Security & Auth MCP Servers — Page 8

io.github.corpussanctum/atlas-mcp

Pre-action authorization for AI agents: permit, deny or escalate against a signed delegation chain.

OpsecForge

Local MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.

io.github.datahogo/datahogo

Scan a project for security issues locally with the open-source Data Hogo engine.

io.github.davidmosiah/delx-agent-utilities

Stateless URL, DNS, x402, JWT, encoding, and parsing tools for AI agents.

io.github.deckflow/deckprobe

Inspect PDF, Office, and iWork documents without rendering: counts, metadata, security signals

Delentia Sovereign AI Operating System

Stop rogue AI-agent tool calls before they run: deterministic policy gate + audit digest.

io.github.denial-web/agent-immune

AI agent security: prompt injection detection, semantic memory, output scanning, prompt hardening

TridentChain Security

Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

MCP Server for OSCAL

AI agent tools for Open Security Controls Assessment Language (OSCAL)

keyshroud

Agent-safe secrets from self-hosted Vaultwarden/Bitwarden: injected into commands, masked in output

io.github.dir-ai/voyager-browser

Voyager's web-page sense: safe read-only observation of one live URL (structure, security, a11y).

Purify Security Feeds

Query CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions

io.github.Easysend-co/easysend

EasySend file sharing MCP server - upload, download and share files. No authentication required.

io.github.eobi/nemesis-shield

Positive-security for apps, APIs, LLMs and edge, plus fraud scoring and identity/AML screening.

Living Stack Community

Free seven-tool proof loop for scoped authorization, outcome receipts, and evidence-bound claims.

SkillFM Beacon

AI health, token usage, LLM cost optimization, BYOK vault, and cleanup audits for MCP agents.

SkillFM Beacon

AI health, token usage, LLM cost optimization, BYOK vault, and cleanup audits for MCP agents.

SkillFM BYOK Vault

BYOK vault, provider API key guidance, usage visibility, and SkillFM Beacon checks for MCP agents.

io.github.ertugrulakben/dep-oracle

Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis.

ExposureGuard

Domain security scanning for AI agents. A-F grades, 8 checks, fix snippets.

EyalSec

Read your EyalSec security events, machines, runs and rules from an AI assistant.

Finch

Agentic AI runtime: persistent memory, vault, autonomous agents, deep research, DeFi execution.

io.github.FinishKit/mcp

FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality

Contract Security Scanner

Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.

YouTube License Metadata — FlashData

YouTube Creative Commons license-label metadata, not training authorization. Paid FlashData API.

Gadriel AI Security Harness

AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.

io.github.gambadio/onepassword-agent-mcp

Save and use 1Password secrets locally without exposing plaintext to AI agents.

Secret Handoff

Let agents use temporary secrets without receiving their values in chat. Local stdio; Node 22+.

io.github.Gorgon-Cyber/gorgon-scout

Run AI-driven web-app and API security scans (DAST) from Claude or any MCP agent. Windows.

Abnormal MCP Server

Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.

Notes Vault

Indexed search, schema-checked writes and session hooks for a markdown notes vault

KakaoTalk Message

KakaoTalk message MCP: send to self/friends, friends list, OAuth auto-refresh. 카카오톡 메시지 MCP.

io.github.gsepcore/gsep-mcp

AI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.

io.github.H129hj/checkmcp

Audit any MCP server's security & quality — OWASP MCP Top 10 + explainable 0-100 MCP Score

Eleion Scanner

Register/verify your domains, queue security scans, and read findings (CVE, severity).

io.github.icohangar-ops/governed-mcp-gateway

HTTP MCP gateway: principal on tools/call + SSE, allowlists, vault rotate, CHP gates.

APSA mobile app security audit

Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.

Vaultwarden Drop Slot

Create-only, age-encrypted deposits of new logins and notes into Vaultwarden, without vault reads.

io.github.irrenwill/secret-safe-env

Write secrets into .env without the agent ever seeing the value - Windows masked dialog (繁中 UI)

Agent Venue Radar

Screen AI-work venues for inventory, funding, payouts, withdrawal, economics, and security risk.

io.github.Jannis-E/x402-mcp-server

Pay-per-call x402 tools on Base: web extract/render, burn-once secret vault, chart, GeoTIFF

DopamineDesk x402 Marketplace

Find and buy x402 agent readiness, vendor risk, transaction, and company intelligence APIs.

toolprint by JEStats

package-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.

BenchFleet

Let AI agents use your real Android phones safely, with permissions, approvals and an audit log.

io.github.joepangallo/mcp-audit-server

Thin MCP and CLI proxy for AI agent and MCP security auditing via a hosted backend

io.github.jyswee/authshore

Auth infrastructure for coding agents. User pools, secrets vault, token management. As easy as git.

io.github.jyswee/secretcarousel

Agent-first secrets vault. Store, rotate, and share credentials from chat. 20 tools.

io.github.jyswee/sslwebsites

SSL certificate management for coding agents. Issue, renew, monitor certs. 10 tools stdio.