Security & Auth MCP Servers — Page 6

brain-mcp

Your Obsidian vault as private, searchable memory for Claude, Cursor, Hermes and any MCP client

Deepsleuth

Deterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.

io.github.den-indance/shopify-mcp-pro

Shopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.

io.github.dingdawg/dingdawg-code-review

AI code review — security, quality, performance. Learns your patterns. Receipted.

io.github.dingdawg/dingdawg-shield

AI security scanning and trust scoring. Stack-specific threat models. Free local scan.

io.github.dockndevai/mcp-keycloak

Keycloak admin for AI agents — realms, users, clients, roles; safe-by-default governance.

LDAP Assistant MCP

MCP server for 389 Directory Server health diagnostics, log analysis, and SOS-report investigation

n8n MCP Community

A security-focused MCP server for self-hosted n8n Community Edition.

io.github.dulzuradev/liveauth-mcp

MCP server for LiveAuth: PoW + Lightning auth, L402 bundles, and paid MCP tool receipts.

io.github.Easton-OU/rootpilot-ssh-diagnose

Read-only SSH server diagnostics via a fixed 38-command whitelist; secrets redacted, no write path.

AI Agents API Library

Find APIs and MCP servers for AI agents: auth, free tier, MCP endpoint, docs, last-checked date.

Tkach Security

Fail-closed MCP adapter for untrusted model output over a local Tkach runtime.

Compass - MCP Discovery & Security Gateway

Find best-fit tools for any problem, vetted for prompt-injection risk before your agent trusts them

Singularity - MCP Discovery & Security Gateway

Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring

io.github.gblinproject/gblin-mcp-server

Collateral-backed treasury vault for AI agents on Base. Crash Shield defends, JIT pays x402.

MCPSentinel

Precision-first security scanning for Model Context Protocol servers.

Guard Core

Guard Core security MCP: SecurityConfig validation, docs search, live threat detection.

io.github.GuardBee/a2a-auditor

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

io.github.GuardBee/elicitation-auditor

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

io.github.GuardBee/mcp-config-auditor

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

io.github.GuardBee/mcp-server-auditor

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

io.github.GuardBee/oauth-auditor

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

io.github.GuardBee/secret-scanner

Scans files for leaked secrets and API keys

io.github.GuardBee/security-proxy

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

io.github.GuardBee/security-suite

Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence

io.github.GuardBee/ssl-inspector

TLS certificate/cipher/protocol inspection

Bee: Quantum Intelligence

Bee governed intelligence for chat, code, research, documents, and memory.

DefectDojo

MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding

io.github.juanisidoro/securecode

Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.

io.github.kanywst/mcp-opa-authz

Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.

Prop Firm Rules (FloorGuard)

Sourced prop-firm daily-loss and max-drawdown rules and a drawdown-room checker. Read-only, no auth.

io.github.kjgueye/netintel-mcp

MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments

io.github.kubeleash/kubeleash

Kubernetes MCP server with RBAC-style, context-scoped guardrails for AI agents.

io.github.loaditoutadmin/loaditout

Search and install 20,000+ security-graded MCP servers and agent skills.

Locker Protocol Agentic

Hyperliquid perps for AI agents. The agent trades; the keys stay offline in Locker Vault.

SecureNow

Production security for Node.js apps: investigate live attacks, block IPs, tune detections.

Cleanor

Zero-auth MCP: image optimize, cited storage/format data, and dev utilities LLMs get wrong.

AtlasYield

DeFi vault judgment for agents: 16-factor Atlas Score, route survival, blowup alerts. Read-only.

Black Duck Security Scanner

AI-powered security scanning using Black Duck Signal for vulnerability detection.

DMCA.com Cases

DMCA.com cases. Your own token via Authorization: Bearer. No function key, no shared token.

Skarn

Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted

com.goldpopcon/openapi-mcp

금방 Open API MCP 서버 — 스펙 조회·JWT 서명 코드 생성·로컬 서명/검증

Graneth

Pre-flight check for AI coding agents: hallucinated packages + secrets, 6 ecosystems, no account.

lovefengis

Services and prices of lovefengis, a software studio in Izmir, Turkey. Read-only, no auth.

MCPLookup

Look up independent trust ratings and security, maintenance, and adoption evidence for MCP servers.

Holster MCP

Local-first secret scanning, rotation, vault, and audit-log tools for AI agents.

OfflineCreator Studio

Create images and videos with OfflineCreator Studio through OAuth or the npm stdio server.

com.oksigenia/checker-mcp

Domain security & privacy checker as an MCP server. 17 live checks, 0-100 score, local-first.