Security & Identity MCP servers

DBShield Database Guardrail & Sandboxing MCP Server

RitualDev-Lab

Safety-first Database Guardrail & Sandboxing MCP Server for AI Coding Agents

zanadir

MustacheCase

Find what a repository's CI is missing, and which security checks cannot fail the build.

UNPKG

unpkg

Live npm and UNPKG data for AI agents: resolution, audits, import maps, malware/CVE checks.

Monthlet

t27d

Read and edit the notes in your local monthlet vault from MCP clients. Runs inside the monthlet app.

Proofmark Hash

SamuelDharshi

Hash text with SHA-256, SHA-512 or SHA3-256, and verify a digest.

Analysis MCP

mrfentmen

Offline security-artifact analysis: endpoint and secret mining, IDOR diffs, JWT triage

APC Security Reference Server

Aleph-Lab-s

Reference MCP server for synthetic APC action-security evaluation and local SQLite sandbox testin...

Zn Gate

usezn

The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.

CookieGuard

aiscihub

Audit HTTP cookie security against your local policy. Returns findings without cookie values.

CorroborateMe

CNR-Consulting

Prove end users to agents and apps: login-links, OIDC clients, and API keys over remote MCP

Petra Security

WYRE-AI

Read-only Petra Security MCP: M365 compromise incidents, failed attacks, posture, tenants, usage.

Corvus

Albasha0x0

Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.

Symantec Endpoint Detection and Response (on-premises) AIops

AIops-tools

Governed Symantec on-prem EDR — 20 MCP tools, read-only with audit.

Symantec Cloud DLP AIops

AIops-tools

Governed Symantec Cloud DLP — 14 MCP tools, read-only with audit.

Symantec Data Center Security AIops

AIops-tools

Governed Symantec DCS operations — 35 MCP tools, read-only with audit.

Handsy AI

onehumanbeing

Let AI agents see and operate a real iPhone via an ESP32-S3 USB HID + AirPlay. No jailbreak.

Keycloak Admin API

sferarc

Unofficial: one tool per Keycloak admin operation on a realm, read-only unless writes are enabled

~Alter

true-alter

Mint an agent identity in two free calls. Verify anyone. Earn 75% when someone reads you.

Check before you sign: tx and signature safety

CyberPunk11147

See what a transaction or signature will do before your agent signs it, plus address and link risk.

com.dechonet MCP

node-man

30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.

Virustotal

pipeworx-io

VirusTotal MCP — file / URL / domain / IP reputation (BYO key)

Urlhaus

pipeworx-io

URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)

mlab.sh

mlab-sh

Threat intel and DFIR: IOCs, CVEs, actors, SBOMs, domain scans, cases, memory, Kubernetes, Proxmox.

Keysrs

gshost1

Local Mac API-key vault: Touch ID-approved, scoped grants for agents, not keys. Needs Keysrs.app.