MCP servers for security
MCP servers whose description mentions vulnerabilities, penetration testing or malware.
715 servers 1.7% of 42,727 in the directory
This category in numbers
- 410 57 % Execution location: local
- 547 77 % Repository URL listed: yes
- 588 82 % Required secrets declared: no
- 372 52 % Delivery form (raw): package
The most frequent value per property, counted across the entries of this category. The full distribution is further down.
Entries
Filter further
- Execution location: local
- Execution location: remote
- Required secrets declared: no
- Required secrets declared: yes
- Repository URL listed: yes
- Repository URL listed: no
- recently updated first
Entries 101 to 150 of 715
| DataNexus MCP | com.datanexusmcp/mcp-server |
|---|---|
| Daystruct | ai.daystruct.api/daystruct |
| Debian Security Advisories — buy per-query in-session (debianwatch) | com.a2awire/data-debian-security-advisory-dsa-linux |
| Deep Noodle Security Review Guide | io.github.myzie/security-review |
| Deepsleuth | io.github.DeepSleuth/deepsleuth |
| Defenter Proxy | io.github.Defenter-AI/defenter-proxy |
| Delentia Sovereign AI Operating System | io.github.delentia-labs/delentia-mcp |
| DepScout | io.github.yc-droid/depscout |
| Depcheck | dev.kaneky/depcheck |
| Dependency Vulnerability Tracker — package security advisories ($0.01/query) | com.a2awire/data-dependency-vulnerability-malicious-package-security |
| Docker Compose Audit | io.github.UnbearableDev/docker-compose-audit |
| Domain Health | com.modernmustardseed/domain-health |
| Domain Security | io.github.OrtaMarco/domain-security-mcp-server |
| DomainDNA | dev.workers.cybermax-tools.cybermax/domaindna-api |
| DomainDNA: Tech Stack Detector, WHOIS & Domain Age API | io.github.shawmena-dotcom/domain-intel |
| DomainDNA: Tech Stack Detector, WHOIS & Domain Age API | io.github.CyberMax-tools/domain-intel |
| Draugr | dev.draugr/draugr |
| Dredd MCP | io.github.pduggusa/dredd-mcp |
| DugganUSA CLI — Local STDIO MCP | io.github.pduggusa/dugganusa-cli |
| EPA EJScreen | com.olyport/ejscreen |
| ERC-8126 Scan | uk.co.cybercentry/erc-8126-scan |
| ESET PROTECT | io.github.WYRE-AI/eset-protect-mcp |
| EchelonGraph CVE & Exposure | io.echelongraph/echelongraph-mcp |
| El Pujante — Subastas públicas de España | es.elpujante/subastas |
| Electron MCP Server | io.github.YawLabs/electron-mcp |
| Eleion Scanner | io.github.hernaninverso/eleion-scanner-mcp |
| Email DNS Preflight x402 | io.github.rosarioV25/email-dns-preflight-x402 |
| Ethereal Goods x402 Tools | store.etherealgoodsco/x402-tools |
| EverThread | io.github.PB-Digital-LLC/everthread |
| Execute darkweb-threat-feed-mcp | io.github.Evozim/darkweb-threat-feed-mcp |
| Execute delegatecall-vulnerability-mcp | io.github.Evozim/delegatecall-vulnerability-mcp |
| Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database | com.exploit-intel/eip-mcp |
| Exploit-DB New Exploits & Proof-of-Concepts — buy per-query in-session (exploitdb) | com.a2awire/data-exploit-db-exploit-database-proof-of-concept |
| ExposureGuard | io.github.ExposureGuard/exposureguard-mcp |
| FAOSTAT MCP | io.github.berba-q/faostat-mcp |
| FEDLIN Scanners | com.fedlin/fedlin-mcp-server |
| FHI MCP Server Security Audit | dev.workers.fhi-llc-1118.polished-truth-c514/fhi-x402-security-tools |
| Fallax | io.fallax/fallax |
| FedRAMP 20x Requirements | io.github.KevinRabun/FedRAMP20xMCP |
| Feldspar free repository security scan | com.project-feldspar/scan |
| Fetter MCP | io.github.fetter-io/fetter-mcp |
| FillTrust security questionnaire corpus | com.filltrust/questions |
| FlightQueue | com.flightqueue/flightqueue |
| FlowSentry | io.github.vasilicasijarvis/flowsentry |
| Framekeep Public Discovery | com.framekeep/public |
| Fray — WAF Security Testing MCP Server | io.github.dalisecurity/fray |
| FreeToolHub | io.github.cavan1977/freetoolhub |
| Freysa Security | dev.freysa.economic-agent-369/freysa-intelligence |
| Frogeye Security Scanner | io.github.frogeye-ai/mcp |
| Gadriel AI Security Harness | io.github.Gadriel-ai/gadriel |
All 715 entries in the list, with filters and pagination
What this category selects
| Field of use, derived from the vendor description | Security derived from: Description (raw) |
|---|
A derived value carries its original data beside it; the derivation rule is published, with a version, on the methodology page.
Caveats, distribution and query
What this category does not say
- Field of use, derived from the vendor description is not declared but computed: from Description (raw). The rule is published, with a version, on the methodology page.
What is measured is what a manifest declares, not what a piece of software does. This registry fetches no repository URL, no endpoint and no package index; nothing here is verified. Which value comes from which source, and by which rule it was formed, is set out in the Methodology.
Every sentence here follows from the condition above, not from an assessment.
How this category is distributed
Delivery form (raw)
715| package | 372 52 % |
|---|---|
| remote | 301 42 % |
| package and remote | 32 4.5 % |
| neither | 10 1.4 % |
Execution location
715| local | 410 57 % |
|---|---|
| remote | 305 43 % |
Repository platform (raw)
715| github | 543 76 % |
|---|---|
| nothing declared | 168 23 % |
| gitlab | 4 0.6 % |
Repository URL listed
715| yes | 547 77 % |
|---|---|
| no | 168 23 % |
Required secrets declared
715| no | 588 82 % |
|---|---|
| yes | 127 18 % |
Icon formats (raw)
715| nothing declared | 659 92 % |
|---|---|
| image/png | 35 4.9 % |
| image/svg+xml | 14 2.0 % |
| image/png, image/svg+xml | 5 0.7 % |
| image/webp | 2 0.3 % |
Per property, the measured values inside this category. The share refers to the 715 entries of the category, not to the registry. Shown are 6 of 8 properties: those whose values spread the most inside this category.
The same category through the interface
curl -s "https://api.tracevero.com/v1/eintraege?art=mcp_server&einsatzgebiet=sicherheit&grenze=200"
The command carries exactly the condition of this page. 715 entries at 200 each are 4 requests; the total is in the X-Gesamt header.
Changes to these entries
https://tracevero.com/aenderungen.atom?thema=einsatz-sicherheit
Both addresses narrow the change stream to exactly the entries in this category. The feed carries an identifier of its own, so a feed reader keeps it apart from the full stream.
Categories sharing entries with this one
Per neighbour its own size and the counted number of shared entries. A category without a single shared entry is not listed here.
tracevero · https://tracevero.com/themen/einsatz-sicherheit?seite=3