127 servers

Security MCP servers

Scanning, secrets, identity, compliance and threat intel. Online servers come first. Page 2 of 3.

Vryne

vryne.com

Cited answers from your organisation's documents. GDPR-compliant, hosted in Germany.

SecurityRemote

PDF & Word Metadata Cleaner — Inspect, Clean & Verify

@myworkingmemory

Inspect and remove PDF/DOCX author metadata and comments; approve tracked changes before cleaning.

SecurityRemote

GDPRWise

gdprwise.eu

GDPR compliance for SMEs: query and update your processing register, vendors and compliance items

SecurityRemote

Caisey

helpforsupport.com

Troubleshoot enrolled client PCs from your AI client, with human approval and an audit trail.

SecurityRemote

Hermetics RGPD

hermetics.fr

EU data protection law for AI agents: GDPR, AI Act, EDPB, CJEU and national law, with status.

SecurityRemote

Agent Identity

agent-identity.dev

Give your AI agent its own email inbox, phone number and agent-to-agent tasks.

SecurityRemote

Tirokdo - Idées cadeaux et Secret Santa

tirokdo.com

Secret Santa Tirokdo : idées cadeaux, lettres au Père Noël, création et suivi des tirages organisés

SecurityRemote

Scopable

scopable.io

Scopable MSP API: clients, quotes, assessments, compliance, QBRs. OAuth 2.1, read-only or read-write

SecurityRemote

QVeris

@QVerisAI

Professional data and tools for AI: find services, review scope, call them, and audit usage.

SecurityRemote + local

Skycloak

skycloak.io

Managed Keycloak from any MCP client: clusters, realms, apps, SSO, users, domains, audit events.

SecurityRemote

Doctilla

doctilla.co.uk

ISO 9001 quality management: CARs and 8D, NCRs, audits, actions, risks, suppliers and documents.

SecurityRemote

Inttegro

inttegro.com

Operate an Inttegro merchant account with authenticated commerce tools and confirmed actions.

SecurityRemote

Circadian Page Tools

@Circadian-agent

Read authorized public pages as Markdown or HTML metadata. Operated by an autonomous AI agent.

SecurityRemote

eContract

econtract.online

Send contracts for e-signature, track signing, get signed PDFs and audit trails, verify any PDF.

SecurityRemote

Aribot

ayurak.com

Threat modeling, code, API & cloud security, shadow-AI & compliance governance.

SecurityRemote

21RISK

21risk.com

Read and update your 21RISK data: sites, audits, compliance, actions, claims and insurance values.

SecurityRemote

ClosedMCP

closedmcp.com

One MCP endpoint for your company's tools, with per-person sign-in, policy and audit.

SecurityRemote

Enoki

enokilabs.ai

Test your AI agents for security and safety weaknesses, and re-verify the fixes.

SecurityRemote

Grisoco AI security audits

grisoco.com

Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.

SecurityRemote

Scrollport

scrollport.com

Verified, pay-per-use API tools for AI agents through one authenticated connection.

SecurityRemote

Cybret findings

cybret.ai

Validated API and app vulnerability findings with remediation guidance.

SecurityRemote

Sitelemetry

sitelemetry.com

OAuth website audits: security, SEO, AI visibility, integrations, accessibility and performance.

SecurityRemote

Kodem

kodemsecurity.com

Ask about your Kodem Security data and act on findings in plain language, with your permissions.

SecurityRemote

Clair

clair.dpdns.org

Audits AI-built websites for France and Belgium: cookies, GDPR, legal pages, exposed keys, security.

SecurityRemote

ZP Nexus

sistemasinovadores.com.br

Suas IAs nos computadores e projetos da empresa, com permissões, aprovações e auditoria.

SecurityRemote

Secret Santa Organizer

secretsantaorganizer.com

Create a Secret Santa party with names, emails, a date, a place, and a budget.

SecurityRemote

Auditor IA

pilot.useauditoria.com

Audit B2B prospect lists before enrichment, CRM import or outreach.

SecurityRemote

Quellenkontor HR-Daten

quellenkontor.dev

Verified German HR data with legal source: minimum wage, social security, holidays, notice periods

SecurityRemote

CVElens Vulnerability Intelligence

cvelens.com

CVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.

SecurityRemote

Katla

katla.app

GDPR/CCPA cookie consent: scan sites for cookies, track consent rates, generate privacy policies.

SecurityRemote

CedarAI Data Depot

@cedarai

Read-only Cedar ARMS railroad data via Cedar login for authorized carriers.

SecurityRemote

Route6 — Agent Network Identity

route6.me

Gives AI agents a public IPv6 identity, hostname, port forwarding, web fetch, team mesh. Free tier.

SecurityRemote + local

AI-operated. Email authentication reader: six free tools, no key, no signup.

ai.rjhsignaltech.workers.dev

AI-operated. Free SPF (RFC 7208 count), DMARC, MTA-STS, DMARC rua/ruf readers. Paid audit $29.

SecurityRemote

Strix

strix.ai

AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.

SecurityRemote

Authoryze

authoryze.ai

Give your AI agent a spending limit: approval controls and single-use virtual cards.

SecurityRemote

Elicitly Pro

elicitly.ai

Human-in-the-loop for AI agents over MCP: durable approvals with a hosted review page & audit trail

SecurityRemote

Sapiens

getsapiens.com

Course authoring for AI agents: write from Sapiens' personalized briefs; export and send to Kindle.

SecurityRemote

ConsentStack

consentstack.io

Set up GDPR and CCPA cookie consent: create a site, publish a banner, scan and categorize trackers.

SecurityRemote

Arketo

arketo.ai

Draw your app's architecture on a live canvas and flag the bottlenecks and security gaps.

SecurityRemote

Knotrik — AppSheet Intelligence

knotrik.com

Query and audit AppSheet apps in natural language via Knotrik's pre-scanned definitions.

SecurityRemote

Lukija

lukija.app

Continue Finnish reading and practise saved words from an authenticated Lukija account.

SecurityRemote

Bravos AI

bravos-ai.com

Manage your AI chatbot from your AI assistant: analyze conversations, audit content, configure it.

SecurityRemote

NotCVE — CVE & Vulnerability Intelligence

notcve.org

CVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.

SecurityRemote

PlanWright

planwright.tools

Control plane for autonomous software labor. Agents claim objectives over MCP with audit trail.

SecurityRemote

Composio

@ComposioHQ

Connect AI agents to 1000+ apps with managed authentication and tool-calling.

SecurityRemote

ToolBudget Router MCP

toolbudgetrouter.clauxel.com

Paid remote MCP for context-budget routing, schema cost estimates, usage audits, and readiness.

SecurityRemote

ClearPolicy

clearpolicy.app

Authenticated MCP server for ClearPolicy policy and compliance workflows.

SecurityRemote

PageLens AI

@PageLens-AI

AI website audit: security, SEO, performance, UX and accessibility checks with actionable fixes.

SecurityRemote

HIPAA Agent

@xbt786

HIPAA compliance AI agent — scan, grade, SRA, and generate compliance docs.

SecurityRemote

Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database

exploit-intel.com

Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)

SecurityRemote + local

Bright Security

brightsec.com

Enables AI agents to access Bright Security tools for app discovery and security testing.

SecurityRemote

Draugr

draugr.dev

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

SecurityLocal

Marrow AI: Control Layer for AI Agents

getmarrow.ai

Approval gate and audit trail for AI agent actions: policy check first, proof after. Any MCP client.

SecurityLocal

inspeximus: agent memory with provenance, GDPR erasure and a tamper-evident audit trail

@DanceNitra

Self-correcting agent memory: recall, supersede, revert, forget, GDPR erasure, audit receipts.

SecurityLocal

Backtest Auditor

nothingbutalpha.app

Automated red-team checks for trading backtests: lookahead lint, Deflated Sharpe, costs. Local.

SecurityLocal

Sn1per MCP Server: pentest, recon and attack surface scanning

@1N3

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

SecurityLocal

AppLedger

appledger.net

Plain-English security checks for AI-built apps (Trivy + Opengrep), with fix requests for agents

SecurityLocal

MCP Dataverse

@codeurali

Microsoft Dataverse MCP server: CRUD, FetchXML, metadata, schema, audit, batch and security roles.

SecurityLocal

s-gw

@sgateway

Keep credentials out of AI coding agents with local approvals, scoped injection, and audit trails.

SecurityLocal

Skarn

getskarn.com

Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted

SecurityLocal