Offline methodology engine for authorized penetration testing, CTF, and security research.
Screen names against OFAC, EU, UK, UN sanctions lists; resolve entities via GLEIF. Screening aid.
Scan a project for security issues locally with the open-source Data Hogo engine.
Architecture intelligence, security analysis, and living docs. 13 Mermaid tools.
Security-hardened Excalidraw MCP server with auth, rate limiting, and 14 tools.
Inspect PDF, Office, and iWork documents without rendering: counts, metadata, security signals.
Contract-first language and MCP server for capability-aware code and patch review.
Scan installed MCP servers for security vulnerabilities with 16 detection engines.
AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.
EU AI Act + Colorado AI Act compliance scoring. 87/100 in 60 seconds. Free local scan.
HIPAA-aware healthcare AI. Clinical documentation, compliance checks, audit prep. Free local tier.
AI security scanning and trust scoring. Stack-specific threat models. Free local scan.
Voyager's web-page sense: safe read-only observation of one live URL (structure, security, a11y).
A security-focused MCP server for self-hosted n8n Community Edition.
Query CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions.
MCP server for Reolink cameras: snapshots, device state, AI detection, PTZ, and deterrence controls.
Pre-publish policy check for AI-generated social & ad content across 8 platforms.
Define & search 212 advertising & platform-policy terms (DSA, GDPR, FTC). CC BY 4.0.
11.3M entities, 10 countries, 12 tools. EU VAT (VIES), BORME, GLEIF, KYB. Free: 100 req/month.
Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis.
Construction compliance AI. Wire sizing, load calc, battery clearance. AU, USA, CA, UK, EU.
7-signal stablecoin risk scoring. 13 tools, 28+ tokens, SAFE/CAUTION/AVOID verdicts.
Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.
Scan GitHub repos and profiles for malware before cloning — commit-pinned risk verdicts for agents.
About Security MCP servers
Security servers let agents take part in defensive work: scanning dependencies and containers, querying vulnerability databases and threat intelligence feeds, reading audit logs, managing secrets in vaults, checking identity and access configuration, and producing compliance evidence. Several wrap established tools so an assistant can run a scan and explain the findings in plain language.
These servers are powerful on both sides, so run them with the same controls you apply to the underlying tools: dedicated credentials, read-only where possible, and no production write access without a human in the loop. Prefer servers from the tool's own vendor or an established security team, and review what each tool sends to third-party services.