Security & Identity MCP servers

EyalSec

EyalSec

Read your EyalSec security events, machines, runs and rules from an AI assistant.

SecureNow

securenow-ai

Production security for Node.js apps: investigate live attacks, block IPs, tune detections.

Prodcheck

FarzamHabibi

4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.

nifi-clickhouse-kafka-mcp

arogan178

Read-only Apache NiFi, ClickHouse and Kafka access with OIDC, audit and secret masking

Hyperiux Vault

Hyperiux-Immersion-Labs

Browse, inspect, and retrieve installable React and Next.js interaction effects from Hyperiux Vault.

GenPark Prompt Injection Canary Leak Sentinel

alphaparkinc

HMAC-signed zero-width invisible canary token generator and output response leak auditor

MCP Security Guard

petrovicistefan

Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).

Dea

shreyassaw5394

Observe any running process from your agent. strace, py-spy, perf, lsof, tcpdump as evidence.

DMARC Shark — Email DNS Checker

skatkov

Check a domain's public SPF, DMARC, MX and DKIM DNS records on demand. No account required.

Fairquery Agent Trust & Data Safety

fairquery

PII/secret redaction, email checks, sanctions screening and OSV vulnerability lookups for AI agents.

Guard Core

Guard-Core

Guard Core security MCP: SecurityConfig validation, docs search, live threat detection.

KarmaDue

ashadow07

Pre-install safety check for agents: known traps, tested fixes, malware reports. No account.

hush

omarei-omoto

Team secrets your AI agent can use but never read: encrypted in the repo, value-blind tools.

ContrastAPI

UPinar

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

LLM Data Guard: PII & Secrets Redaction

fairquery

Detect and redact PII and secrets (API keys, tokens) in text, HTML or PDF before it reaches an LLM.

Sn1per MCP Server: pentest, recon and attack surface scanning

1N3

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

CollectSEA

kelvin-ling

Find real software, security and AI-agent failures that resemble your design, with safeguards.

Email Address Check (syntax, MX, disposable, SPF/DMARC)

pcp183

Check email addresses for syntax, MX and disposable domains. $0.0015/call via x402.

Domain Trust Check (DNS, Email Auth, TLS, Headers)

pcp183

Check a domain's DNS, SPF/DMARC and TLS before trusting it. $0.003/call via x402.

Ebay MCP

mrfentmen

Query the eBay Browse API (OAuth user token; set EBAY_OAUTH_TOKEN, Bearer): item search, item.

Doppler MCP

mrfentmen

Doppler API: projects, configs, secrets listing and download. Needs service or personal token.

Cyberark MCP

mrfentmen

Password breach checks and identity security audits - no API key.

Rally

KestrelAI

Run your Rally creator program from an agent: briefs, creators, content, ads, payouts. OAuth or key.

ncrypted

Seidl-Family

One-time, end-to-end encrypted secrets for agents. 0.005 USDC per secret via x402.