MCP Servers

Model Context Protocol servers

✓★ 88,000

A collection of reference implementations for the Model Context Protocol (MCP), demonstrating secure and controlled access to tools and data sources for Large Language Models (LLMs).

Damn Vulnerable MCP Server

★ 1,300

A server designed to be intentionally vulnerable for security testing and educational purposes.

CVE MCP Server

★ 1,100

A production-grade Model Context Protocol (MCP) server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in seconds. Built with Python, FastMCP, httpx, aiosqlite, Pydantic v2, and defusedxml.

Semgrep

★ 677

Enable AI agents to secure code with Semgrep.

E2B

✓★ 393

Run code in secure sandboxes hosted by E2B

BloodHound-MCP

★ 364

integration that connects BloodHound with AI through MCP, allowing security professionals to analyze Active Directory attack paths using natural language queries instead of Cypher.

Laravel MCP Server

★ 331

A Laravel package for building secure Model Context Protocol servers with real-time communication using SSE.

Code Sandbox MCP

★ 325

A secure sandbox for executing code in Docker containers, providing a safe environment for AI applications.

mcpproxy-go

★ 273

Open-source local MCP proxy server. Routes multiple MCP servers through a single endpoint with BM25 tool filtering, quarantine security, activity logging, and web UI.

Windows CLI

★ 268

MCP server for secure command-line interactions on Windows systems, enabling controlled access to PowerShell, CMD, and Git Bash shells.

Node9-Proxy

★ 207

The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.

CLI MCP Server

★ 172

A secure MCP server for executing controlled command-line operations with comprehensive security features.

Narsil MCP

★ 167

Blazingly fast 🔥 best in class MCP server in Rust 🦀 with neural engine, security profiling, and optional graph frontend

Vibecode Cleaner Fartrun

★ 131

Local code health & security scanner for vibe-coded projects. 29 MCP tools. Rust-powered, zero cloud, zero tokens.

MCP Jenkins

★ 130

Enables secure, contextual AI interactions with Jenkins tools via the Model Context Protocol.

Socket

★ 117

Scan dependencies for vulnerabilities and security issues using the Socket API.

Cycode

★ 98

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.

Snak

★ 96

An agent engine for creating powerful and secure AI Agents powered by Starknet.

MCP Shell

★ 90

Execute secure shell commands from AI assistants and other MCP clients, with configurable security settings.

VibeShift

★ 68

An intelligent security agent that analyzes AI-generated code for vulnerabilities and assists with remediation.

MCP-CLI Adapter

★ 66

Use command line tools in a secure fashion as MCP tools.

MCPShell

★ 66

A secure bridge for LLMs to safely execute command-line tools via the Model Context Protocol (MCP).

Codacy

★ 60

Access the Codacy API to analyze code quality, coverage, and security for your repositories.

MCP ZAP Server

★ 60

Exposes OWASP ZAP as an MCP server, enabling AI agents to orchestrate security scans, import OpenAPI specs, and generate reports.

Kali AI Pentest MCP Tools

★ 58

An AI penetration testing tool that uses natural language to operate various security tools like nmap, sqlmap, and metasploit.

MCP SSH Server

★ 56

Securely execute remote commands and perform file operations over SSH, with support for both password and key-based authentication.

Enkrypt AI Secure MCP Gateway

★ 55

A secure MCP gateway that acts as a proxy, providing authentication, tool discovery, caching, and guardrail enforcement.

Security Audit Tool

★ 53

Audits npm package dependencies for security vulnerabilities with real-time checks against a remote npm registry.

MCPwner

★ 52

Automated Security Vulnerabilities Pentesting

NMAP

★ 49

Perform network scanning and security auditing using the NMAP utility.