MCP Server Directory

Security MCP Servers

Security servers cover the defensive tooling: secret managers, vulnerability databases, dependency scanners, and access log auditors. Agents use them to check a dependency before installing it, rotate a credential without it landing in a chat log, or sweep an access history for anomalies.

Vet these servers the way you would vet any security tool. Prefer open repositories you can read, pinned versions, and least privilege credentials. The integrity hash on every Pharos install helps here too.

The live list did not load just now. The full category is still available in search.

Browse Security servers in search

Questions about Security servers

Is it safe to give an agent access to secrets?

It can be, with the right server. Look for ones that pass values to tools without printing them, and scope credentials to what the agent actually needs.

Can these servers scan my dependencies?

Several wrap vulnerability databases and advisory feeds. Pair one with a Developer Tools server for a full check before installing anything new.

How do I verify what I install?

The pharos CLI verifies every package against a SHA-512 integrity hash at install time. That applies to this category like every other.