Back to Registry
Security MCP Servers
Browse 25 Model Context Protocol servers for security. Each server works with Cursor, Claude, VS Code, ChatGPT, Windsurf, JetBrains, and any MCP-compatible AI client. Install with one click using McpMux.
1Password (npx)
Access secrets from 1Password vaults. List vaults, retrieve items, and search for credentials using a service account token.
Tools
LocalAPI Key
AgentServices
52 paid x402 API endpoints for AI agents — crypto, data, DeFi, and market intelligence.
Tools
RemoteOAuth
Aikido Security (npx)
Scan code and secrets with Aikido Security directly from your AI coding agent. Exposes Aikido's Code and Secrets Scan as an MCP tool returning machine-readable findings you can triage, fix, or ignore.
Tools
LocalAPI Key
Aperture Wallet Knowledge
Search verified Aperture Wallet product facts, supported mainnets, security guidance, releases, app-screen semantics, and Journal articles through 12 public read-only tools.
Tools
Remote
Auth0 (npx)
Manage your Auth0 tenant through natural language: applications, APIs (resource servers), actions, forms, and logs via the Auth0 Management API. Authentication uses an OAuth 2.0 device-authorization browser flow handled by the server; tokens are stored in your OS keychain.
Tools
LocalOAuth
Bitwarden (npx)
Securely access your Bitwarden vault and administer your organization through the Bitwarden CLI and Public API. Manage vault items, folders, collections, Sends, and password generation, plus organization members, groups, policies, and audit logs.
Tools
LocalAPI Key
Codacy (npx)
Connect to Codacy to analyze code quality and security, run static analysis (SAST, secrets, dependency, and IaC scans), browse repositories, list issues, and surface coverage data from your Codacy account via npx.
Tools
LocalAPI Key
CorroborateMe
Prove end users to agents and apps: login-links, OIDC clients, and API keys over remote MCP
Tools
RemoteOAuth
CQC Provider Regulatory Decision Layer
Deterministic England CQC provider regulatory preflight decisions for registration scope and statutory notifications.
Tools
Remote
datamcp
Hosted Model Context Protocol gateway for PostgreSQL, MySQL, OpenAPI/Swagger, and shared Agent Memory with scoped access.
Tools
RemoteOAuth
Doppler (npx)
Manage Doppler secrets, projects, configs, and environments through the Doppler API. Tools are auto-generated from the Doppler OpenAPI spec and support read-only and project/config scoping.
Tools
LocalAPI Key
England Works Watch
Deterministic UK Skilled Worker sponsor-duty change-impact decisions with evidence-linked regulatory guidance.
Tools
Remote
Infisical (npx)
Manage Infisical secrets, projects, environments, and folders through the Infisical API. Authenticates with a machine identity using Infisical Universal Auth.
Tools
LocalAPI Key
MCPShield
Security scanner for MCP servers - detects tool poisoning, prompt injection, and 90+ vulnerability patterns.
Tools
Local
Palisade DMARC Agent
Manage DMARC, SPF, DKIM, BIMI, MTA-STS, DNS records, and email-authentication tasks through Palisade.
Tools
RemoteAPI Key
PromptGuard Scan MCP
Remote MCP for paid LLM security checks, prompt-injection scanning, jailbreak review, leakage signals, and release-readiness reporting.
Tools
RemoteAPI Key
SandBase Harness
MCP bridge for SandBase Harness sessions, sandboxed turns, artifacts, audit, and replay.
Tools
LocalAPI Key
Semgrep (uvx)
Run Semgrep static analysis through MCP. Scan code for security vulnerabilities with 5,000+ built-in rules, write and run custom rules, inspect ASTs, and fetch findings from the Semgrep AppSec Platform.
ToolsResourcesPrompts
LocalAPI Key
ServerCard Trust MCP
MCP server-card validation, auth checks, trust packets, and readiness as a paid remote MCP.
Tools
RemoteAPI Key
Snyk (npx)
Official Snyk MCP server, shipped inside the Snyk CLI. Scans code, open-source dependencies, containers, and IaC for vulnerabilities directly from your AI agent, surfacing security issues and fix guidance during development.
Tools
LocalAPI Key
Socket (npx)
Query Socket.dev for dependency security scores, supply-chain risk, malware/typosquat threat feeds, and package metadata across npm, PyPI, Cargo, Maven, NuGet, RubyGems, Go, and more. Runs locally via npx.
Tools
LocalAPI Key
SonarQube (Docker)
Official SonarQube MCP server (Docker) connecting AI agents to SonarQube Cloud and SonarQube Server for code quality and security data. Analyze code snippets, retrieve issues and security hotspots, browse projects, and inspect quality gates.
Tools
LocalAPI Key
UK Premises Licence Preflight
Deterministic England premises-licensing preflight decisions for regulated licensing and compliance workflows.
Tools
Remote
UK Taxi PHV Regulatory Decision Layer
Deterministic UK taxi and private-hire regulatory preflight decisions for licensing and compliance workflows.
Tools
Remote
Vault (Docker)
Connect to HashiCorp Vault via Docker to manage secrets and secrets engines. Read, write, list, and delete key-value secrets, create and manage mounts, and handle PKI certificates (issuers, roles, certificate issuance) in an isolated container.
Tools
LocalAPI Key
About Security MCP Servers
Security MCP servers connect AI clients like Cursor, Claude Desktop, VS Code, ChatGPT, Windsurf, and JetBrains to security tools and services through the Model Context Protocol. These servers provide AI-accessible tools, resources, and prompts that enable your AI assistant to interact with security platforms directly.
All security MCP servers in the McpMux registry can be installed with one click. McpMux handles configuration, credential encryption, and client connections automatically. No manual JSON editing required.
Browse Other Categories
Install Security MCP Servers with McpMux
One-click install for all security servers. Works with Cursor, Claude, VS Code, ChatGPT, Windsurf, and JetBrains.