MCP server for Proofpoint Essentials -- MSP org, domain, user, licensing, and reporting management.
MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.
MCP server for Kaseya SaaS Alerts — SaaS security monitoring for M365 & Google Workspace.
Multitenant Streamable HTTP wrapper for the SentinelOne purple-mcp server.
MCP server for SpamTitan email security — quarantine, allow/block lists, and policy management.
MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.
Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.
Security proxy that wraps MCP servers with real-time monitoring and policy enforcement.
Read-only queries over Aileron audit journals: verify integrity, search recorded tool calls.
MCP server for static security analysis of Android source code.
ARGUS-3 stdio MCP with WARDEN firewall: argus_ask, argus_status, argus_capabilities.
Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration).
MCP server for npm package management, security analysis, and compatibility checking.
MCP server for ALTR data security: databases, tags, policies, classification, access, audits.
HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.
Pi-hole v6 MCP server - manage DNS blocking, stats, whitelists/blacklists.
Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker.
AI pentester for PRs — finds exploitable bugs and hands your developer agent the fix.
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
EU AI Act + GDPR compliance scanner. One call, no arguments, 10 seconds. 22 AI frameworks detected.
Governed MCP workflows with policy validation, findings tracking, and review gates.
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
Russian ad marking (38-FZ) checker: erid validation, ad-page audit, compliance hints.
Russian tax authority (FNS) counterparty checks: status, debts, blocks. Due diligence MCP.
About Security MCP servers
Security servers let agents take part in defensive work: scanning dependencies and containers, querying vulnerability databases and threat intelligence feeds, reading audit logs, managing secrets in vaults, checking identity and access configuration, and producing compliance evidence. Several wrap established tools so an assistant can run a scan and explain the findings in plain language.
These servers are powerful on both sides, so run them with the same controls you apply to the underlying tools: dedicated credentials, read-only where possible, and no production write access without a human in the loop. Prefer servers from the tool's own vendor or an established security team, and review what each tool sends to third-party services.