pentest mcp server
cyanheads
Community7
Offline methodology engine for authorized penetration testing, CTF, and security research.
Aug 21, 2026Security
Remote service84/1001
Security MCP Servers
Servers for secrets, scanning, auditing and threat intelligence — the guardrails around everything else. The directory lists 195 in this category, of which 85 are hosted remote servers needing no local install. Ranking below reflects maintenance, documentation, install experience and adoption — never payment.
All servers
leakferret
leakferrethq
Community
Context-aware secret scanner: lets an AI agent scan, verify, and rewrite secrets before committing.
Aug 31, 2026Security
Local service39/1005
MCP Bastion
vaquarkhan
Community
Security middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.
Aug 31, 2026Security
Local service39/1005
Husk
husk-security
Community
Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs
Aug 31, 2026Security
Local service39/1005
nist nvd mcp server
cyanheads
Community5
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Aug 25, 2026Security
Local service84/1001
osv advisory mcp server
cyanheads
Community4
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Aug 25, 2026Security
Remote service84/1001
guardrails
ExpertVagabond
Community6
AI Agent Guardrails MCP server - security layer
Aug 28, 2026Security
Local service72/1001
q ring
I4cTime
Community
Quantum-inspired keyring for AI coding agents with superposition, entanglement, and tunneling.
Aug 31, 2026Security
Local service39/1004
kdbx
yarrasys
Community
Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.
Aug 20, 2026Security
Local service39/1004
n8n MCP Community
drzamarian
Community
A security-focused MCP server for self-hosted n8n Community Edition.
Aug 31, 2026Security
Local service78/1001
Prism Scanner
aidongise-cell
Community
Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.
Apr 7, 2026Security
Local service39/10016
WhisperGraph
whisper-sec
Community7
The internet's infrastructure graph for AI agents - 46B nodes and edges, free trial via 2 HTTP calls
Jul 19, 2026Security
Remote service81/1001
pentagonal mcp
Pentagonal-ai
Community7
AI smart contract forge — 8-agent security audits, generation, and compilation across 8 chains
Jul 27, 2026Security
Local service72/1001
envault
DinanathDash
Community
Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.
Aug 2, 2026Security
Local service39/1004
AIShield Security Scanner
lm203688
Community
Scans MCP servers for tool poisoning, prompt injection and supply chain risks.
Sep 1, 2026Security
Local service39/1002
Proofpoint
WYRE-AI
Community
MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.
Aug 31, 2026Security
Local service39/1002
Proofpoint
wyre-technology
Community
MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.
Aug 31, 2026Security
Local service39/1002
privacyscrubber mcp
moxno
Community
Zero-Trust PII & secrets sanitizer. Locally scrubs data in-memory before sending context to LLMs.
Aug 30, 2026Security
Local service39/1002
wundervault mcp
wundervault
Community
Zero-knowledge MCP secrets vault for AI agents: secrets injected at runtime, never seen by the model
Aug 28, 2026Security
Local service39/1002
mcp seatbelt
KryptosAI
Community
MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.
Aug 4, 2026Security
Local service39/1003
Gradus Notation
delmas41
Community
Gradus Notation + Harmonic Analyzer + Engraver: music tools for any AI agent. Free, no auth.
Aug 26, 2026Security
Local service39/1002
MCP stdio ShellGuard
studiomeyer-io
Community8
Defense-in-depth for MCP stdio servers: shell-injection guard, AST audit CLI, RCE blocking.
Aug 21, 2026Security
Local service73/100
RelayShield Security Intelligence
relayshield
Community15
Breach, SIM swap, infostealer, domain lookalikes, MCP registry risk, prompt-injection detection.
Jul 19, 2026Security
Local service73/100
HackTricks MCP Server
Xplo8E
Community
Search and query HackTricks pentesting documentation with quick lookup and section extraction
Mar 28, 2026Security
Local service39/1009