Security MCP servers

MCP server for KeyCloak Admin REST API via Service Account

Identify hash types offline: match a hex or crypt string against known algorithms and lengths

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

Scan what AI agents read for prompt injection: hidden unicode, comment instructions, exfil, lures.

MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.

Scans RAG content/scraped pages for indirect prompt injection

AI Bill of Materials (AI-BOM) generator + auditor MCP — CycloneDX ML-BOM, SPDX 3.0 AI profile, EU AI

Read token metadata, applications, audit logs, proxies and usage in the PCI vault.

MCP server for Bitdefender GravityZone's JSON-RPC API.

Dynamic SQL AST taint tracking and static vulnerability auditor detecting tautology injections

MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.

OSV.dev (Open Source Vulnerabilities) MCP.

Premium agentic endpoint for deepfake-sentinel-mcp.

The Sophos Central partner, organization and tenant APIs, routed to the right tenant and region

MCP server for Google Cloud Armor WAF log patrol: deny summaries and false-positive checks

Decode JSON Web Tokens locally: header, claims, expiry timeline and warnings

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

PR dependency early warning: install scripts, typosquats, downgrades, and lockfile drift.

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

Marks every line of a Livewire or Blade file that the visitor's browser can call, rewrite or read

Wraps the truesignal CLI as a single generic MCP tool for threat/connector status checks.

Pre-send risk check for AI agents that move money — screen an address or payment URL before sending.

Call-scoped Clear Signing presentation checks for EVM signing agents.

MCP server for DNSFilter's DNS security/filtering API.

HMAC-signed zero-width invisible canary token generator and output response leak auditor

MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

CIRCL Vulnerability-Lookup — aggregated vulnerability records

Parallel-burst abuse testing for agent APIs with replayable evidence packs.