Best Security MCP Servers

Provides cryptographically secure random number generation with seven specialized tools for integers, floats, bytes, UUIDs, strings, random choices, and booleans using Node.js's crypto module for security-sensitive applications like key generation, session tokens, and password creation.

Cycode Security Scanner

Official

Integrates with Cycode's security platform to perform automated SAST, SCA, IaC, and secrets scanning on local files, Git repositories, and commit ranges with detailed vulnerability reports and remediation guidance.

Integrates with Firewalla's MSP API v2 to provide real-time network monitoring, security analysis, and firewall management through 28 specialized tools for security alert monitoring, bandwidth tracking, device management, rule operations, and geographic threat analysis.

IPLocate

Official

Integrates with IPLocate.io API to provide IP address geolocation, network information, privacy detection, and abuse contact data for cybersecurity analysis, fraud prevention, and network administration.

Socket Security

Official

Integrates with Socket's dependency security API to analyze npm and PyPI packages, returning detailed security and quality metrics for vulnerability assessment and dependency management.

Shutter Network

Official Remote

Encrypts messages using Shutter Network's decentralized timelock encryption system where messages can only be decrypted after a specified future time, supporting natural language time parsing and threshold cryptography for trustless time-delayed communications like sealed bid auctions and scheduled announcements.

Monitors SSL certificates and domain registrations with real-time certificate validation and WHOIS lookups to track expiration dates, registrar information, and certificate chain status for proactive renewal management and security auditing.

Provides random number generation utilities including pseudorandom and cryptographically secure operations for integers, floats, weighted selections, list shuffling, and secure token generation.

Performs comprehensive security analysis of code repositories by detecting exposed secrets, vulnerabilities, dependency issues, and configuration problems using regex patterns and vulnerability detection algorithms.

Integrates with Netskope API to manage private access infrastructure, enabling automated publisher lifecycle, app configuration, policy creation, and traffic diagnostics.

Pangea

Official

Integrates with Pangea's cybersecurity APIs to provide threat intelligence, data protection, and security analysis capabilities including reputation checking, embargo screening, sensitive data redaction, audit logging, and cryptographic key management with built-in AI Guard protection against malicious inputs and outputs.

O

OSINT

Remote

Real-time OSINT intelligence platform for global security monitoring.

REMnux MCP Server

Official

Enables AI assistants to execute malware analysis tools on a REMnux system via Docker, SSH, or local connections. It provides automated file-type analysis, structured tool discovery, and security guardrails for streamlined malware investigation.

PDF.co

Official

Integrates with PDF.co's cloud API to provide 30+ document processing tools including PDF conversion, form handling, OCR, merging, splitting, password protection, and invoice parsing for automated document workflows.

Integrates with Netskope API to manage private access infrastructure, enabling automated publisher lifecycle, app configuration, policy creation, and traffic diagnostics.

Provides security middleware that guards MCP implementations against unauthorized access, data leakage, and malicious interactions through threat detection and protection validation.

Provides a secure terminal server for executing whitelisted shell commands with strict resource controls and security boundaries.

Provides expert prompt engineering capabilities through LM Studio integration, featuring 35+ specialized functions for code analysis, generation, security audits, documentation creation, and creative tasks with intelligent context window management and caching optimization.

GitGuardian MCP Server

Official

Enables AI agents to scan projects for leaked secrets and manage security incidents using GitGuardian's comprehensive API. It supports automated secret detection, honeytoken creation, and remediation workflows to secure codebases without context switching.

Provides access to the NIST National Vulnerability Database through get_cve and search_cve tools for retrieving and searching CVE records with customizable result options.

Bridges to the DefectDojo vulnerability management system, enabling interaction with security findings, products, and engagements for streamlined security workflow integration.