Security MCP servers

Identify hash types offline: match a hex or crypt string against known algorithms and lengths

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

Scan what AI agents read for prompt injection: hidden unicode, comment instructions, exfil, lures.

MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.

Scans RAG content/scraped pages for indirect prompt injection

AI Bill of Materials (AI-BOM) generator + auditor MCP — CycloneDX ML-BOM, SPDX 3.0 AI profile, EU AI

MCP server for Bitdefender GravityZone's JSON-RPC API.

Dynamic SQL AST taint tracking and static vulnerability auditor detecting tautology injections

MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.

The Sophos Central partner, organization and tenant APIs, routed to the right tenant and region

MCP server for Google Cloud Armor WAF log patrol: deny summaries and false-positive checks

Decode JSON Web Tokens locally: header, claims, expiry timeline and warnings

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

PR dependency early warning: install scripts, typosquats, downgrades, and lockfile drift.

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

Marks every line of a Livewire or Blade file that the visitor's browser can call, rewrite or read

Wraps the truesignal CLI as a single generic MCP tool for threat/connector status checks.

Pre-send risk check for AI agents that move money — screen an address or payment URL before sending.

MCP server for DNSFilter's DNS security/filtering API.

HMAC-signed zero-width invisible canary token generator and output response leak auditor

MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

Cyber-insurance posture for a whole SonicWall fleet: firmware, advisories, MFA, SSL-VPN exposure

The Have I Been Pwned breach catalogue: every known data breach, one breach in detail and the

Baselines an MCP server's tools and detects tool-definition changes after approval

Observability, tracking, and root-cause for Security Wave scans and findings.

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

Finds the lit-html binding positions auto-escaping does not cover, before the component ships

Url Ai MCP server. Tools: parse url, shorten url data, check url safety. Built by MEOK AI Labs.