MCP Server Directory
Security MCP Servers
276 servers in this category
Security servers cover the defensive tooling: secret managers, vulnerability databases, dependency scanners, and access log auditors. Agents use them to check a dependency before installing it, rotate a credential without it landing in a chat log, or sweep an access history for anomalies.
Vet these servers the way you would vet any security tool. Prefer open repositories you can read, pinned versions, and least privilege credentials. The integrity hash on every Pharos install helps here too.
Top 24 right now
app.cabinetproject/dealer
Cabinet Project
Cabinet quotes, job status, selling prices and kitchen estimates. Read-only tools with OAuth.
app.certman/server
Create and manage your own Certificate Authority for internal HTTPS.
app.clearpolicy/clearpolicy
ClearPolicy
Authenticated MCP server for ClearPolicy policy and compliance workflows.
app.katla/katla
Katla
GDPR/CCPA cookie consent: scan sites for cookies, track consent rates, generate privacy policies.
app.locize.mcp/server
Locize
Locize TMS: 26 tools for translations, TM/glossary/styleguide/screenshot context, versions. OAuth.
app.lukija/lukija
Lukija
Continue Finnish reading and practise saved words from an authenticated Lukija account.
app.maxworth/maxworth
MaxWorth (your cards)
Read-only access to the cards, credit card credits and offers you track in MaxWorth. OAuth sign-in.
app.melodygenie/melody-genie
Write lyrics in 100+ styles, score them, generate full songs with 4 engines, split stems. OAuth.
app.openkrill/packages
Package Health Check
Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.
app.perfumate/perfumate
PerfuMate
Perfumery materials, IFRA Category 4, EU allergens, and your formulas and shelf via OAuth.
app.scansing/scansing
ScanSing: sheet music to MusicXML
Sheet music (PDF, photo, scan) to MusicXML: recognise, describe, extract parts, transpose, MIDI.
app.vercel.stackfacts/stackfacts
Stackfacts
Neutral, sourced, dated facts for choosing software: price, free tier, idle rules, security record.
archi.collab/archicollab
ArchiCollab
Interrogez vos projets ArchiCollab : plans, annotations, équipe. Répondez et exportez le PDF. OAuth.
au.bricktrack/portfolio
BrickTrack
Australian property portfolio: positions, performance, tax and transactions, scoped by OAuth login.
Backgen Mcp
Backgen Mcp
Backend project scaffolding CLI — generate production-ready Node.js/Express/Prisma backends in seconds. Plugins, presets, auth, RBAC, audit logs, and more.
Backgen MCP Server
Backgen MCP Server
Backend project scaffolding CLI — generate production-ready Node.js/Express/Prisma backends in seconds. Plugins, presets, auth, RBAC, audit logs, and more.
be.co-legal/legal-lookup
Belgian and Dutch legal & fiscal lookups (KBO, VIES, ECLI, Justel, EUR-Lex) plus scans. 14 tools.
be.lexgo/jobs
LexGO Jobs
Live Belgian and Luxembourg legal jobs. Unauthenticated. Send candidates to click_url.
better-auth-mcp-server MCP Server
better-auth-mcp-server MCP Server
Mirror of
br.com.cartena/cartena
Cartena
Acesse as ferramentas da API Cartena por MCP remoto com autenticação OAuth.
br.com.sinthoma/conector
Sinthoma
Read-only Sinthoma clinical connector: patients, sessions and prep; OAuth consent and audit.
cc.accrue/mcp
Stablecoin Yield Index (SYX) and live USDC vault APYs across Ethereum, Base, Arbitrum.
CISA Vulnerability Checker MCP Server
CISA Vulnerability Checker MCP Server
kev-mcp server
co.auditon/assessments
Auditon security assessments
Read-only access to your Auditon vulnerability scans: findings, endpoints, reports and changes.
Questions about Security servers
Is it safe to give an agent access to secrets?
It can be, with the right server. Look for ones that pass values to tools without printing them, and scope credentials to what the agent actually needs.
Can these servers scan my dependencies?
Several wrap vulnerability databases and advisory feeds. Pair one with a Developer Tools server for a full check before installing anything new.
How do I verify what I install?
The pharos CLI verifies every package against a SHA-512 integrity hash at install time. That applies to this category like every other.