Security & Monitoring MCP Servers
Security, identity, secrets, compliance, testing, logs, monitoring, alerts, and observability.

Tracelane Mcp
Published by GitHub account tracelane
Read-only MCP server that gives an assistant tenant-scoped access to Tracelane agent traces, spans and guardrail verdicts.

ZRouter
Published by GitHub account nexusrun
Hosted MCP server for managing a ZRouter AI gateway account: spend, logs, model routers, API keys, budgets and rate limits.

prom-mcp
Published by GitHub account aniketatgithub
Local Prometheus MCP server that lets an AI agent run PromQL queries, explain firing alerts, and discover real series and label values.

Toxic Flow Auditor
Published by GitHub account GuardBee
Audits MCP tool catalogs and server source for "lethal trifecta" toxic flows and returns an A–F grade.

Tool Poisoning Scanner
Published by GitHub account GuardBee
Scans MCP server source code for tool poisoning (hidden instructions in tool descriptions) and confused-deputy tools whose names promise read-only behavior.

Security Suite
Published by GitHub account GuardBee
GuardBee Security Suite bundles 30 security packages (129 tools) into one MCP server for scanning code, configs, dependencies, models and network endpoints.

Security Proxy
Published by GitHub account GuardBee
A local MCP security proxy that sits in front of other MCP servers to block prompt injection, mask PII, enforce policy and write a hash-chained audit log.

Secret Scanner
Published by GitHub account GuardBee
Local MCP server that scans text, files, directories, git history and coding-agent transcripts for exposed secrets and API keys.

Prompt Leak Scanner
Published by GitHub account GuardBee
Scans outbound LLM prompts, chat request bodies, files and directories for leaked credentials and PII, returning masked findings.

Prompt Injection Scanner
Published by GitHub account GuardBee
Scans text, files and directories for indirect prompt injection payloads before the content reaches a model's context.

Owasp Scan
Published by GitHub account GuardBee
Runs a unified OWASP MCP Top 10 security scan over a filesystem path, a live MCP server, or a saved tools/list dump, returning findings with an A–F grade.

Oauth Auditor
Published by GitHub account GuardBee
Local MCP server that scans MCP server source code for OAuth 2.1 anti-patterns such as token passthrough and missing audience validation.

Mcp Server Auditor
Published by GitHub account GuardBee
Local MCP server that scans other MCP servers' tool definitions and code for insecure patterns such as excessive agency, injection sinks and hardcoded secrets.

Context Oversharing Auditor
Published by GitHub account GuardBee
Local MCP server that scans agent and MCP source code for OWASP MCP10:2025 context-oversharing patterns and reports findings.

Audit Gap Auditor
Published by GitHub account GuardBee
Audits MCP server source code for OWASP MCP08:2025 audit and telemetry gaps, flagging missing tool-call logs, raw args in logs and disabled audit.

Ronin
Published by GitHub account Goofproof
Ronin is a marketplace for AI agents: register a key, list skills or services, post and bid on jobs, deliver work and record settlements.

Rightis
Published by GitHub account Backers-Shawn
Remote Rightis registry that lets an assistant check whether a real person or character is registered and what AI uses they allow before generating a…
sealkeep
Published by GitHub account munhq
Lets an AI assistant run commands with stored secrets injected into the environment, while redacting the values from all output.

APSA mobile app security audit
Published by GitHub account ictechgy
Local MCP server that lets an assistant run evidence-graded Android and iOS security audits of source, APK, AAB and IPA inputs and review the saved reports.

macOS MCP Server
Published by GitHub account deploymenttheory
Local MCP server that lets an AI agent perceive and control the macOS desktop through the accessibility tree, input, screenshots, shell and files.

Skuuy MCP
Published by GitHub account deaabie
Remote MCP server bundling 13 privacy-first network, auth and web utilities — IP lookup, proxies, DNS, URL reading, temp inboxes and more — with no API key.
1gateway
Published by GitHub account code0xff
Remote MCP endpoint offering 40+ pay-per-call data tools via x402 (USDC on Base): Korean public data, crypto/chain checks, web utilities and LLM pricing.

Email Verifier MCP
Published by GitHub account PanStories
Checks whether email addresses are deliverable using RFC syntax, MX records, a disposable-domain blacklist and role-account detection, with optional SMTP…

Polish KYB
Published by GitHub account ContentWriterco
A read-only remote MCP server for Polish company due diligence, letting an assistant look up KRS registry profiles, owners, insolvency, sanctions and court gaz.