Home / MCP registry index / Topics / Security

Security MCP servers, with their tools checked

Every server in the official MCP registry that mentions Security, with a public endpoint, read the way an MCP client reads it and checked for tool poisoning. The list updates as the registry does, and each server is read again every week.

296 listed. We have read the tools of 37 so far; the others want credentials first, could not be reached, or are still waiting for their first read. Showing the first 200, servers whose tools we could read first.

Mostly lookups, but a server can still say anything in its tool descriptions, which is why each one is read here.

BlackVeil DNS & Email Security Scanner
com.blackveilsecurity/dns
81 tools, nothing matched
2026-10-22
Security Recipes
io.github.stevologic/security-recipes
75 tools, nothing matched
2026-10-21
IntoDNS.ai DNS & Email Security Scanner
ai.intodns/scanner
45 tools, nothing matched
2026-10-22
Circl Vulnerability Lookup
io.github.pipeworx-io/circl-vulnerability-lookup
45 tools, nothing matched
2026-10-22
ai.greyridgesignals/tech-risk
ai.greyridgesignals/tech-risk
26 tools, nothing matched
2026-10-21
Hacker Bob public records
io.github.bobnetsec/hacker-bob-public-records
22 tools, nothing matched
2026-10-22
Raziel
io.github.tide-foundation/raziel
22 tools, nothing matched
2026-10-22
Ubuntu Security Notices / USN (usnwatch) — buy per-query in-session
com.a2awire/data-ubuntu-security-linux-vulnerability
16 tools, nothing matched
2026-10-22
Microsoft Windows Security Updates (MSRC CVRF) — buy per-query in-session (msrcwatch)
com.a2awire/data-windows-security-update-microsoft-cvrf
16 tools, nothing matched
2026-10-22
Diogenes Web3, DeFi & 402 Security MCP
io.github.stand-out-of-my-sun/diogenes-web3-security-mcp
15 tools, nothing matched
2026-10-21
io.github.beneb89/changegamer
io.github.beneb89/changegamer
14 tools, nothing matched
2026-10-22
the drain
ai.thedrain/board
13 tools, nothing matched
2026-10-22
LaunchTrust
co.launchtrust/launchtrust
9 tools, nothing matched
2026-10-22
CVE Risk Check
app.openkrill/cve
7 tools, nothing matched
2026-10-22
FHI MCP Server Security Audit
dev.workers.fhi-llc-1118.polished-truth-c514/fhi-x402-security-tools
7 tools, nothing matched
2026-10-22
IMPOCOR-AI Nexus
io.github.professoryilmaz1/impocor-ai-nexus
6 tools, nothing matched
2026-10-21
Stobox Intelligence & Tokenization
io.stobox/intelligence-graph
6 tools, nothing matched
2026-10-21
Package Health Check
app.openkrill/packages
5 tools, nothing matched
2026-10-22
AIS CVE Priorities — daily exploit-ranked patch list for AI agents
ai.aislabs/cve
4 tools, nothing matched
2026-10-21
Stackfacts
app.vercel.stackfacts/stackfacts
4 tools, nothing matched
2026-10-22
com.vulnrable/vulnrable
com.vulnrable/vulnrable
4 tools, nothing matched
2026-10-22
Assay A2A, MCP & x402 Pre-Flight Verifier & Observatory
dev.agentdiet/assay
4 tools, nothing matched
2026-10-22
dev.workers.marvin-odigo.mcp/krabbot-devtools
dev.workers.marvin-odigo.mcp/krabbot-devtools
4 tools, nothing matched
2026-10-22
dev.workers.sebastiaan-ba3.mcpgateway/tools
dev.workers.sebastiaan-ba3.mcpgateway/tools
4 tools, nothing matched
2026-10-22
AIS Gateway — the campus front desk for AIS MCP buildings
ai.aislabs/gateway
3 tools, nothing matched
2026-10-21
SKUit Network & Security Catalog
ai.skuit/catalog
3 tools, nothing matched
2026-10-21
uk.co.vacantpropertysecuritycost/site
uk.co.vacantpropertysecuritycost/site
3 tools, nothing matched
2026-10-21
Helixar Security
ai.helixar/mcp
2 tools, nothing matched
2026-10-21
ai.kernora/agent-sec
ai.kernora/agent-sec
2 tools, nothing matched
2026-10-22
AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)
dev.agentdiet/cve-intel
2 tools, nothing matched
2026-10-22
AgentDiet Domain OSINT, TLS Certificate & Security Headers Recon
dev.agentdiet/domain-osint
2 tools, nothing matched
2026-10-22
AgentDiet Coding Agent GitHub Repo, Dependency & License Security Auditor
dev.agentdiet/github-audit
2 tools, nothing matched
2026-10-22
Imperium MCP Security — Prompt-Injection, Jailbreak & Tool Poisoning Firewall
dev.agentdiet/mcp-security
2 tools, nothing matched
2026-10-22
AgentDiet Base EVM & Solana Smart Contract Security Scanner
dev.agentdiet/onchain-risk
2 tools, nothing matched
2026-10-22
app.vercel.exploitwatch-kappa/exploitwatch
app.vercel.exploitwatch-kappa/exploitwatch
1 tool, nothing matched
2026-10-22
Compuute MCP Security Scanner
io.github.Compuute/compuute-scan-api
1 tool, nothing matched
2026-10-22
io.github.DataLeadsPRO/domain-intelligence
io.github.DataLeadsPRO/domain-intelligence
1 tool, nothing matched
2026-10-22
Ankra
ai.ankra/platform
needs credentials to list tools
2026-10-21
Cybret findings
ai.cybret/findings
needs credentials to list tools
2026-10-21
Enoki
ai.enokilabs/enoki
needs credentials to list tools
2026-10-21
ResponseHub
ai.responsehub/responsehub
needs credentials to list tools
2026-10-22
ai.sealgate/gateway
ai.sealgate/gateway
needs credentials to list tools
2026-10-22
SecureNow
ai.securenow/securenow
needs credentials to list tools
2026-10-22
Sekura
ai.sekura/sekura
needs credentials to list tools
2026-10-22
Strix
ai.strix/strix
needs credentials to list tools
2026-10-21
Trent
ai.trent/trent
needs credentials to list tools
2026-10-22
VulX Watch
ai.vulx/watch
not reachable
2026-10-22
Domain Lab
app.domainlab/domain-lab
needs credentials to list tools
2026-10-22
Sitejar Web Compliance Scanner
app.sitejar/mcp
needs credentials to list tools
2026-10-22
app.zenable/zenable
app.zenable/zenable
needs credentials to list tools
2026-10-22
Aribot
com.ayurak/aribot-mcp
needs credentials to list tools
2026-10-21
GitHits
com.githits/githits
needs credentials to list tools
2026-10-22
com.vibgrate/mcp
com.vibgrate/mcp
needs credentials to list tools
2026-10-21
LLM Red-Team Scanner
dev.workers.manhliemcn4euwlu.llmrt-companion/llm-red-team-scanner
not reachable
2026-10-22
io.github.CSOAI-ORG/meok-cra-art14-reporter-mcp
io.github.CSOAI-ORG/meok-cra-art14-reporter-mcp
not reachable
2026-10-22
io.github.CSOAI-ORG/meok-mcp-hardening-mcp
io.github.CSOAI-ORG/meok-mcp-hardening-mcp
not reachable
2026-10-22
Cybersecurity Threat Intelligence MCP
io.github.FoundryNet/cyber-intel-mcp
not reachable
2026-10-22
Frogeye Security Scanner
io.github.frogeye-ai/mcp
not reachable
2026-10-21
Singularity - MCP Discovery & Security Gateway
io.github.gaurav-kumar-sinha-060705/singularity
needs credentials to list tools
2026-10-21
io.github.nexus-api-lab/nexus-mcp
io.github.nexus-api-lab/nexus-mcp
not reachable
2026-10-22
7IT Solutions
io.github.XLSV777/7it
not reachable
2026-10-21
io.heronapp/heron
io.heronapp/heron
not reachable
2026-10-22
StackShield
io.stackshield/stackshield
needs credentials to list tools
2026-10-21
it.elsas/security-intel
it.elsas/security-intel
not reachable
2026-10-22
NotCVE — CVE & Vulnerability Intelligence
org.notcve/vulnerability-intelligence
needs credentials to list tools
2026-10-21
ResolutionRelay API Search
uk.mayneart.api/resolution-relay-api-search
not reachable
2026-10-21
ProfitCollector
ca.bakhour/profitcollector
not read yet
Vigía
cloud.coredls.vigia/vigia
not read yet
Mobula
cloud.mobula/mobula
not read yet
ZEN SecDB
cloud.nttzen.secdb/zen-secdb
not read yet
IT Security — Access Change Request Recertify — Alder Court Partners (b578285f)
com.a2awire/benchmark-access-change-request-recertify-2026-09-15-b578285f
not read yet
CERT-FR Security Advisories — buy per-query in-session (certfrwatch)
com.a2awire/data-cert-fr-advisory-national-cert-alert
not read yet
CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts)
com.a2awire/data-cisa-advisory-ics-security-alert
not read yet
CISA Known Exploited Vulnerabilities (kevwatch)
com.a2awire/data-cisa-known-exploited-vulnerability-catalog
not read yet
CVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewatch)
com.a2awire/data-cve-security-advisory-vulnerability-database
not read yet
Debian Security Advisories — buy per-query in-session (debianwatch)
com.a2awire/data-debian-security-advisory-dsa-linux
not read yet
Dependency Vulnerability Tracker — package security advisories ($0.01/query)
com.a2awire/data-dependency-vulnerability-malicious-package-security
not read yet
Go Vulnerability Database Tracker — buy per-query in-session (govulnwatch)
com.a2awire/data-go-vulnerability-golang-security
not read yet
Rust Crate Security Advisories — buy per-query in-session (rustsecwatch)
com.a2awire/data-rust-security-crate-vulnerability
not read yet
AcidPeak
com.acidpeak/acidpeak
not read yet
AEO Inspector
com.aeoinspector/aeo-inspector
not read yet
ADF: EU Tenders, Funding, Medicines, Sanctions, CVE KEV EPSS, EU CERT Advisories, Amsterdam Events
com.agentdatafeed/agentdatafeed
not read yet
AI Website Security
com.aiwebsitesecurity/ai-website-security
not read yet
Preflight
com.allthepossibles/preflight
not read yet
Vigil
com.appnary/vigil
not read yet
Arbiter
com.arbiterscan/arbiter
not read yet
Arcjet
com.arcjet/mcp
not read yet
AstraVerify Domain Trust Check
com.astraverify/domain-trust
not read yet
ATK Security Checks
com.atkvn/security-checks
not read yet
Certopolis
com.certopolis/certopolis
not read yet
ContrastAPI
com.contrastcyber/api
not read yet
com.craftedtrust/mcp-shield
com.craftedtrust/mcp-shield
not read yet
com.cve-security/cve-intelligence
com.cve-security/cve-intelligence
not read yet
Security Intel MCP
com.datakoot/cve-vulnerability-lookup
not read yet
DataNexus MCP
com.datanexusmcp/mcp-server
not read yet
com.dechonet/mcp
com.dechonet/mcp
not read yet
Go-Live Check
com.dontdeployonfriday/golive-check
not read yet
com.edgethirteen.www/exploitwatch
com.edgethirteen.www/exploitwatch
not read yet
XRay-Vision
com.emtailabs/xray-vision
not read yet
Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database
com.exploit-intel/eip-mcp
not read yet
FEDLIN Scanners
com.fedlin/fedlin-mcp-server
not read yet
FillTrust security questionnaire corpus
com.filltrust/questions
not read yet
FlightQueue
com.flightqueue/flightqueue
not read yet
com.formatho/runtime
com.formatho/runtime
not read yet
Framekeep Public Discovery
com.framekeep/public
not read yet
com.freedailypro/tools
com.freedailypro/tools
not read yet
com.httpstatus/mcp-server
com.httpstatus/mcp-server
not read yet
InfoSec Job Board
com.infosecjobboard/jobs
not read yet
Agent DVR
com.ispyconnect/agentdvr
not read yet
Kodem
com.kodemsecurity/kodem
not read yet
Mail Security Tools
com.mailsecuritytools.api/email-security
not read yet
MCPLookup
com.mcplookup/mcp
not read yet
MCPFax Dev Package Intelligence
com.mcpscores/dev-package-intel
not read yet
MCPSkillHub
com.mcpskillhub/mcpskillhub
not read yet
Microsoft Sentinel Data Exploration
com.microsoft/sentinel-data-exploration
not read yet
Domain Health
com.modernmustardseed/domain-health
not read yet
MySSAgent Social Security Claiming Estimator
com.myssagent/mcp
not read yet
com.obeliskgate/trust-tools
com.obeliskgate/trust-tools
not read yet
CDC Social Vulnerability Index
com.olyport/cdc-svi
not read yet
EPA EJScreen
com.olyport/ejscreen
not read yet
Crypto, web, finance and app data tools
com.onrender.bess-x402/data-tools
not read yet
Opzyai Vibe Check
com.opzyai/scan
not read yet
mcp-toolbelt
com.papacasper/mcp-toolbelt
not read yet
PCBLT — Live Checks
com.pcblt/pcblt
not read yet
Feldspar free repository security scan
com.project-feldspar/scan
not read yet
Quiet Failures
com.quietfailures/quiet-failures
not read yet
com.rangercheck/security-tools
com.rangercheck/security-tools
not read yet
Dragons Eye Ransomware Claims
com.ransomware-tracker.api/dragonseye
not read yet
Rock8Cloud
com.rock8cloud/mcp
not read yet
com.royalplugins/royal-mcp
com.royalplugins/royal-mcp
not read yet
com.saasdossier/evidence-ledger
com.saasdossier/evidence-ledger
not read yet
SavingsLast retirement calculators
com.savingslast/calculators
not read yet
Saylor Innovations: pay-per-call data
com.saylorinnovations/data
not read yet
ScanLabsAI Security Scanner
com.scanlabsai/scanner
not read yet
scorebadge
com.scorebadge/scorebadge
not read yet
com.secdim/mcp
com.secdim/mcp
not read yet
ShipLatch
com.shiplatch/scanner
not read yet
Sitelemetry
com.sitelemetry/sitelemetry
not read yet
SkillsSafe Security Scanner
com.skillssafe/scanner
not read yet
com.sonatype/dependency-management-mcp-server
com.sonatype/dependency-management-mcp-server
not read yet
squirrelscan
com.squirrelscan/squirrelscan
not read yet
Tektolo Rental Property
com.tektolo/rental-property
not read yet
Onchain Diary
com.theonchaindiary/onchain-diary
not read yet
com.thetempleofdoom.draco/draco
com.thetempleofdoom.draco/draco
not read yet
Truss Threat Intelligence
com.truss-security/truss-mcp
not read yet
com.trycloudflare.candy-josh-writers-balance/yultrace-audit
com.trycloudflare.candy-josh-writers-balance/yultrace-audit
not read yet
com.trycloudflare.urgent-clean-occupied-catalogs/yultrace-audit
com.trycloudflare.urgent-clean-occupied-catalogs/yultrace-audit
not read yet
Ship Check
com.uxcontinuum/ship-check
not read yet
com.validoria/validoria-mcp
com.validoria/validoria-mcp
not read yet
WP HealthKit
com.wphealthkit/mcp-server
not read yet
YesTechie — UniFi Network & Security Integrator
com.yestechie/site
not read yet
com.zeltser/website-search
com.zeltser/website-search
not read yet
dev.ecoa/ecoa
dev.ecoa/ecoa
not read yet
Freysa Security
dev.freysa.economic-agent-369/freysa-intelligence
not read yet
MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior)
dev.gtfo/mcp-killchain-stage1-weather
not read yet
Depcheck
dev.kaneky/depcheck
not read yet
MCP security checks — WARDEN and HISTOR
dev.modelmarket/mcp-security
not read yet
ScrapeMole Domains
dev.pages.scrapemole/domains
not read yet
SafeWeave
dev.safeweave/safeweave
not read yet
Stackfacts
dev.stackfacts/stackfacts
not read yet
Tanod Security
dev.tanod/security
not read yet
El Pujante — Subastas públicas de España
es.elpujante/subastas
not read yet
Ansvar: EU Compliance & Legal Intelligence
eu.ansvar/gateway
not read yet
Ansvar: Threat Intelligence
eu.ansvar/threat-intel
not read yet
Circuit
family.circuit/marketplace
not read yet
secureIT Sicherheits-Checks
icu.secureit/security-checks
not read yet
Aperture Wallet Knowledge
io.aperturex/aperture-wallet-knowledge
not read yet
Corrie Site Check
io.corrie/site-check
not read yet
EchelonGraph CVE & Exposure
io.echelongraph/echelongraph-mcp
not read yet
Fallax
io.fallax/fallax
not read yet
Android Security Analyzer
io.github.ako2345/android-security-analyzer
not read yet
Horry County Construction Leads
io.github.amc2144/agent-vending-mcp
not read yet
Horry County Construction Leads
io.github.amc2144/construction-leads
not read yet
Web Scan
io.github.ankitkumarjha515/web-scan
not read yet
MCP Security & Vulnerability Auditor
io.github.Ansarii/mcp-security-auditor
not read yet
Neon Zero-Trust MCP Gateway
io.github.Ansarii/zero-trust-mcp-gateway
not read yet
Apiiro Guardian Agent
io.github.apiiro/guardian-agent
not read yet
AgentAegis
io.github.astafford8488/agentaegis
not read yet
io.github.atmflow55/datafood-mcp
io.github.atmflow55/datafood-mcp
not read yet
ViewportWitness by Apex Labs
io.github.Baffles78/viewport-witness
not read yet
Stackhal
io.github.bahdanhal/stackhal
not read yet
io.github.Baneado98/ci-sentinel
io.github.Baneado98/ci-sentinel
not read yet
HTTP Headers Analyzer API
io.github.Br0ski777/http-headers
not read yet
io.github.brkd-h1/readme-canary
io.github.brkd-h1/readme-canary
not read yet
io.github.burademirung/protectwith-kb
io.github.burademirung/protectwith-kb
not read yet
io.github.cyanheads/osv-advisory-mcp-server
io.github.cyanheads/osv-advisory-mcp-server
not read yet
io.github.cyanheads/pentest-mcp-server
io.github.cyanheads/pentest-mcp-server
not read yet
DDG Agent Services
io.github.daedalusdevelopmentgroup/ddg-agent-services-mcp
not read yet
io.github.disclose/lookup-disclose-io
io.github.disclose/lookup-disclose-io
not read yet
Vibes-Coded Agent Security and Commerce Tools
io.github.doteyeso-ops/mcp-server-vibes-coded
not read yet
Aegis Security Skills
io.github.drupadsachania/aegis-skills
not read yet
io.github.eltociear/skill-audit-mcp
io.github.eltociear/skill-audit-mcp
not read yet
TrustScan
io.github.entradox/trust-scan
not read yet
Benchline
io.github.fabwaseem/benchline
not read yet
Fetter MCP
io.github.fetter-io/fetter-mcp
not read yet
io.github.fpetitit/mcpcheckup
io.github.fpetitit/mcpcheckup
not read yet
COLA Insight
io.github.ge3m0r/cola-insight
not read yet
io.github.geekmarine/mcp-domain-auditor
io.github.geekmarine/mcp-domain-auditor
not read yet
BentCrypto Machine Payments
io.github.ghstaking/bentcrypto-machine-payments
not read yet
Guava Wallet Intelligence
io.github.Guava-Research/mcp-server
not read yet

Choosing one

Open a server's page to see the tools it advertises, whether it sets instructions for the model, and our latest read. Here, 37 of the servers shown matched none of our tool-poisoning rules on their last read. A clean read means our rules found nothing, not that a server is harmless; still check what access it asks for. To check one that is not listed, paste its URL into the free MCP server check.

Related: Analytics and SEO · Weather · Maps and location · Travel · Real estate · Health · all topics