Security & Monitoring MCP Servers
Security, identity, secrets, compliance, testing, logs, monitoring, alerts, and observability.
kiriya
Published by GitHub account SatPaingOo
A local MCP server exposing kiriya's cross-platform developer toolbox: files, git, ports, processes, archives, encoding and more, with safety confirmations.
EverThread
Published by GitHub account PB-Digital-LLC
EverThread runs a plain-English website security check — certificate, headers, scripts, forms, spam — and explains each finding to an assistant.
Lynx
com.thetempleofdoom.lynxOfficial publisher
A remote API that lets an assistant inspect files and images, including steganography and forensics checks, paid per use with Bitcoin.
Argus
com.thetempleofdoom.argusOfficial publisher
Argus is a remote MCP endpoint for an agent rental platform offering web vulnerability scanning, OSINT and red-team tooling via subscription.
Quiet Menders
com.brianboomsOfficial publisher
Remote MCP server offering free prompt-injection and risk-scanning clinic tools plus pay-per-call data APIs settled in USDC via x402.
SecScan
us.secscanOfficial publisher
SecScan runs graded security scans of web apps you own, returning prioritised findings, fix prompts and continuous monitoring from your editor.
Statuser
Published by GitHub account statuser-cloud
Lets an assistant manage Statuser.cloud uptime monitoring: check monitors, dig into incidents, publish status-page updates and configure notifications.
Skimless
Published by GitHub account pedroofrancaa
Skimless turns a large pull request diff into a reading order and findings packet, served locally to an AI assistant over MCP.
Ssdf Attestation Workflow Audit
Published by GitHub account jmshinhwa
A local stdio MCP server that packages 14 rules and four CISA attestation sections into a single workflow file for attestation workflow auditing.
Firebase Deploy Leak Audit
Published by GitHub account jmshinhwa
Reads firebase.json and lists the files a Firebase deploy would publish publicly, so an assistant can flag accidental leaks.
HSM Kit
Published by GitHub account hsm-kit
Local stdio MCP server from HSM Kit offering Base64, Luhn, key-component XOR and synthetic ISO-0 PIN block utilities for payment and crypto testing.
Dmarc Spf Audit
Published by GitHub account Dawaxwx
Remote MCP server that runs a full email-authentication audit of a domain in one call: SPF, DKIM, DMARC, MTA-STS and BIMI.
Arcaeon Adapter
io.arcaeon
A local stdio proxy that sits between an MCP client and server, logging every tool call to a hash-chained ledger without the agent's cooperation.
Jithox
com.jithoxOfficial publisher
Remote MCP server for pre-payment and e-invoice checks: IBAN structure, supplier bank changes, Peppol readiness and EU VAT lookups, with signed evidence.
Alice
io.tranxOfficial publisher
Lets an assistant audit a website's AI visibility, covering crawler access, rendering, and schema markup.
GVNR by Instruxi
io.gvnr
A local Claude Code governor that decides whether an agent action is allowed before it runs, enforcing spend limits and capability rules with a hash-chained…
vaultgate
Published by GitHub account adamrowles1996
Self-hosted remote MCP server that lets hosted AI agents use Bitwarden or Vaultwarden credentials without ever seeing them, via OAuth 2.1.
100pro Token Risk
dev.rendraputraOfficial publisher
Remote MCP server that runs read-only pre-trade risk screens on EVM tokens, contract source verification and wallets, paid per call in USDC on Base.
HALLUX
dev.blvkwareOfficial publisher
HALLUX verifies that package names, modules and DOIs actually exist before an assistant installs, imports or cites them.
Auth Posture — Email Deliverability & Spoofability Audit
app.rowb.auth-postureOfficial publisher
Lets an assistant audit an email domain in one call for mail receiving, spoofability and disposable-address risk.
Continuity Evidence
Published by GitHub account zerohourzulu
A local MCP evidence tool that records agent roles, permissions and unfinished duties across agent replacements, with durable retry handling.
Deep Noodle Security Review Guide
Published by GitHub account myzie
A remote, read-only MCP endpoint that supplies guidance and report templates for reviewing application security with your own agent.
Infisical Mcp
Published by GitHub account mrfentmen
Local stdio MCP server that lets an assistant manage secrets through the Infisical API using universal auth.
Doppler Mcp
Published by GitHub account mrfentmen
Doppler API: projects, configs, secrets listing and download. Needs service or personal token.