MCP Servers

VibeShift

★ 67

An intelligent security agent that analyzes AI-generated code for vulnerabilities and assists with remediation.

GhidraMCP

★ 65

An embedded MCP server for Ghidra, exposing program data and reverse engineering functionalities.

MCP ZAP Server

★ 60

Exposes OWASP ZAP as an MCP server, enabling AI agents to orchestrate security scans, import OpenAPI specs, and generate reports.

OPNsense MCP Server

★ 59

A comprehensive MCP server for managing OPNsense firewalls, offering over 300 tools for configuration and monitoring.

MCP Front

★ 57

An OAuth 2.1 proxy for MCP servers that enables single sign-on with Google, domain validation, and per-user tokens.

Security Audit Tool

★ 53

Audits npm package dependencies for security vulnerabilities with real-time checks against a remote npm registry.

MCPwner

★ 52

Automated Security Vulnerabilities Pentesting

OpenAPI Schema

★ 50

Exposes OpenAPI schema information to Large Language Models (LLMs). The server loads OpenAPI schema files specified via command line.

NMAP

★ 49

Perform network scanning and security auditing using the NMAP utility.

Panther

★ 47

Interact with the Panther security platform to write detections, query logs with natural language, and manage alerts.

Authenticator App MCP Server

★ 42

A secure MCP server for AI agents to interact with the Authenticator App for 2FA codes and passwords.

Better Auth

★ 41

Enterprise-grade authentication with secure credential management, multi-protocol support, and real-time threat detection.

Multi-Source Threat Intel

★ 40

An AI-powered threat intelligence analysis tool for multi-source IOC analysis, APT attribution, and interactive reporting.

Volatility MCP Server

★ 39

An MCP server for memory forensics using the Volatility 3 framework.

Signet

★ 37

Cryptographic action receipts for AI agents. Signs every MCP tool call with Ed25519, hash-chained audit log. 3 lines of code to integrate.

AvaloniaUI

★ 35

Tools, resources, and guidance for building cross-platform applications with AvaloniaUI.

MCP Proxy

★ 32

A bidirectional MCP proxy connecting stdio and Server-Sent Events (SSE) with OAuth support.

Semgrep

★ 29

Static code analysis using Semgrep for security vulnerability detection and code quality improvements.

Grantex MCP

★ 28

13-tool MCP server for AI agent authorization. Manage agents, grants, tokens, and audit logs from Claude Desktop, Cursor, or Windsurf. Plus @grantex/mcp-auth for adding OAuth

ctfd-mcp

★ 25

MCP server for CTFd that lets regular users browse challenges, manage dynamic instances, and submit flags.

ServeMyAPI

★ 24

A personal server for securely storing and accessing API keys using the macOS Keychain.

GhostMCP

★ 24

Injectable MCP server for AI-driven reverse engineering inside processes

MCP-S Gateway

★ 21

A secure, open-source OAuth gateway for MCP authentication.

Contrast MCP Server

★ 20

Remediate vulnerabilities found by Contrast products using LLM and Coding Agent capabilities.

Kali MCP Server

★ 20

A Kali Linux MCP server providing AI assistants with access to security tools.

NPM Sentinel MCP

★ 18

An AI-powered MCP server for analyzing NPM package security, dependencies, and performance.

Nessus MCP Server

★ 15

An MCP server for interacting with the Tenable Nessus vulnerability scanner.

Hound MCP

★ 15

Hound is a free, open-source MCP server that gives AI coding agents a nose for supply chain security. It scans packages for vulnerabilities, checks licenses, inspects dependency trees, and detects typosquatting — with zero API keys, zero config, and zero cost.

phantom-secrets

★ 11

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens. Works with Claude Code, Cursor, Windsurf, and Codex.

HandMirrorMcp

★ 11

A Model Context Protocol (MCP) server for .NET assembly and NuGet package inspection