Security: MCP servers & Agent Skills
Security MCP servers and Agent Skills from public sources. 68 entries, sorted by featured, then GitHub stars.
nanoclaw
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
security-best-practices
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
security-threat-model
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security
SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
mcp-for-beginners
This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable, and secure AI workflows from session setup to service orchestration.
lamda
Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.
skills
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Claude-Red
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
Claude Code Ultimate Guide
Search the Claude Code Ultimate Guide and machine-readable references from any MCP client.
Viper
Adversary simulation and Red teaming platform with AI
Claude-BugHunter
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
lean-ctx
LeanCTX is the Context Gateway for AI Systems. Select task-relevant context, apply supported controls, connect local knowledge and inspect recorded evidence. Open-source Engine: CLI, MCP, hooks and supported proxy paths.
ctf-skills
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
geo-sleuth
An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its work. Works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.
jadx-ai-mcp
Plugin for JADX to integrate MCP server
skill-scanner
Security Scanner for Agent Skills
x64dbg-mcp-server
x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig — zero dependencies, single-binary output, cros
AiSOC
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
toolhive
ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
mcp-router
MCP Router — development, support and security updates ended 2026-09-18. Historical source and final release for existing users.
Qu1cksc0pe
All-in-One malware analysis tool.
ADR
ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.
OpenOSINT
AI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
pentest-ai
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
cve-mcp-server
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
LitterBox
A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.
awesome-hacking-lists
A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!
reverify
Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.
open-reverselab
Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.
agentic-radar
A security scanner for your LLM agentic workflows
wassette
Wassette: A security-oriented runtime that runs WebAssembly Components via MCP
ai-security-tool
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.
MCP-Kali-Server
MCP configuration to connect AI agent to a Linux machine.
jadx-mcp-server
MCP server for JADX-AI Plugin
offensive-claude
Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest
io.github.KryptosAI/mcp-observatory
MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
RivalSearchMCP
Deterministic research MCP server on FastMCP 3 — 5-engine web search, 9-platform social search, 6 academic DBs, news aggregation, entity profiles, conflict detection, document analysis. No API keys. No in-server LLM. Structured outputs for agent chaining.
RepoPilot
Local, deterministic review of Git changes: weakened tests and CI gates, risky flows, blast radius.
ai.smithery/Nekzus-npm-sentinel-mcp
Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…
io.github.FarzamHabibi/prodcheck
4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.
ai.imboard/dossier
MCP server for dossier automation standard - enables LLMs to discover, verify, and execute dossiers
EchelonGraph CVE & Exposure
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
io.github.Gowthaman90/mcp-bastion
Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.
com.vibgrate/ai-context
Local-first MCP server: version-correct library docs, code map, and offline drift for your repo.
q-ring
OS keychain secrets for AI coding agents, over MCP.
RugSnare
Pin MCP tool contracts by sha-256; catch silent drift, rug pulls and bait-and-switch in CI.
1Claw Vault
HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.
ai.tuteliq/mcp
Detect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video.
app.scfcontrolsplatform/mcp-server-scf
MCP server for the SCF Controls Platform — 187 tools for controls, evidence, risk, and TPRM.
io.github.Mickdownunder/safeinstall
Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks
NativeKeel
React Native and Expo health check: upgrade blockers, store rules, crash risks, security findings
PostgreSQL (hardened, read-only)
Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.
dev.dnsdoctor/dns-doctor
Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.
ZeroDOM
The deterministic attack-surface perception layer for AI security agents
Black Duck Security Scanner
AI-powered security scanning using Black Duck Signal for vulnerability detection.
com.dechonet/mcp
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
com.fidacy/ai-agent-firewall
Every agent action watched, every money-moving one gated, every verdict independently verifiable.
Domain Security
Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.
AsItIs
Read-only MCP server for markdown and agent steering files: read, outline, lint, context budget.
io.github.4DA-Systems/4da-mcp-server
Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
io.github.Omodaka9375/netexpert-mcp
Cross-platform local-network diagnostics & security-posture MCP server — 31 tools.
isMalicious threat intelligence for AI agents
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
SecureNow
Production security for Node.js apps: investigate live attacks, block IPs, tune detections.
Small Print
Check an MCP server, skill or plugin before your agent uses it: tool text on record, changes graded.
CodexGuild
What changed in your stack since the model's cutoff, error fixes, and security-scanned skills/MCPs
com.correctover/mcp-server
MCP runtime security. 22µs validation, 97% self-healing. Detects RCE, SSRF, credential hijacking.
io.github.BurtTheCoder/shodan
MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
io.github.BurtTheCoder/virustotal
MCP server for querying VirusTotal API with comprehensive security analysis tools.
One email a week. Generated from the same health data as this site.