Back to MCP market
Security & Monitoring

Security & Monitoring MCP Servers

Security, identity, secrets, compliance, testing, logs, monitoring, alerts, and observability.

Tracelane Mcp

Published by GitHub account tracelane

Verified

Read-only MCP server that gives an assistant tenant-scoped access to Tracelane agent traces, spans and guardrail verdicts.

STDIODesktop only
Security & MonitoringNot validated yetNov 7, 2026

ZRouter

Published by GitHub account nexusrun

Verified

Hosted MCP server for managing a ZRouter AI gateway account: spend, logs, model routers, API keys, budgets and rate limits.

Streamable HTTPWeb executableAuth
Security & MonitoringCredential requiredNov 7, 2026

prom-mcp

Published by GitHub account aniketatgithub

Verified

Local Prometheus MCP server that lets an AI agent run PromQL queries, explain firing alerts, and discover real series and label values.

STDIODesktop only
Security & MonitoringNot validated yetOct 24, 2026

Toxic Flow Auditor

Published by GitHub account GuardBee

Verified

Audits MCP tool catalogs and server source for "lethal trifecta" toxic flows and returns an A–F grade.

STDIODesktop only
Security & Monitoring5 toolsNov 3, 2026

Tool Poisoning Scanner

Published by GitHub account GuardBee

Verified

Scans MCP server source code for tool poisoning (hidden instructions in tool descriptions) and confused-deputy tools whose names promise read-only behavior.

STDIODesktop only
Security & Monitoring4 toolsNov 3, 2026

Security Suite

Published by GitHub account GuardBee

Verified

GuardBee Security Suite bundles 30 security packages (129 tools) into one MCP server for scanning code, configs, dependencies, models and network endpoints.

STDIODesktop only
Security & MonitoringNot validated yetNov 7, 2026

Security Proxy

Published by GitHub account GuardBee

Verified

A local MCP security proxy that sits in front of other MCP servers to block prompt injection, mask PII, enforce policy and write a hash-chained audit log.

STDIODesktop only
Security & MonitoringNot validated yetNov 3, 2026

Secret Scanner

Published by GitHub account GuardBee

Verified

Local MCP server that scans text, files, directories, git history and coding-agent transcripts for exposed secrets and API keys.

STDIODesktop only
Security & Monitoring6 toolsNov 3, 2026

Prompt Leak Scanner

Published by GitHub account GuardBee

Verified

Scans outbound LLM prompts, chat request bodies, files and directories for leaked credentials and PII, returning masked findings.

STDIODesktop only
Security & Monitoring5 toolsNov 3, 2026

Prompt Injection Scanner

Published by GitHub account GuardBee

Verified

Scans text, files and directories for indirect prompt injection payloads before the content reaches a model's context.

STDIODesktop only
Security & Monitoring4 toolsNov 3, 2026

Owasp Scan

Published by GitHub account GuardBee

Verified

Runs a unified OWASP MCP Top 10 security scan over a filesystem path, a live MCP server, or a saved tools/list dump, returning findings with an A–F grade.

STDIODesktop only
Security & Monitoring4 toolsNov 3, 2026

Oauth Auditor

Published by GitHub account GuardBee

Verified

Local MCP server that scans MCP server source code for OAuth 2.1 anti-patterns such as token passthrough and missing audience validation.

STDIODesktop only
Security & Monitoring4 toolsNov 3, 2026

Mcp Server Auditor

Published by GitHub account GuardBee

Verified

Local MCP server that scans other MCP servers' tool definitions and code for insecure patterns such as excessive agency, injection sinks and hardcoded secrets.

STDIODesktop only
Security & Monitoring4 toolsNov 3, 2026

Context Oversharing Auditor

Published by GitHub account GuardBee

Verified

Local MCP server that scans agent and MCP source code for OWASP MCP10:2025 context-oversharing patterns and reports findings.

STDIODesktop only
Security & Monitoring4 toolsNov 3, 2026

Audit Gap Auditor

Published by GitHub account GuardBee

Verified

Audits MCP server source code for OWASP MCP08:2025 audit and telemetry gaps, flagging missing tool-call logs, raw args in logs and disabled audit.

STDIODesktop only
Security & Monitoring4 toolsNov 3, 2026

Ronin

Published by GitHub account Goofproof

Verified

Ronin is a marketplace for AI agents: register a key, list skills or services, post and bid on jobs, deliver work and record settlements.

Streamable HTTPWeb executable
Security & Monitoring23 toolsOct 27, 2026

Rightis

Published by GitHub account Backers-Shawn

Verified

Remote Rightis registry that lets an assistant check whether a real person or character is registered and what AI uses they allow before generating a…

Streamable HTTPWeb executable
Security & Monitoring3 toolsOct 24, 2026

sealkeep

Published by GitHub account munhq

Verified

Lets an AI assistant run commands with stored secrets injected into the environment, while redacting the values from all output.

STDIODesktop only
Security & Monitoring3 toolsOct 31, 2026

APSA mobile app security audit

Published by GitHub account ictechgy

Verified

Local MCP server that lets an assistant run evidence-graded Android and iOS security audits of source, APK, AAB and IPA inputs and review the saved reports.

STDIODesktop only
Security & Monitoring24 toolsNov 3, 2026

macOS MCP Server

Published by GitHub account deploymenttheory

Verified

Local MCP server that lets an AI agent perceive and control the macOS desktop through the accessibility tree, input, screenshots, shell and files.

STDIODesktop only
Security & MonitoringNot validated yetOct 24, 2026

Skuuy MCP

Published by GitHub account deaabie

Verified

Remote MCP server bundling 13 privacy-first network, auth and web utilities — IP lookup, proxies, DNS, URL reading, temp inboxes and more — with no API key.

Streamable HTTPWeb executable
Security & Monitoring16 toolsOct 27, 2026

1gateway

Published by GitHub account code0xff

Verified

Remote MCP endpoint offering 40+ pay-per-call data tools via x402 (USDC on Base): Korean public data, crypto/chain checks, web utilities and LLM pricing.

Streamable HTTPWeb executable
Security & Monitoring41 toolsOct 27, 2026

Email Verifier MCP

Published by GitHub account PanStories

Verified

Checks whether email addresses are deliverable using RFC syntax, MX records, a disposable-domain blacklist and role-account detection, with optional SMTP…

Streamable HTTPWeb executableAuth
Security & MonitoringCredential requiredOct 30, 2026

Polish KYB

Published by GitHub account ContentWriterco

Verified

A read-only remote MCP server for Polish company due diligence, letting an assistant look up KRS registry profiles, owners, insolvency, sanctions and court gaz.

Streamable HTTPWeb executable
Security & Monitoring12 toolsOct 24, 2026