MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
MCP server for querying VirusTotal API with comprehensive security analysis tools.
AI Incident Reporting Compliance MCP. Unified classification + reporting-clock tracker across EU...
BFT Progress Council MCP — 5-voter Byzantine council halts agentic loops when no real progress is.
C2PA Watermark & Provenance MCP server. Built with c2pa-python.
UK Care Quality Commission (CQC) Single Assessment Framework compliance for care homes. AI-assisted.
Care Membrane MCP Server by MEOK AI Labs.
CISA Known Exploited Vulnerabilities feed + remediation deadlines for US federal + critical infr...
AI-assisted COBOL → modern stack bridge. Parse COBOL programs, map to Python/Java/Go, generate t...
ISO 19650 / UK BIM Level 2 compliance for construction projects. EIR, BEP, MIDP, TIDP, and CDE s...
EU Cyber Resilience Act (Regulation 2024/2847) compliance for AI agents. Product classification...
CPCS / CISRS / NPORS card verification, BS 7121 lift plans, mobile crane / tower crane operator ...
Csrd Compliance MCP Server by MEOK AI Labs.
Cybersecurity Ai MCP Server by MEOK AI Labs.
DORA (EU Digital Operational Resilience Act) compliance for AI agents. 5-pillar audit, incident ...
DORA × NIS2 Crosswalk MCP — map Regulation (EU) 2022/2554 obligations to Directive (EU) 2022/255...
Eu Ai Act Compliance MCP Server by MEOK AI Labs.
FDA AI/ML Software as a Medical Device Action Plan + 510(k) + PMA + De Novo pathways for US MedT...
Firmware Attestation MCP — hardware trust layer for sovereign AI. Scan firmware, check.
UK Food Standards Agency + EU Reg 178/2002 + HACCP + allergen labelling compliance for food prod...
GSPC board + Ed25519 card verify. Four tools. Measurement, never certification.
UK Operator Licence, tachograph, drivers' hours, DVSA roadside checks for UK haulage operators a...
Hipaa Compliance MCP Server by MEOK AI Labs.
MCP Spec Compliance MCP — audits any MCP server.json against the official Model Context Protocol.
About Security MCP servers
Security servers let agents take part in defensive work: scanning dependencies and containers, querying vulnerability databases and threat intelligence feeds, reading audit logs, managing secrets in vaults, checking identity and access configuration, and producing compliance evidence. Several wrap established tools so an assistant can run a scan and explain the findings in plain language.
These servers are powerful on both sides, so run them with the same controls you apply to the underlying tools: dedicated credentials, read-only where possible, and no production write access without a human in the loop. Prefer servers from the tool's own vendor or an established security team, and review what each tool sends to third-party services.