Security & Pentesting MCP Servers
203 Security & Pentesting MCP servers for Claude Code, recommended first
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageShowing 1 to 48 of 203
Stars1
Semgrepsemgrep/mcpA MCP server for using Semgrep to scan code for security vulnerabilities.666stars
Semgrepsemgrep/mcpA MCP server for using Semgrep to scan code for security vulnerabilities.666stars2
Notebooklm Mcp Securepantheon-security/notebooklm-mcp-secureSecurity-hardened NotebookLM MCP with post-quantum encryption88stars
Notebooklm Mcp Securepantheon-security/notebooklm-mcp-secureSecurity-hardened NotebookLM MCP with post-quantum encryption88stars3
Pentest Mcp Servercyanheads/pentest-mcp-serverOffline methodology engine for authorized penetration testing, CTF, and security research.1stars
Pentest Mcp Servercyanheads/pentest-mcp-serverOffline methodology engine for authorized penetration testing, CTF, and security research.1stars4
AI Firewall MCPakhilucky/ai-firewallMulti-agent LLM security layer detecting prompt injection and jailbreaks.0stars
AI Firewall MCPakhilucky/ai-firewallMulti-agent LLM security layer detecting prompt injection and jailbreaks.0stars5
Agent Security Scanner Mcpsinewaveai/agent-security-scanner-mcpSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.110stars
Agent Security Scanner Mcpsinewaveai/agent-security-scanner-mcpSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.110stars6
Android Security Analyzerako2345/android-security-analyzerMCP server for static security analysis of Android source code2stars
Android Security Analyzerako2345/android-security-analyzerMCP server for static security analysis of Android source code2stars7
Arcwall Securityrom-baro/arcwall-mcpSecurity scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.1stars
Arcwall Securityrom-baro/arcwall-mcpSecurity scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.1stars9
Security Scanner Ai Mcpcsoai-org/security-scanner-ai-mcpSecurity Scanner Ai MCP Server by MEOK AI Labs0stars
Security Scanner Ai Mcpcsoai-org/security-scanner-ai-mcpSecurity Scanner Ai MCP Server by MEOK AI Labs0stars10
Contract Security Scannermastrophot/near-mcp-contract-securityMCP smart contract scanner with NEAR-focused security context.0stars
Contract Security Scannermastrophot/near-mcp-contract-securityMCP smart contract scanner with NEAR-focused security context.0stars11
Injection Detectorviridis-security/mcp-services-sdkFormally-verified injection/exfiltration detector for AI agents (MCP-02).0stars
Injection Detectorviridis-security/mcp-services-sdkFormally-verified injection/exfiltration detector for AI agents (MCP-02).0stars12
cve-cacheweiseer/cve-cache-mcpRecent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).0stars
cve-cacheweiseer/cve-cache-mcpRecent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).0stars13
Shrikeshrike-security/shrike-mcpGoverns what AI agents do: tool calls, SQL, commands, files checked against policy before they run.2stars
Shrikeshrike-security/shrike-mcpGoverns what AI agents do: tool calls, SQL, commands, files checked against policy before they run.2stars14
PromptGuardpromptguardhq/promptguardScan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client0stars
PromptGuardpromptguardhq/promptguardScan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client0stars15
Code Firewall Mcpegoughnour/code-firewall-mcpStructural similarity-based code filter. Stops malicious code pattern reaching execution tools.0stars
Code Firewall Mcpegoughnour/code-firewall-mcpStructural similarity-based code filter. Stops malicious code pattern reaching execution tools.0stars16
Kloudle Cloud Security Scannerio.github.kloudle/cloud-security-scannerAWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs0stars
Kloudle Cloud Security Scannerio.github.kloudle/cloud-security-scannerAWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs0stars17
Agent Securitymdfifty50-boop/agent-security-mcpSecurity scanning and threat detection for AI agents0stars
Agent Securitymdfifty50-boop/agent-security-mcpSecurity scanning and threat detection for AI agents0stars18
Panda Web Security Toolspandadad0214/panda-web-security-toolsSite/email/agent safety and monitors: SPF/DKIM, SEO, change + RSS monitors, hidden-AI, WHOIS (7).0stars
Panda Web Security Toolspandadad0214/panda-web-security-toolsSite/email/agent safety and monitors: SPF/DKIM, SEO, change + RSS monitors, hidden-AI, WHOIS (7).0stars19
Security Orchestrarobotfleet-hq/security-orchestraMulti-agent MCP platform for data centers and critical power.0stars
Security Orchestrarobotfleet-hq/security-orchestraMulti-agent MCP platform for data centers and critical power.0stars20
GrindFree Agent Securityronin93/grindfree-agent-securityPay-per-call agent security (x402): injection, tools, shell/SQL, memory, leaks, docs, safe web reads0stars
GrindFree Agent Securityronin93/grindfree-agent-securityPay-per-call agent security (x402): injection, tools, shell/SQL, memory, leaks, docs, safe web reads0stars21
Vulnicheckandrasfe/vulnicheckHTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.11stars
Vulnicheckandrasfe/vulnicheckHTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.11stars22
Operant Mcpoperantlabs/operant-mcpSecurity testing MCP server for penetration testing, forensics, and vulnerability assessment8stars
Operant Mcpoperantlabs/operant-mcpSecurity testing MCP server for penetration testing, forensics, and vulnerability assessment8stars23
Snyk API & Web MCP Serversnyk/saw-mcpMCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage7stars
Snyk API & Web MCP Serversnyk/saw-mcpMCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage7stars24
Ansvar: Threat Intelligenceansvar-systems/ansvar-gatewayCVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway. Cited, OAuth + paid.0stars
Ansvar: Threat Intelligenceansvar-systems/ansvar-gatewayCVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway. Cited, OAuth + paid.0stars25
OWASP ZAP MCP Serverpierre3/dotnet-zap-mcpMCP server for OWASP ZAP vulnerability scanning with Docker management3stars
OWASP ZAP MCP Serverpierre3/dotnet-zap-mcpMCP server for OWASP ZAP vulnerability scanning with Docker management3stars26
Black Duck Security Scannerblackducksoftware/mcp-serverAI-powered security scanning using Black Duck Signal for vulnerability detection.0stars
Black Duck Security Scannerblackducksoftware/mcp-serverAI-powered security scanning using Black Duck Signal for vulnerability detection.0stars27
Sectorabraineetech/sectoraThreat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.0stars
Sectorabraineetech/sectoraThreat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.0stars28
Frogeye Security Scannerfrogeye-ai/mcpZero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.0stars
Frogeye Security Scannerfrogeye-ai/mcpZero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.0stars29
Gsep Mcpgsepcore/gsep-mcpAI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.0stars
Gsep Mcpgsepcore/gsep-mcpAI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.0stars30
AgentSec MCPio.github.traveljamboree/agentsec-mcpSecurity intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.0stars
AgentSec MCPio.github.traveljamboree/agentsec-mcpSecurity intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.0stars31
Shadowgate Mcpjosephibra/shadowgate-mcpSecurity firewall for AI agents — scans MCP calls for injection, secrets, and risks.0stars
Shadowgate Mcpjosephibra/shadowgate-mcpSecurity firewall for AI agents — scans MCP calls for injection, secrets, and risks.0stars32
Mcp Servermiddlebrick/mcp-serverScan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.0stars
Mcp Servermiddlebrick/mcp-serverScan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.0stars33
SecurityScansecurityscan-api/securityscan-apiScan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.0stars
SecurityScansecurityscan-api/securityscan-apiScan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.0stars34
mcpwallbehrensd/mcp-firewalliptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.0stars
mcpwallbehrensd/mcp-firewalliptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.0stars35
PromptScancorporatelad/prompt-injection-firewallPrompt injection detection API for AI agents. Scan untrusted text before passing it to an LLM.0stars
PromptScancorporatelad/prompt-injection-firewallPrompt injection detection API for AI agents. Scan untrusted text before passing it to an LLM.0stars36
Microsoft SQL Serverrichardhan/mssql_mcp_serverProvides MCP access to Microsoft SQL Server databases with multi-method authentication and SQL operations via Claude Desktop.345stars
Microsoft SQL Serverrichardhan/mssql_mcp_serverProvides MCP access to Microsoft SQL Server databases with multi-method authentication and SQL operations via Claude Desktop.345stars37
Shodanburtthecoder/mcp-shodanMCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.135stars
Shodanburtthecoder/mcp-shodanMCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.135stars38
Dependency Management Mcp Serversonatype/dependency-management-mcp-serverSonatype component intelligence: versions, security analysis, and Trust Score recommendations72stars
Dependency Management Mcp Serversonatype/dependency-management-mcp-serverSonatype component intelligence: versions, security analysis, and Trust Score recommendations72stars39
cloud-auditgebalamariusz/cloud-auditAWS security scanner with attack chain detection, IAM privilege escalation, and fixes59stars
cloud-auditgebalamariusz/cloud-auditAWS security scanner with attack chain detection, IAM privilege escalation, and fixes59stars40
Kastellkastelldev/kastellServer security audit (413 checks), hardening, and fleet management across 4 cloud providers.52stars
Kastellkastelldev/kastellServer security audit (413 checks), hardening, and fleet management across 4 cloud providers.52stars41
ContrastAPIupinar/contrastapi55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.36stars
ContrastAPIupinar/contrastapi55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.36stars42
Grasp — Code Architecture & Dependency Analysisashfordeou/graspCodebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.31stars
Grasp — Code Architecture & Dependency Analysisashfordeou/graspCodebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.31stars43
Mcp Cinema4dkumoproductions/mcp-cinema4dMCP server for Cinema 4D — entity CRUD, parameter-level access, batched undo, security controls.29stars
Mcp Cinema4dkumoproductions/mcp-cinema4dMCP server for Cinema 4D — entity CRUD, parameter-level access, batched undo, security controls.29stars44
Repository Intelligencenirholas/lyra-intelAnalyze repos of any size - security scanning code analysis monorepo support0stars
Repository Intelligencenirholas/lyra-intelAnalyze repos of any size - security scanning code analysis monorepo support0stars45
Interactive Leetcode Mcpsperekrestova/interactive-leetcode-mcpInteractive LeetCode MCP server with authorization and solution submission capabilities12stars
Interactive Leetcode Mcpsperekrestova/interactive-leetcode-mcpInteractive LeetCode MCP server with authorization and solution submission capabilities12stars46
Bawbel Scannerbawbel/scannerSecurity scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.7stars
Bawbel Scannerbawbel/scannerSecurity scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.7stars
48
Guardvibegoklab/guardvibeDeterministic security layer your AI can't be. 669 rules, 39 tools, CLI + doctor + host audit.6stars
Guardvibegoklab/guardvibeDeterministic security layer your AI can't be. 669 rules, 39 tools, CLI + doctor + host audit.6starsQuestions
Can Claude perform security scans through MCP?
Yes, security MCP servers let Claude run vulnerability scans, static analysis, and security audits. They integrate with tools like Semgrep for code analysis and can check for common vulnerabilities like those in the OWASP Top 10.
Are pentesting MCP servers safe to use?
These servers should only be used on systems you own or have authorization to test. They provide offensive security capabilities that are powerful but must be used responsibly and legally.
All 203 Security & Pentesting MCP servers →