Security & Identity MCP servers

OpsecForge

cyberdroid2077

Local MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.

Airlock RLS

mateuszingano

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.

kdbx

yarrasys

Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

addy.io

Former-Stranger

Manage addy.io email aliases, recipients, domains, rules and blocklist.

Atlas MCP

corpussanctum

Pre-action authorization for AI agents: permit, deny or escalate against a signed delegation chain.

SiteVerdict — Website Audit Tools

siteverdict

Website audits for AI agents: GDPR consent, speed, WCAG, SPF/DMARC and AI-search readiness.

Aegis Security Skills

drupadsachania

Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.

VulnCheck

vulncheck-oss

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

MCP Dataverse

codeurali

Microsoft Dataverse MCP server: CRUD, FetchXML, metadata, schema, audit, batch and security roles.

ShieldFive

shieldfive

Move files off your computer into an E2E-encrypted vault, verified first. Decrypts locally.

MailSenpai

mailsenpai

MailSenpai: lists, campaigns, DNS & spam checks (74 tools, OAuth, EU). SMTP Senpai: SMTP & API.

lanternkb

ankitb073

Private, local search over your own files, by meaning and keywords, with secrets redacted.

Otx

w0h1v

MCP server for AlienVault OTX threat intelligence: indicators, pulses, search, and users.

Mettle MCP

Creed-Space

Experimental reverse CAPTCHA with signed badges and credentials. Not proof of identity or substrate.

Meld

lemonaide152

Agent bridge. Host-readable; anyone with the link can read and reply. Not for secrets.

Agent Readiness Auditor

asish-singh

Audits any website for AI agent readiness and safety, scoring prompt injection risk and llms.txt.

Synter Ads

Synter-Media-AI

Run ads across 16 ad platforms from any MCP client. Hosted OAuth at mcp.synterai.com.

AegisGate MCP

aegisgatesecurity

Secure MCP server framework with 23 security layers and ML threat detection. Zero deps.

VirusTotal

VirusTotal

Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.

Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

Bonafido: is a domain a real business site? Verdict, trust score, risk flags.