Security & Identity MCP servers
Security scanning, vulnerabilities, auth, secrets and identity.
Own a server? List it for free · or get it featured
All Security & Identity servers
1,056 servers · page 12 of 44
Circl Vulnerability Lookup
pipeworx-io
CIRCL Vulnerability-Lookup — aggregated vulnerability records
Rubrik Security Cloud
rubrikinc
Connect AI assistants to the Rubrik Security Cloud GraphQL API to discover, query, and automate.
VerifyAnyEmail
verifyanyemail
Real-time email verification and deliverability diagnostics (MX, SPF, DKIM, DMARC).
Otp MCP Server
david-steel
Public MCP for OTP (orgtp.com). Query cross-org best practices, learnings, publishers, patterns.
Unbounded Consumption Auditor
GuardBee
Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)
OAuth Auditor
GuardBee
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
Audit Gap Auditor
GuardBee
OWASP MCP08 audit/telemetry gaps: missing tool-call logs, raw args in logs, disabled audit
MCP Server Auditor
GuardBee
Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
LLM Redteam
GuardBee
Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints
Elicitation Auditor
GuardBee
MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs
Pentest MCP Server
cyanheads
Offline methodology engine for authorized penetration testing, CTF, and security research.
RenewRoster
raghuchinnannan
Track domain and SSL certificate expiry for your agency clients from any MCP client.
Identity AIops
AIops-tools
Governed Keycloak + authentik identity ops: users, events, clients, MFA, RCA. 29 tools.
Infomaniak MCP (unofficial)
leonhoulier
Manage Infomaniak DNS, mail and VPS apps through OAuth, with live official documentation.
YouTrack (ymcp)
xlsft
YouTrack with your login and password: the built-in tools plus deletes, sprints, history and reports
PriorSeal
imokokok
Bounded authorization and independently verifiable execution evidence for agents.
Context
everydaysecurity-ai
OSINT investigations with traceable evidence: domains, URLs, IPs, scams and business records.
SafePrompt
ianreboot
Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM.
HoneyLabs
honeylabshq
Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.
SyteCheck
BertPC
Scan a website for SEO, accessibility, performance and security issues, and read the report.
Raziel
tide-foundation
MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
0n3 — the 0n runtime (0nmcp 5)
0nork
Your apps as AI tools: one sign-in, one vault, 125 services and 1,851 endpoints, with receipts.
model.tools — Zero-Auth Agent Utilities
maceip
Zero-auth email OTP extractor, KV checkpoints, webhook bins, wake timers, and markdown reader.
First Epss MCP Server
cyanheads
Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.