers scanner API + MCP server: HSTS, CSP, framing, COOP/CORP and cookies, with a score and fix snippets.
MIT -
httptoolkit-mcpgithub.com/NinjaScout77/httptoolkit-mcpupdated this year
MCP server that lets LLMs drive HTTPToolkit for automated API security testing — replay, mutation, and audit on captured mobile, desktop, and CLI traffic
MIT ★ 2 -
MCP server for Website Security Snapshot API — scan HTTP security headers from Claude and AI agents
npm MIT -
mcp-security-scannergithub.com/rohitdhamija/mcp-security-scannerupdated this year
A Model Context Protocol (MCP) server for automated security scanning and live validation of LLM API keys and cloud endpoints
MIT -
Security-focused MCP server for Claude Desktop - Read-only access to KnowBe4 GraphQL API with 92+ optimized queries, PII filtering, and audit logging
MIT ★ 1 -
Model Context Protocol (MCP) server that provides GitHub API tools for user information, security issue creation, and repository security scanning. Built with TypeScript and the MCP SDK
-
mcp-api-toolsgithub.com/rog0x/mcp-api-toolsupdated this year
MCP server for API testing: HTTP requests, endpoint health checks, JWT decode, URL parsing, security header analysis Install: npx @rog0x/mcp-api-tools
MIT -
Model Context Protocol (MCP) server that provides GitHub API tools for user information, security issue creation, and repository security scanning. Built with TypeScript and the MCP SDK
npm MIT -
A sovereign, universal API validation and multi-industry compliance security MCP server supporting OWASP, HIPAA, PCI-DSS, GDPR, and SEO/AEO metadata guardrails.
-
55-tool MCP server for security scanning of MCP servers. Runtime inspection, AST-based SAST, config audit, dependency analysis, OWASP MCP Top 10 compliance. OAuth, TLS, fuzz testing, prompt injection, tool mutation detection. 100% local, zero external API calls.
MIT ★ 5 -
@httpstatus/mcp-servergithub.com/httpstatus-com/httpstatus-mcp-serverupdated this year
24 AI-callable tools for API mocking, chaos engineering, security scanning, OpenAPI validation, distributed tracing, automation workflows, and monitoring.
npm MIT -
A secure, production‑ready Cloudflare Worker API integrating Hotels.com search and booking via RapidAPI for Claude Desktop MCP — built with type safety, robust error handling, and strict secret management.
-
Security intelligence API and MCP server in C: CVE, KEV, EPSS, package, domain and IP lookups, and a watch list that reports what changed.
AGPL-3.0 ★ 37 -
Minimal, secure HTTP & SOCKS5 proxy routed through Tor with fail-closed leak protection, non-root execution, and a REST API for circuit rotation and dynamic exit node selection.
MIT ★ 7 -
shoheigithub.com/kent-tokyo/shoheiupdated this year
Rust MCP server with 168 security tools for Claude — DNS/DNSSEC, TLS, email security, OSINT, threat intelligence, supply chain & cloud. 0 API keys.
MIT ★ 4 -
koi-mcp-serverupdated this year
MCP Server for KOI Security Platform API
npm ISC -
키움증권 REST API 파이썬 라이브러리 — 국내주식 엔드포인트 전수·실시간 WebSocket, sync+async, 토큰 자동 갱신. MCP 서버로 Claude Code 등에서 직접 호출 가능. OpenAPI+ OCX 없이 Linux·macOS 에서 동작 · Python wrapper for Kiwoom Securities REST API — pip install kiwoom-client
MIT ★ 2 -
Model Context Protocol (MCP) server for Firewalla MSP API - Provides real-time network monitoring, security analysis, and firewall management through 28 read-only tools, plus 11 opt-in write tools, compatible with any MCP client
npm MIT -
posturecheck-mcpgithub.com/mvg777/posturecheck-mcpupdated this year
posturecheck-mcp — Domain security checks: SPF, DKIM, DMARC, MTA-STS, TLS certificates and protocol support, and HTTP security headers. No API key.
-
Two-component system bridging Kali Linux penetration testing tools with AI agents via MCP. Flask API server executes 10+ security tools (Nmap, SQLMap, Metasploit, etc.) while MCP client provides seamless AI integration for automated security workflows.
MIT ★ 9 -
copilot-mcp-soc-packgithub.com/NobufumiMurata/copilot-mcp-soc-packupdated this year
Community SOC Pack for Microsoft Security Copilot. Free-API MCP server and OpenAPI plugin bundle (KEV, EPSS, MITRE ATTACK, Abuse.ch, GreyNoise, AbuseIPDB, crt.sh, ransomware.live, etc.) with one-click Deploy to Azure.
MIT -
This is an MCP (Model Context Protocol) server for interacting with Google's Chronicle Security Operations API.
Apache-2.0 -
MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.
npm MIT ★ 155 -
@mbeato/apimesh-mcp-servergithub.com/mbeato/conwayupdated this year
MCP server for APIMesh — 76 x402-payable tools for AI agents (74 APIs + wallet usage + spend caps). Covers web vitals, security headers, SEO audits, email security and verification, tech-stack detection, brand assets, redirect chains, indexability, brand
npm MIT -
Muhabbit from the terminal: a stdio MCP bridge to the Muhabbit news-intelligence API, plus a CLI for market events, exchange security alerts, news and public-record verification.
npm MIT -
vibesafegithub.com/stef41/vibesafeupdated this year
AI-generated code safety scanner for the vibe coding era. Catches hallucinated imports, hardcoded secrets, security vulnerabilities, and dead code. CLI + Python API.
NOASSERTION ★ 1 -
Wazuh-MCP-Servergithub.com/ArfanAbid/Wazuh-MCP-Serverupdated this year
Connect LLMs (Claude, GPT-4o) to your Wazuh SIEM via MCP, natural-language queries for live alerts, agents, rules, compliance, system inventory & security infrastructure, backed by Wazuh Manager and OpenSearch Indexer, with REST API endpoints and a custom Next.js frontend.
★ 1 -
Check a site is ready before you share the link. Link previews for LinkedIn, X, Slack, iMessage and Discord, SPA refresh 404s, security headers, favicons, noindex left on. MCP server and CLI, no API key.
npm MIT -
Claude plugin for Bitsight Security Ratings — a zero-dependency MCP server wrapping the Bitsight REST API as 15 read-only tools, plus 16 skills that turn ratings into board packs, vendor decisions, remediation roadmaps, audit evidence and Indian regulatory incident notifications.
MIT ★ 1 -
BurlyMCPgithub.com/Wolfeitz/BurlyMCPupdated this year
Production-ready MCP server with HTTP API that gives AI agents secure, audited access to Docker, file systems, and notifications. Zero-config container startup, graceful degradation, and enterprise-grade security controls.
MIT ★ 1 -
Transaction security for EVM chains. ShieldBot checks tokens, approvals and signatures before a wallet signs, says what it checked, and reports Unknown instead of Safe when evidence is missing. Browser extension, Telegram bot, REST API, MCP server and SDKs. Covers Ethereum, BNB Chain, opBNB, Base, Arbitrum, Polygon, Optimism and Robinhood Chain.
MIT ★ 2 -
mcp-bridge-providergithub.com/andrextor/mcp-bridge-providerupdated this year
Extensible MCP provider that lets LLMs call PlacetoPay APIs through the MCP Bridge for secure payment and checkout flows.
MIT -
universal-connector-mcpgithub.com/TeodorMCP/universal-connector-mcpupdated this year
Universal MCP server: connect any OpenAPI/Swagger, GraphQL, gRPC or SOAP API to AI agents. Security-first, local, token-efficient. Any API. One server.
MIT ★ 4 -
Unofficial, security-hardened MCP server for the New Zealand Legislation API. Bring your own API key.
npm Apache-2.0 -
Checks Kubernetes manifests for your version: removed APIs, unknown fields, Pod Security, risks.
MIT ★ 1 -
x402 MCP client for live Shopify, stock, security and agent-readiness APIs. Free previews and capped Base USDC purchases.
npm MIT -
Unofficial, security-hardened MCP server for the New Zealand Legislation API. Bring your own API key.
Apache-2.0 ★ 1 -
docker-agent-backendgithub.com/ahmed-gelemli/docker-agent-backendupdated this year
Lightweight, secure Docker agent with REST and WebSocket APIs for container management and real-time monitoring, built with FastAPI.
MIT ★ 3 -
An MCP (Model Context Protocol) server that enables AI assistants to securely interact with an Obsidian vault through the Obsidian Local REST API.
MIT -
MCP server for Toss Securities (토스증권) Open API: Korean stock quotes, holdings, orders, technical analysis
pypi Apache-2.0 -
A Node.js server that connects the Model Context Protocol (MCP) to Gmail, enabling large language models to send, read, and manage emails securely using the Gmail API.
★ 2 -
토스증권 Open API(Toss Securities Open API)를 AI 에이전트가 쉽게 탐색·연동하도록 돕는 MCP 서버 (stdio). Claude·Cursor·Codex 지원.
MIT ★ 4 -
Google Cloud Healthcare API Serverno update data
Provide healthcare data access and querying capabilities by integrating with Google Cloud Healthcare FHIR APIs and public medical research databases. Enable seamless retrieval of patient records, clinical data, and research articles through a secure and authenticated MCP interface. Enhance healthcare applications with real-time clinical insights and research information.
smithery -
Expose secure REST endpoints & MCP servers from WordPress for ChatGPT, Claude, Gemini, and custom AI agents. Supporting API Keys and OAuth2.
MIT ★ 2 -
A self-hosted unified inbox for humans and AI agents, with IMAP/POP3, SMTP, MCP, and a secure send API.
★ 3 -
APIMeshgithub.com/mbeato/APIMeshupdated this year
APIMesh — 23 pay-per-call web analysis APIs + 16-tool MCP server with autonomous API generation. Security audits, SEO, tech stack detection. x402 + Stripe MPP payments.
MIT ★ 6 -
Secure, fully-featured MCP server for the Front Platform API — 26 tools, 200+ actions, OAuth support, configurable policy engine
npm MIT -
Stateless x402 HTTP 402 micro-API on Cloudflare Workers for Web3 security, Aave liquidations, and DEX slippage settling gaslessly in Base & Polygon USDC
-
Turn any relational database into a secure MCP server by configuration: API Key auth, table ACL, SQL AST validation, audit log and a web admin console.
npm MIT -
Open-source desktop workbench for SOAP, REST, GraphQL, gRPC and WebSocket APIs — WSDL, OpenAPI and .proto import, WS-Security, environments, history, a CLI and an MCP server. Projects are plain files made for git. Electron + TypeScript.
Apache-2.0 ★ 1 -
Shodan Servergithub.com/BurtTheCoder/mcp-shodan#readmeno update data
A Model Context Protocol server for querying the Shodan API and Shodan CVEDB, providing access to network intelligence and security services.
smithery -
@mseep/safe-omada-mcpgithub.com/gaspareduard/omada-mcpupdated this year
Security-focused Model Context Protocol server for TP-Link Omada Open API workflows
npm MIT -
github-insight-mcpgithub.com/wjddusrb03/github-insight-mcpupdated this year
Stop opening 12 tabs to evaluate a library. GitHub repos + npm/PyPI packages + security advisories in one MCP tool call. Zero API keys required.
MIT -
MCP server for Toss Securities (토스증권) Open API: Korean stock (KRX) quotes, holdings, orders & technical analysis for Claude and other AI agents. Read-only by default.
Apache-2.0 ★ 1 -
Instagram & Facebook MCP server for Meta Marketing API v26 with secure token redaction, cursor pagination, and OSS tooling for campaigns, ad sets, ads, creatives, insights, and reports.
AGPL-3.0 ★ 79