Security MCP servers

Find and redact personal data and secrets in text before it reaches a model. Local, no account.

Community MCP server for Aagon ACMP: clients, inventory, CVEs, jobs, tickets, activity log

The deterministic attack-surface perception layer for AI security agents

Drive a Tailscale node and its tailnet through the CLI and the control-plane API

Offline scam check for agents: verify links and payments before acting (allow, ask or deny).

Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.

Let AI agents see and use your tailnet: status, SSH config, Serve/Funnel sharing, ping matrix

Mint, resolve, audit, and rotate scope-limited expiring access links (qURLs) for AI agents.

Scan your own website for vulnerabilities: DNS takeover, compromised CDNs, debug mode and more.

Per-function effect analysis for agents: blast radius, what reaches the network, gate verdicts.

Security-focused MCP server for GnuPG signing, encryption and key management.

Passive AppSec scanners as eight parameterless MCP tools; the audited repository is data.

Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.

Electron release diff for security review: what changed in IPC, contextBridge, windows and hosts.

React Native and Expo health check: upgrade blockers, store rules, crash risks, security findings

Local-first PII and secret scrubber with checksum checks and reversible LLM tokens.

Agent-safe secrets from self-hosted Vaultwarden/Bitwarden: injected into commands, masked in output

Deterministic zero-trust policy enclave and cryptographic WORM audit ledger for MCP tools.

High-speed regex and entropy-based scanner redacting API keys, JWT tokens, and credentials

MCP server for Proofpoint Essentials -- MSP org, domain, user, licensing, and reporting management.

Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client.

Disposable email inboxes for AI agents — OTPs and magic links auto-extracted. No signup to try.

Check an MCP server, skill or plugin before your agent uses it: tool text on record, changes graded.

Risk-check counterparties before an AI agent pays; pay x402 resources only after a verified allow

Mobile Frida MCP Server - AI-powered mobile app exploration and testing via Frida instrumentation

Check, test, prove and review a rowstile policy: access rules for Postgres row-level security

Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.

Fail-closed privacy layer that pseudonymises enterprise API data for LLM agents and MCP clients.