Security & Identity MCP servers
Security scanning, vulnerabilities, auth, secrets and identity.
Own a server? List it for free · or get it featured
All Security & Identity servers
1,056 servers · page 13 of 44
Gadriel AI Security Harness
Gadriel-ai
AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.
Netintel MCP
kjgueye
MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments
Entrapulse Polyarchy
darrenjrobinson
Interactive Entra ID identity relationship visualization — the 2003 polyarchy, live as an MCP App
Two-Key
Insomniac-VibeLabs
Authorization proxy for another MCP server: a rule check and AI judges approve each tool call
Depsonar
Soflutionltd
Dependency audits, live CVE scans, migration detection and stack health across 9 languages.
Security Headers
basitalisandhu
Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.
OSV Advisories
basitalisandhu
Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.
JWT Tools
basitalisandhu
Decode JWTs without verifying, flag risky algorithms and claims, verify HS256 or RS256 with a key.
IDigiTrust SSL Toolkit
Mintreetech
Free SSL/PKI tools: HTTPS audit incl. GM SM2/TLCP, DCV pre-check, CSR, cert decode, P12/JKS.
The Agent Commons
startekenterprises-ai
Read-only MCP access to The Agent Commons: shared security findings for AI agents and their tools.
x509 MCP
mrfentmen
Decode PEM certificates, check expiry and inspect a live TLS certificate, all offline
Totp MCP
mrfentmen
Generate and verify TOTP codes offline: RFC 6238 with SHA-1/256/512 and fresh base32 secrets
HTTP Check MCP
mrfentmen
Check a URL live: status, timing, redirect chains and security headers; private hosts blocked
recon
blisspixel
Public DNS, certificate transparency, and identity observations.
Resemble AI
resemble-ai
Resemble AI: deepfake, AI-text, and site agent detection, Detect Agents, intelligence, watermarks.
REA + Ghidra Toolkit
ethanhunt1981
Evidence-oriented REA + Ghidra static-analysis workflows, read-only PE32 and Delphi VMT tools.
IntoDNS.ai DNS & Email Security Scanner
RoscoNL
DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.
Bitwarden Public API and Secrets Manager (unofficial)
mguttmann
Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.
Webability
snayyar00
Free WCAG 2.2/ADA/508 accessibility MCP: scan, AI fixes, verify, vision audit, localhost tunnel
TOPY.AI · AI CSO
TOPY-AI-LTD
Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes.
SecLens.ONE Email Security
42Sec-Pte-Ltd
Assess any domain's email security across SPF, DMARC, DKIM, MTA-STS, DNSSEC, DANE, and TLS-RPT.
Eclipse Archivist
CYAN-ECLIPSE-TECHNOLOGIES-LLC
Capture witness: content, headers + TLS cert sealed as one signed bundle; fixture captures only.
Eclipse Muzzle
CYAN-ECLIPSE-TECHNOLOGIES-LLC
Secrets + PII scanner. A PASS verdict is scan evidence, not a guarantee of safety or non-defamation.
Eclipse Safelist
CYAN-ECLIPSE-TECHNOLOGIES-LLC
Freshness-windowed signed allowlist feed over fixture entries; entries expire unless re-benched.