Skip to content

MCP servers for security

MCP servers whose description mentions vulnerabilities, penetration testing or malware.

715 servers 1.7% of 42,727 in the directory

This category in numbers

The most frequent value per property, counted across the entries of this category. The full distribution is further down.

Entries

Filter further

Entries 151 to 200 of 715

Entries
GhostFreeio.github.shane-js/ghostfree
GitHitscom.githits/githits
GitHub Actions Auditio.github.UnbearableDev/github-actions-audit
Go Vulnerability Database Tracker — buy per-query in-session (govulnwatch)com.a2awire/data-go-vulnerability-golang-security
GoldBean MCP Serverxyz.goldbean-api/goldbean-mcp
Google Workspace Admin Security-Audit MCPio.github.shigechika/gwsadm-mcp
Grasp — Code Architecture & Dependency Analysisio.github.ashfordeOU/grasp
Grisoco AI security auditscom.grisoco/audits
Guarded WhatsAppio.github.peter-tnc-453/guarded-whatsapp-mcp
Guava Wallet Intelligenceio.github.Guava-Research/mcp-server
HOL Guardio.github.hashgraph-online/hol-guard
HTTP Headers Analyzer APIio.github.Br0ski777/http-headers
Hacker Bob public recordsio.github.bobnetsec/hacker-bob-public-records
Hares — MCP security scannerio.github.alialrikabi313/hares
HeaderGuarddev.workers.mike-tusa.headerguard/headerguard
Helixar Securityai.helixar/mcp
HoneyLabsnet.honeylabs/mcp
Horry County Construction Leadsio.github.amc2144/agent-vending-mcp
Horry County Construction Leadsio.github.amc2144/construction-leads
IMPOCOR-AI Nexusio.github.professoryilmaz1/impocor-ai-nexus
IPGeolocation.io MCP Serverio.github.IPGeolocation/ipgeolocation-io-mcp
InfoSec Job Boardcom.infosecjobboard/jobs
InsAIts - AI Communication Security Monitorio.github.Nomadu27/insaits
IntoDNS.ai DNS & Email Security Scannerai.intodns/scanner
Ironscalesio.github.wyre-technology/ironscales-mcp
Ironscalesio.github.WYRE-AI/ironscales-mcp
Judges Panelio.github.KevinRabun/judges
Kadent Scanso.kadent/kadent-scan
KernelScanio.kernelscan/kernelscan
Kevscopedev.workers.cybermax-tools.cybermax/kevscope-api
Kevscope CVE Checkdev.workers.cybermax-tools.cybermax/kevscope-chatgpt
Kloudle Cloud Security Scannerio.github.Kloudle/cloud-security-scanner
KnowBe4io.github.wyre-technology/knowbe4-mcp
KnowBe4io.github.WYRE-AI/knowbe4-mcp
Kodemcom.kodemsecurity/kodem
KubeStellar MCPio.github.kubestellar/kubestellar-mcp
Kubernetes Manifest Auditio.github.UnbearableDev/k8s-manifest-audit
LLM Red-Team Scannerdev.workers.manhliemcn4euwlu.llmrt-companion/llm-red-team-scanner
Lattice: CVE, MITRE ATT&CK and detection graph for security agentsio.namiq/lattice
LaunchTrustco.launchtrust/launchtrust
LogSentinelio.github.Evozim/logsentinel
MCP Code Review Serverio.github.GoodJobwilliam/aicraft-code-review
MCP Customsio.github.mcpcustoms/mcp-customs
MCP Fortressio.github.mcp-fortress/mcp-fortress
MCP Gateway Scanio.github.willianpinho/mcp-gateway-scan
MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior)dev.gtfo/mcp-killchain-stage1-weather
MCP Marketplaceio.mcp-marketplace/search
MCP OpenClaw Extensionsio.github.romainsantoli-web/mcp-openclaw
MCP Safety Wardenio.github.gautamvarmadatla/mcpsafetywarden
MCP Security & Vulnerability Auditorio.github.Ansarii/mcp-security-auditor

All 715 entries in the list, with filters and pagination

What this category selects

What this category selects
Field of use, derived from the vendor descriptionSecurity
derived from: Description (raw)

A derived value carries its original data beside it; the derivation rule is published, with a version, on the methodology page.

Caveats, distribution and query

What this category does not say

  • Field of use, derived from the vendor description is not declared but computed: from Description (raw). The rule is published, with a version, on the methodology page.

What is measured is what a manifest declares, not what a piece of software does. This registry fetches no repository URL, no endpoint and no package index; nothing here is verified. Which value comes from which source, and by which rule it was formed, is set out in the Methodology.

Every sentence here follows from the condition above, not from an assessment.

How this category is distributed

Delivery form (raw)

715
Delivery form (raw)
package372 52 %
remote301 42 %
package and remote32 4.5 %
neither10 1.4 %

Execution location

715
Execution location
local410 57 %
remote305 43 %

Repository platform (raw)

715
Repository platform (raw)
github543 76 %
nothing declared168 23 %
gitlab4 0.6 %

Repository URL listed

715
Repository URL listed
yes547 77 %
no168 23 %

Required secrets declared

715
Required secrets declared
no588 82 %
yes127 18 %

Icon formats (raw)

715
Icon formats (raw)
nothing declared659 92 %
image/png35 4.9 %
image/svg+xml14 2.0 %
image/png, image/svg+xml5 0.7 %
image/webp2 0.3 %

Per property, the measured values inside this category. The share refers to the 715 entries of the category, not to the registry. Shown are 6 of 8 properties: those whose values spread the most inside this category.

The same category through the interface

curl -s "https://api.tracevero.com/v1/eintraege?art=mcp_server&einsatzgebiet=sicherheit&grenze=200"

The command carries exactly the condition of this page. 715 entries at 200 each are 4 requests; the total is in the X-Gesamt header.

Changes to these entries

https://tracevero.com/aenderungen.atom?thema=einsatz-sicherheit

Both addresses narrow the change stream to exactly the entries in this category. The feed carries an identifier of its own, so a feed reader keeps it apart from the full stream.

Categories sharing entries with this one

MCP servers as a container only 711 entries in this category47 shared MCP servers for email 962 entries in this category44 shared MCP servers over stdio only 13,862 entries in this category360 shared MCP servers available as a package only 14,911 entries in this category372 shared Local MCP servers without declared required secrets 13,393 entries in this category324 shared Locally executed MCP servers 17,251 entries in this category410 shared

Per neighbour its own size and the counted number of shared entries. A category without a single shared entry is not listed here.

tracevero · https://tracevero.com/themen/einsatz-sicherheit?seite=4