Security & Identity MCP servers
Security scanning, vulnerabilities, auth, secrets and identity.
Own a server? List it for free · or get it featured
All Security & Identity servers
1,056 servers · page 21 of 44
OSINT
robyroro
Domain and website investigations: batch recon, shared infrastructure, CT history and public lookups
Phantom Secrets
ashlrai
Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.
Darkmoon
ASCIT31
Drive a self-hosted Darkmoon Pro AI pentest instance: start runs, read campaigns and findings.
CCS Runtime Evidence
DSHCorrectover
Agent tool-call guardrail: fail-closed runtime security verification with Ed25519 evidence receipts.
Scalebrowser
blackdiamond-labs
Isolated browsers with a persistent identity for AI agents, on your own Windows machine.
Stackhal
bahdanhal
Outside-in DNS, email security, SEO, GEO and app-link checks plus developer utilities.
Shared Forest
ArneFfm
Plant or sponsor trees in a shared forest that grows from its traffic. Sponsoring uses OAuth.
SI Federation
nikitinmikhail1986-beep
Open federation for AI agents: identity, mentors, reputation and limited accession.
Domain Intelligence
osiris-technical-institute
WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.
trustlists
trustlists
Find public vendor trust centers, analyze SOC 2 reports, and request trust-center access.
Trent
trnt-ai
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
GitHub Actions Security Audit
tylerscomic-lab
Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.
Dockerfile Security Audit
tylerscomic-lab
Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.
Secrets Leak Audit
tylerscomic-lab
Scan text and git diffs for committed credentials using real vendor key formats plus entropy.
MCP Trust & Tool-Poisoning Audit
tylerscomic-lab
Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.
PII & Secret Redactor
tylerscomic-lab
Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.
AIDEN
aiden-network
Look up AI agents on Robinhood Chain: ERC-8004 identity, feedback and USDG-backed trust scores.
Groundcheck
beepboop2025
Verify claims, resolve FIGI identity, extract claims, and sign x402 delivery receipts over MCP.
Elicitation Auditor
GuardBee
MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs
LinkPilot
TetraCoreHQ
Send a password or API key as a link that opens once. Encrypted client-side, so we cannot read it.
Unchore Defend
smilemino
Grade a site's security headers with fixes and a badge; read logs or code for the defender.
MCP Ssl Inspector
geekmarine
Audits TLS/SSL handshake latency, HSTS headers, and HTTPS availability on the edge.
Vaultshell
SoWhatI
Injects secrets into shell commands at exec time; plaintext never reaches the LLM context
Security MCP
pratham-jain33
Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses