#cybersecurity

An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers. What it checks: - HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy - HTTPS enforcement and redirect chain depth - Presence of security.txt, robots.txt, sitemap.xml Payment model: - 0.05 USDC per scan, paid automatically on Base via the x402 protocol - No API key, no account, no subscription required - The agent's wallet pays directly — fully autonomous Tools provided: - scan_security_headers(url): Live scan (costs 0.05 USDC) - demo_security_snapshot(): Free pre-baked example

A Python MCP Server that connects Large Language Models natively to a comprehensive suite of offensive security tools.

Live threat intelligence for Claude — check IPs, CVEs, KEV predictions, malware hashes, and pre-attack staging detection. Free, no API key required. Data updates every 15 minutes.

eip-mcp connects AI assistants to the Exploit Intelligence Platform via the Model Context Protocol. 17 tools to search vulnerabilities, analyze exploits, audit tech stacks, and generate pentest findings — with real-time data from NVD, CISA KEV, VulnCheck KEV, InTheWild.io, ENISA EUVD, EPSS, ransomware attribution, ExploitDB, Metasploit, GitHub, and more.

DMARC MCP Server is a Model Context Protocol server that exposes DNS and email authentication data as structured, read only tools for developers and AI agents. It enables direct inspection and validation of DMARC, SPF, and DKIM records, including RFC compliant SPF analysis, lookup limit checks, and configuration diagnostics. The server integrates with MCP compatible tools like Cursor, VS Code, and Claude Code, making email authentication part of modern development and automation workflows.

NetForensicMCP V2.1 is a Model Context Protocol (MCP) server designed to empower Large Language Models (LLMs) with advanced offline network traffic analysis and threat intelligence capabilities. Built on top of Wireshark's tshark, NetForensicMCP provides comprehensive PCAP analysis tools for cybersecurity professionals, threat hunters, and network forensics investigators.

NetForensicMCP V2.1 is a Model Context Protocol (MCP) server designed to empower Large Language Models (LLMs) with advanced offline network traffic analysis and threat intelligence capabilities. Built on top of Wireshark's tshark, NetForensicMCP provides comprehensive PCAP analysis tools for cybersecurity professionals, threat hunters, and network forensics investigators.

Connect real-time cybersecurity threat intelligence to your AI workflows through standardized tools and resources. Access comprehensive IOCs, CVEs, TTPs, and threat actor data from FalconFeeds.io with seamless integration across Claude Desktop, VS Code, and other MCP-enabled applications.

Kaspersky OpenTIP Model Context Protocol Server This server gives access to Kaspersky OpenTIP API to agentic applications.

Kaspersky OpenTIP Model Context Protocol Server This server gives access to Kaspersky OpenTIP API to agentic applications.

Scan and analyze potentially malicious URLs using the urlDNA

Zerotrusted Ai Privacy Agent

Detects PII entities in the given prompt.

A reference implementation of the SchemaPin protocol for cryptographically signing and verifying AI agent tool schemas to prevent supply-chain attacks.

MCP server for CIRCL CVE Search API with intelligent risk assessment and comprehensive vulnerability analysis.

A PII detection Agent which helps you detect PII entities in a given prompt.

A comprehensive Model Context Protocol (MCP) server for web security reconnaissance and analysis.

Node.js MCP server for UpGuard CyberRisk API integration. Provides comprehensive cybersecurity risk assessment tools with stateless HTTP transport, caching, and resilience patterns.

MCP Server for Panther

All-in-one offensive security toolbox with AI agent and MCP architecture. Integrates tools like Nmap, Metasploit, FFUF, SQLMap. Enables pentesting, bug bounty hunting, threat hunting, and reporting. RAG-based responses with local knowledge base support.

A PII detection Agent which helps you detect PII entities in a given prompt.

A Model Context Protocol (MCP) tool for retrieving and analyzing Windows event logs (e.g. Sysmon). WinLog-mcp provides programmatic access to ingest and query Windows event logs, making it ideal for security monitoring, incident response, and log analysis automation.

MCP Client which serves as bridge between mcp servers and local LLMs running on Ollama, Created for MCP Servers Developed by Me, However other MCP Servers may run as well

This is curated list of Security tools' MCP server

A Model Context Protocol (MCP) server for scanning IP addresses for vulnerabilities. This server provides tools to perform security scanning on individual IPs or multiple IPs at once.

The NOVA MCP Security Gateway is a prompt-validation service that runs first in your Model Context Protocol (MCP) chain. It loads Nova rules (in .nov format), checks each incoming prompt against these rules, and blocks any that match high-severity security or jailbreak patterns.

VIBE CODING 😈 lol

NOT for educational purposes: An MCP server for professional penetration testers including nmap, go/dirbuster, nikto, JtR, wordlist building, and more.

Fast MCP integration for NetworksDB API - Query IP addresses, organizations, ASNs, and DNS records using natural language through Model Context Protocol

NOT for educational purposes: An MCP server for professional penetration testers including nmap, go/dirbuster, nikto, JtR, wordlist building, and more.

This repository demonstrates a variety of **MCP Poisoning Attacks** affecting real-world AI agent workflows.

CyberMCP is a Model Context Protocol (MCP) server designed for testing backend APIs for security vulnerabilities. It provides a set of specialized tools and resources that can be used by LLMs to identify common security issues in APIs.

一款帮助云租户发现和测试云上风险、增强云上防护能力的综合性开源工具

Secure Messages Control Plane (MCP) Server - A robust platform for managing communication between AI agents

A Model Context Protocol server that provides network asset information based on query conditions. This server allows LLMs to obtain network asset information and supports querying network asset information by zoomeye dork etc.

MCP Server for mallory.ai intelligence

Model Context Protocol Server For Cyber Security