Tools · Security Scanning
Best MCP servers for security scanning
305 MCP servers in the Official MCP Registry do security scanning. 143 can be used as a hosted endpoint, with nothing to install, and 235 publish their source code.
| # | Tool | Relevance | Connect | Code | Seen |
|---|---|---|---|---|---|
| 51 | BlackDome Threat Intel Live honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors. | In name threat intel | HOSTEDLOCAL | Open | 2d ago |
| 52 | Hares — MCP security scanner Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration) | In name security scanner | HOSTEDLOCAL | Open | 2d ago |
| 53 | Mund — MCP Security Scanner Scan for prompt injection, secrets, PII, and vet MCP servers before installation | In name security scanner | HOSTEDLOCAL | Open | 2d ago |
| 54 | SAST MCP Server 11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations | In name sast | HOSTEDLOCAL | Open | 2d ago |
| 55 | isMalicious threat intelligence for AI agents Indicator reputation verdicts, CVE lookups (CVSS, EPSS, KEV) and prompt-injection scans for agents | In name threat intelligence | HOSTEDLOCAL | Open | 2d ago |
| 56 | Black Duck Security Scanner AI-powered security scanning using Black Duck Signal for vulnerability detection. | In name security scanner | HOSTEDLOCAL | Open | 2d ago |
| 57 | Agent Security Scanner Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more. | In name security scanner | HOSTEDLOCAL | — | 2d ago |
| 58 | osv-advisory-mcp-server Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP. | In description vulnerabilities | HOSTEDLOCAL | Open | 10h ago |
| 59 | GitHits Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples. | In description vulnerabilities | HOSTEDLOCAL | Open | 2d ago |
| 60 | xfa XFA's remote MCP server — query device posture, compliance, policies & CVEs. Read-only. | In description cves | HOSTEDLOCAL | Open | 2d ago |
| 61 | mlab.sh Threat intelligence: enrich IOCs (IP, domain, URL, hash), search CVEs and actors, scan SBOMs. | In description threat intelligence | HOSTEDLOCAL | Open | 2d ago |
| 62 | SecurityScan Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10. | In description vulnerabilities | HOSTEDLOCAL | Open | 2d ago |
| 63 | HoneyLabs Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints. | In description cve | HOSTEDLOCAL | Open | 2d ago |
| 64 | vdb Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them. | In description cves | HOSTEDLOCAL | Open | 2d ago |
| 65 | security-intel Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402. | In description cves | HOSTEDLOCAL | Open | 2d ago |
| 66 | cybershield CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel. | In description threat intel | HOSTEDLOCAL | Open | 2d ago |
| 67 | tlpt TLPTOracle — 17-tool TIBER-EU TLPT framework: scope, threat intel, scenarios, reports. | In description threat intel | HOSTEDLOCAL | Open | 2d ago |
| 68 | RTK Motion — Motion Capture, Biomechanics, Threat & Fleet Intelligence Mocap, rehab biomechanics, threat intel, fleet vision. 21 MCP tools, 10 free. x402/USDC paid. | In description threat intel | HOSTEDLOCAL | Open | 2d ago |
| 69 | PkgSeek Linux Intelligence Linux package, file, command, vulnerability, lifecycle, migration, and repository intelligence. | In description vulnerability | HOSTEDLOCAL | Open | 2d ago |
| 70 | nslookup DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks | In description security scans | HOSTEDLOCAL | Open | 2d ago |
| 71 | FlowSentry Security scanner for n8n workflows + live MCP Trust-Check. 18 rules, OWASP mapped. Paid x402 API. | In description security scanner | HOSTEDLOCAL | Open | 2d ago |
| 72 | Agent-Shield Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection. | In description security scanner | HOSTEDLOCAL | Open | 2d ago |
| 73 | Security Recipes Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner. | In description cve | HOSTEDLOCAL | Open | 2d ago |
| 74 | sentrysurface Cybersecurity MCP server for URL scanning, threat intelligence, and domain reputation. | In description threat intelligence | HOSTEDLOCAL | Open | 2d ago |
| 75 | Security Intel MCP CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys. | In description cve | HOSTEDLOCAL | Open | 2d ago |
| 76 | vuln-intel Hosted CVE + bug-bounty-mechanic MCP: exploitation-first ranking, CVE fact-check, mechanic transfer | In description cve | HOSTEDLOCAL | Open | 2d ago |
| 77 | pyresec-agent SAST and SCA security auditing via x402 USDC on Base. Quick scans, deep audits, remediation. | In description sast | HOSTEDLOCAL | Open | 2d ago |
| 78 | Presend MCP Server Free MCP server of security & dev API tools -- supply-chain, CVE, DNS, WHOIS, OFAC, Cosmos SDK. | In description cve | HOSTEDLOCAL | Open | 2d ago |
| 79 | Urlhaus URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth) | In description malware | HOSTEDLOCAL | Open | 2d ago |
| 80 | Osv Dev OSV.dev — Google's open-source vulnerability database | In description vulnerability | HOSTEDLOCAL | Open | 2d ago |
| 81 | Nvd NVD MCP — wraps the NIST National Vulnerability Database API. | In description vulnerability | HOSTEDLOCAL | Open | 2d ago |
| 82 | Auditra Read-only MCP server for WordPress plugin audits: vulnerabilities, bloat, cron, orphaned tables. | In description vulnerabilities | HOSTEDLOCAL | Open | 2d ago |
| 83 | chat-recall One searchable history across every AI coding tool, with secret scanning and a shared task board. | In description secret scanning | HOSTEDLOCAL | Open | 2d ago |
| 84 | oracle42-intelligence AI-powered threat intelligence, smart contract auditing, and cybersecurity OSINT. | In description threat intelligence | HOSTEDLOCAL | Open | 2d ago |
| 85 | sectora Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST. | In description threat intel | HOSTEDLOCAL | Open | 2d ago |
| 86 | lazaretto Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools. | In description malware | HOSTEDLOCAL | Open | 2d ago |
| 87 | Bug Bounty Intelligence AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates. | In description security scanner | HOSTEDLOCAL | Open | 2d ago |
| 88 | coderegistry Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free. | In description security audits | HOSTEDLOCAL | Open | 2d ago |
| 89 | 航班管家航空数据 MCP | Flight Master Aviation Data MCP 航班管家 DAST 官方航空数据 MCP，支持 Remote HTTP 与 npm STDIO，提供航班动态、天气、轨迹及延误风险。Official Flight Master MCP. | In description dast | HOSTEDLOCAL | Open | 2d ago |
| 90 | Fetter MCP Real-time Python package and vulnerability data for AI coding agents. | In description vulnerability | HOSTEDLOCAL | Open | 2d ago |
| 91 | TrustScan Security scanner for MCP servers and skills: Unicode injection, patterns, secrets. | In description security scanner | HOSTEDLOCAL | Open | 2d ago |
| 92 | DDG Agent Services Pay-per-call x402 gateway: agent tools, OpenAI-compatible LLM, market data, RPC, security audits. | In description security audits | HOSTEDLOCAL | Open | 2d ago |
| 93 | nist-nvd-mcp-server Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE. | In description cves | HOSTEDLOCAL | Open | 2d ago |
| 94 | protectwith-kb AI-security knowledge as MCP: standards-mapped tools (OWASP, NIST, MITRE) for AI agents. | In description owasp | HOSTEDLOCAL | Open | 2d ago |
| 95 | Hacker Bob public records Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob. | In description cve | HOSTEDLOCAL | Open | 2d ago |
| 96 | AgentAegis Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security. | In description threat intel | HOSTEDLOCAL | Open | 2d ago |
| 97 | Docker Compose Audit Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images. | In description security audit | HOSTEDLOCAL | Open | 2d ago |
| 98 | GitHub Actions Audit GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection. | In description security audit | HOSTEDLOCAL | Open | 2d ago |
| 99 | URL Safety Validator MCP AI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel. | In description threat intel | HOSTEDLOCAL | Open | 2d ago |
| 100 | Bright Security AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities. | In description security testing | HOSTEDLOCAL | Open | 2d ago |
Ready-made AI agents
- $20/mo
- $24/mo · free plan
Other use cases
FAQ
How many MCP servers are there for security scanning?
Electra Index lists 305 active MCP servers for security scanning from the Official MCP Registry. 143 offer a hosted endpoint and 235 publish their source code.
Is there a hosted MCP server for security scanning, with nothing to install?
Yes. osv-advisory-mcp-server, GitHits and xfa declare a remote endpoint you add to your assistant's MCP settings.
Is there a ready-made AI agent for security scanning instead?
Yes. If you prefer a finished product to plugging tools into your own assistant, Claude Code and CodeRabbit do this out of the box.
How this list is ordered: a tool comes first when the use case appears in its name rather than only in its description, then when it offers a hosted endpoint, then when its source code is public, then by how recently our robot saw it in the Official MCP Registry. The match to security Scanning comes from the publisher's description (keyword method), not from a test of the tool. Only active tools with a real description are listed. No tool pays to appear here.