Security & Auth MCP Servers

app.thoughtspot/mcp-server

MCP Server for ThoughtSpot - provides OAuth authentication and tools for querying data

ai.smithery/Nekzus-npm-sentinel-mcp

Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…

ai.aliengiraffe/spotdb

Ephemeral data sandbox for AI workflows with guardrails and security

ai.smithery/Hint-Services-obsidian-github-mcp

Connect AI assistants to your GitHub-hosted Obsidian vault to seamlessly access, search, and analy…

FedRAMP 20x Requirements

An MCP server that provides access to FedRAMP 20x security requirements and controls.

Arcjet

An MCP server for Arcjet - the runtime security platform that ships with your AI code.

io.github.mlawsonking/code-guard-mcp

Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.

io.github.wellknownmcp/cortex-gateway

Self-hosted federated MCP gateway: one OAuth 2.1 MCP server in front of N apps, user-level scopes.

io.github.rikocr8orh8/regulatory-signals

Audit GitHub repos for security, compliance, and EU AI Act exposure from Claude or Cursor.

GitHub PR Review Context

AI code review grounded in your repo history. Supports Test Gen and Security Audits.

io.github.fpetitit/mcpcheckup

Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.

io.github.mdfifty50-boop/agent-security

Security scanning and threat detection for AI agents

uored

Bored MCP — wraps Bored API (free, no auth)

io.github.davidmosiah/delx-agent-utilities

Stateless URL, DNS, x402, JWT, encoding, and parsing tools for AI agents.

io.github.andrewszk/clawvault-mcp-server

AI agent payment security - spending limits, whitelists, and human approval.

wikiviews

Wikiviews MCP — wraps the Wikimedia Pageviews API (free, no auth)

Devto

DEV.to MCP — wraps the DEV Community API (free, no auth for public reads)

Global Talent AI — UK Global Talent Visa studio

UK Global Talent Visa handbook, endorser criteria, cost calculator, draft scoring. Free, no auth.

Bright Security

AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

Trestle

Detects leaked secrets (API keys, tokens, private keys) in source code.

io.github.Cipher208/ariel-memory

Two-layer memory MCP server for AI agents with 37 tools, RAG, graphs, wiki, auth

com.blackveilsecurity/dns

DNS and email security scanner with 78 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

Jwt

JWT decoder MCP.

io.github.visus-mcp/visus-mcp

Security-first web access. Sanitizes pages, blocks injection, redacts PII. Now with PDF/JSON/SVG.

Agent Security Lens (AgentSecurityLens)

Safe-install and trust-check MCP for agents before installing MCPs, Skills or tools.

io.github.Gorgon-Cyber/gorgon-scout

Run AI-driven web-app and API security scans (DAST) from Claude or any MCP agent. Windows.

Animam Agent Platform

Configure & analyze AI chatbots: personas, corpus, tools, digests, multi-bot. OAuth 2.1.

io.github.XogZ3/botoi-mcp

49 developer tools via MCP: DNS, WHOIS, IP lookup, JWT, hashing, QR, and more.

Outlook SNDS

Outlook.com SNDS IP Data and IP Status reports via the OAuth-secured REST API.

io.github.kota1026/smartguard-mcp

SmartGuard MCP Server - AI-powered smart contract security audit tools for Claude Code, Cursor,...

TikTok Agent Publisher

Local-first TikTok Content Posting API for AI agents: OAuth checks, dry-run and live uploads.

AgniGateway Marketplace

AI marketplace — flights, tours, activities, transport & more via MCP. No auth required.

io.github.loaditoutadmin/loaditout

Search and install 20,000+ security-graded MCP servers and agent skills.

Ybe Check

Ybe Check – security and compliance orchestrator for AI-generated repositories.

io.github.getaegis/aegis

Credential isolation for AI agents. Inject secrets at the network boundary.

OpenResearch MCP

Zero-auth research MCP: web, academic, finance, news, weather, macro, social, SEC. No keys.

Bis

BIS MCP — Bank for International Settlements statistics (no auth)

art

Art MCP — Metropolitan Museum of Art Collection API (free, no auth)

MCP adapter for Agent_Sudo: authorization, delegation, provenance, and audit for AI agents.

io.github.infoinlet-marketplace/mcp-codeaudit

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

Remote MCP for 1,500+ APIs. Vault-managed credentials; OAuth or API key. Search, load, and execute.

Kalshi

Kalshi MCP — US-regulated prediction-market data (no auth on public reads).

Search commercial real estate listings. Reads need no token; authoring is self-serve OAuth (DCR).

Connect AI agents to Filepad workspaces through OAuth MCP.

io.github.theYahia/roistat-mcp

MCP server for Roistat API — marketing analytics, visits tracking. API key auth.

Mimecast

MCP server for Mimecast email security: message queue, held messages, domains, and threats.

spacenews

Spacenews MCP — wraps the Spaceflight News API v4 (free, no auth)

io.github.dingdawg/dingdawg-code-review

AI code review — security, quality, performance. Learns your patterns. Receipted.

Zendesk

Zendesk MCP Pack — tickets, users, organizations via OAuth.

Yault AESP

Crypto payments for the agent economy — policy-gated vault operations under human control

Draft cited RFP and security questionnaire answers from your knowledge base, with human review

Rxnorm

RxNorm MCP — wraps the NLM RxNav REST API (free, no auth)

Live US drug acquisition costs (CMS NADAC) for AI assistants. Free, no auth, weekly data.

io.github.irrenwill/secret-safe-env

Write secrets into .env without the agent ever seeing the value - Windows masked dialog (繁中 UI)

io.github.MCPShield-Dev/mcpshield

Security scanner for MCP servers - detects tool poisoning and injection

Ansvar: EU Compliance & Legal Intelligence

Cited EU & global law, regulations & security frameworks via Ansvar Gateway. OAuth, free + paid.

io.github.kota1026/vaultguard-mcp

VaultGuard MCP Server - Yearn V3 / DeFi vault security and analysis tools for AI coding agents....

io.github.joepangallo/web-recon-agent

Owned-target web security assessment MCP server for authenticated, high-friction apps.

io.github.ai-supply-store/ai-supply

Search, install, publish & review security-scanned AI capabilities from ai-supply.store.

Exact hashing, base64/hex/URL encoding, JWT decoding and UUIDs for AI agents. No auth required.

io.github.shaqmughal/seekstone

Filesystem-direct Obsidian MCP server — search and edit your vault with low context-tax.

MCP security proxy - detects and blocks 40+ MCP attack classes. Zero config.

AI-generated customer success reports for Velaris platform users. Authenticates via OAuth.

Crypto compliance MCP: stablecoin-freeze, token security, wallet screening, KYT & oracle verdicts.

GitHub

GitHub via MCP: search, repos, issues, PRs, files, notifications. OAuth device flow or token.

Ansvar: EU Regulations

EU regulations (GDPR, DORA, NIS2, AI Act, etc.) via Ansvar Gateway. Cited, OAuth + paid.

io.github.bch1212/agentvault

Credential vault for AI agents — Fernet-encrypted keys, per-agent budgets, audit logs.

MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.

Checksum validation for AI agents: IBAN, ISBN, EAN/GTIN, UUID, ULID. Deterministic, no auth.

com.craftedtrust/mcp-shield

Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.

MCP Modal Server

MCP server for managing Modal apps, containers, volumes, and secrets.

StablecoinX

Drive a StablecoinX business account — auth, API keys, sessions, paymaster, and webhooks.

NeuroDock (hosted)

Hosted NeuroDock — stateless communication and planning tools over OAuth-secured Streamable HTTP.

io.github.bolyra/sdk

TypeScript SDK for mutual ZKP authentication between humans and AI agents.

io.gildara/mcp-server

Operating contracts for AI agents. Structured instructions compiled into system prompts.

io.github.fentz26/envcp

Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.

io.github.magpiecapital/magpie-mcp

Agent-native lending on Solana via x402: borrow against tokens, arm in-vault TP/SL, repay.

Conta Azul MCP

Conta Azul ERP MCP — sales, customers, finance and NF-e via OAuth 2.0. Read + write, 35 tools.

io.github.mcp-protocol/node-runtime

This package is intended for demonstration only. Maintained by JFrog Security.

com.mcparmory/outline

Create, manage, and organize team documents, collections, and share permissions

io.github.Ansvar-Systems/ot-security-mcp

OT security standards: IEC 62443, NIST 800-82/53, MITRE ATT&CK for ICS

Coingecko

CoinGecko MCP — wraps CoinGecko free API (no auth required)

Abnormal Security MCP

Abnormal Security email threats, cases, and reporting in your terminal and your AI agents.

Court Listener

CourtListener MCP — Free Law Project's CourtListener API (free, no auth required for basic access)

Scan an MCP server for EU AI Act Art. 50, tool quality, OAuth hygiene & security before shipping.

Free B2B data enrichment: company lookup, email validation, email patterns, domain info. Zero auth.

io.github.burademirung/protectwith-kb

AI-security knowledge as MCP: standards-mapped tools (OWASP, NIST, MITRE) for AI agents.

io.github.kira-autonoma/devtools

23 developer utilities — base64, JWT, UUID, hash, QR, regex, timestamps. No API keys.

Open Corporates

OpenCorporates MCP — Global company registry data (free, no auth, rate limited)

Healthdata

HealthData.gov MCP — wraps HealthData.gov CKAN API (free, no auth)

io.github.mikerawsonnz/authenticated-mcp-agent

JWT-gated LLM gateway: authenticate (bcrypt/JWT), then run a LangChain-on-Vertex Gemini completion.

SSL Checker API

SSL certificate check — validity, expiry, issuer, chain, grade. x402 micropayment.

dotrepo

Trust-aware repository facts for agents: build, test, docs, license, and security, no scraping.

Security Feeds

Security Feeds MCP.

Linear

Linear MCP — wraps the Linear GraphQL API (OAuth)

io.github.chirag127/secenv-mcp

Centralized secrets manager MCP server. Generate .env files, rotate keys, sync to GitHub Actions.

io.github.ofershap/dns

MCP server for DNS lookups, reverse DNS, WHOIS, and domain checks — zero auth, zero config

Stablecoin Yield Index (SYX) and live USDC vault APYs across Ethereum, Base, Arbitrum.

io.github.onelogin/onelogin-mcp

MCP server for OneLogin API - manage users, apps, roles, and authentication

Rick And Morty

Rick and Morty MCP — wraps the Rick and Morty API (free, no auth)

1,451 security controls across 261 frameworks with bidirectional mapping

io.github.rog0x/dep

License check, outdated deps, security for AI agents

GRTwo Docs

Publish and share Markdown/HTML docs from AI assistants. Requires grtwo.app Pro. OAuth or API key.

CyberLens

Security scanning for websites, public repositories, and Open CLAW skills.

MCP Gateway Scan

Read-only MCP/agent-gateway readiness scanner — scores a repo across 7 security dimensions.

Auth, email, journeys, surveys, webhooks, and analytics for SaaS in one project, one API key.

org.wegtultrarich/mcp

A free, no-auth, computation-only MCP server that makes billionaire/trillionaire wealth tangible.

io.github.dulzuradev/liveauth-mcp

MCP server for LiveAuth: PoW + Lightning auth, L402 bundles, and paid MCP tool receipts.

io.github.CSOAI-ORG/jwt-ai-mcp

jwt-ai-mcp MCP server by MEOK AI Labs

io.github.onetrueclaude-creator/vault-health-mcp

Obsidian vault structural health: broken links, orphans, missing frontmatter, safe auto-repair.

Verified deals, store policies & a trust score for thousands of online retailers. No auth.

Sentrik

Governance runtime for AI-generated code. Enforce compliance and security standards.

MCP Marketplace

Search and install 4,000+ security-scanned MCP servers from inside any MCP-aware AI client.

io.github.titus-civic/mcp-gateway

Identity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.

io.github.zayansalman/gmail-attachments-mcp

Minimal MCP server for downloading Gmail attachments to disk. Read-only OAuth by default.

io.github.100xPercent/pop-pay

Runtime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.

Free, no-auth AI industry briefings and a US/UK/EU AI regulation tracker for agents.

Ansvar: Threat Intelligence

CVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway. Cited, OAuth + paid.

Black Duck Security Scanner

AI-powered security scanning using Black Duck Signal for vulnerability detection.

MCP Shield

Security scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.

io.github.sapiom/mcp

Sapiom MCP server — authentication, verification, and API tools

Control your Tesla from your AI assistant - climate, charging, access, and security.

Fbi Artcrimes

FBI Art Crimes MCP — FBI National Stolen Art File (free, no auth).

MCP Safety Warden

MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

Agent Personas for Claude. 16 tools, 13 personas, 3 workflows. OAuth 2.1. Free.

Hive Vault

A2A ZK wallet recovery — guardian swarm, no seed phrase, HiveLaw enforcement

OmegaAI

Query, browse, and automate OmegaAI workspaces from any MCP client. Streamable HTTP with OAuth 2.0.

io.github.hezeclark/devkits

12 local developer tools: JSON, Base64, JWT, regex, hash, UUID, Markdown, diff, cron.

io.github.oscal-compass/compliance-trestle-mcp

An MCP server that provides tools to author OSCAL security compliance documentation

xhost

Agent-first hosting: create apps, commit code, deploy, get HTTPS URLs. OAuth sign-in, no tokens.

io.github.FinishKit/mcp

FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality

uooks

Books MCP — wraps Open Library API (free, no auth)

io.github.leakferrethq/leakferret

Context-aware secret scanner: lets an AI agent scan, verify, and rewrite secrets before committing.

io.github.mikerawsonnz/auth-token-service

Hash passwords with bcrypt and issue/verify JWT session tokens over A2A + MCP.

Cataas

CATAAS MCP — Cat as a Service (free, no auth)

Veragent

Check the trust/security score of MCP servers, agents, skills & CLIs before you install them.

io.github.mdfifty50-boop/secure-vault

Encrypted secrets and credential management for agents

GribStream MCP

Hosted weather data MCP for discovery, validation, and OAuth-protected GribStream queries.

io.github.kota1026/quantumguard-mcp

Post-quantum cryptography security scanner. Detect ECDSA/RSA vulnerabilities, NIST compliance.

Openbeautyfacts

Open Beauty Facts MCP — Open Beauty Facts API (free, no auth, keyless).

onthisday

On This Day MCP — wraps byabbe.se/on-this-day (free, no auth)

Reddit (RSS)

Read Reddit via public RSS feeds: browse subreddits, posts, comments, and search. No auth.

Pypi

PyPI MCP — wraps the Python Package Index (PyPI) JSON API (free, no auth).

Rubygems

RubyGems MCP — wraps the RubyGems.org public API (free, no auth)

exchange

Exchange MCP — wraps the Frankfurter currency exchange API (free, no auth)

mneme

Vault-native, accountable memory for Claude Code and MCP clients. Markdown is ground truth.

AI Scanner

Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.

swapi

SWAPI MCP — wraps the Star Wars API (swapi.dev, free, no auth)

io.github.rudraneel93/mcp-guardian

Security, cost, and health governance proxy for MCP infrastructure

io.github.kaael1/mcp-power-automate

Local MCP for Power Automate with browser-backed auth, target locking, review diff, and rollback.

This is just a test publish, delete me

Hosted MCP server with managed OAuth for 15+ toolkits: Google Workspace, Fitbit, Oura, Kalshi, etc.

MCP Server for OSCAL

AI agent tools for Open Security Controls Assessment Language (OSCAL)

io.github.Anioko/archiet-xray

Deterministic repo architecture maps: auth coverage, blast radius, readiness score, diagrams

qrcode

QR Code MCP — wraps api.qrserver.com (free, no auth)

N-able N-central MCP

N-central REST API with an offline org-tree mirror, cross-tenant search, and a JWT-expiry guardian.

Sbir

SBIR MCP — wraps the SBIR.gov public API (free, no auth)

Security Scanner Ai automation via MCP. Includes scan dependencies, check headers, scan secrets. By

Tripwire

Security gateway for MCP agents: blocks prompt-injection-driven tool calls before they execute.

Ansvar: Dutch Law

Dutch law via Ansvar Gateway. Cited, OAuth + paid tier.

Bawbel Scanner

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

io.github.butterbase-ai/mcp

Butterbase MCP server — manage your backend: schemas, auth, functions, storage, RAG, deploys.

services.gera/mcp-gera-skills

Search, inspect and recommend AI skill packs from the GeraSkills marketplace. Offline, no auth.

io.github.theYahia/amocrm-mcp

MCP server for amoCRM API — leads, contacts, pipelines. Auth: Bearer token.

io.github.Thezenmonster/agentscore

MCP security trust layer: scan packages, inspect repos, check exposure, monitor changes.

Recruiter-scoped search across Latin America's largest tech talent pool. OAuth-authenticated.

io.github.awkoy/notion-mcp-server

Token-auth Notion MCP: pages, databases, blocks, comments, files. Runs headless in CI and agents.

Search Japan's M&A marketplace MANDA - public business-for-sale listings (read-only, no auth)

AgentAegis

Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

Reddit MCP by UnClick

Read public Reddit without OAuth; post, comment, vote, and subscribe with OAuth. By UnClick.

DNS MCP Server

Real-time DNS security analysis — DNSSEC, email auth, and RDAP. Built for SOC investigations.

Akshay Shetty's engineering portfolio and resume, queryable by AI. OAuth-secured.

flights

Flights MCP — wraps OpenSky Network API (free, no auth required)

LaunchTrust

Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

jikan

Jikan MCP — wraps the Jikan v4 API (anime/manga data, free, no auth)

Sports

Sports MCP — wraps TheSportsDB API (free tier, test key 3, no auth required)

Live prediction-market odds plus World Cup 2026 briefs and matchday cards. Free, no auth.

Connect Exact Online accounting to Claude, ChatGPT and Copilot. 75 tools, OAuth 2.1, EU-hosted.

prodlint

Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.

io.github.codespar/mcp-niubiz

MCP server for Niubiz — Peru card acquirer: security token, session, authorize, reverse

io.github.stonematt/mcp-obsidian-cli

Save chat notes from Claude Desktop to your vault — MCP on Obsidian CLI. Keep what matters.

Createya — AI Image & Video Generation

100+ AI models: FLUX, Sora, Veo, Kling, Runway, Suno. OAuth or Bearer. No VPN. RU billing.

Apex by LeadShark — discovery

No-auth discovery endpoint for Apex by LeadShark — governed LinkedIn hands for AI agents.

Ansvar: US Law

US federal + state law via Ansvar Gateway. Cited, OAuth + paid tier. Free npm: us-law-mcp.

dictionary

Dictionary MCP — wraps Free Dictionary API (free, no auth)

tle

TLE MCP — satellite tracking via Two-Line Element sets (tle.ivanstanojevic.me, free, no auth)

Keycloak Admin

Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events.

VMware NSX Security

VMware NSX security: DFW policies, security groups, tags, Traceflow, IDPS — 21 MCP tools.

io.github.beautyfree/app-store-connect

App Store Connect API as MCP: apps, TestFlight, subscriptions, localizations, reports. JWT auth.

io.github.Goingparabolic/painprep-mcp-server

Interventional pain medicine MCP: Medicare checklists, CPT/ICD-10, ASRA, prior-auth & appeals

marine

Marine MCP — wraps marine-api.open-meteo.com (free, no auth)

Overdrive Intel

AI coding ecosystem intelligence — breaking changes, tools, security alerts from 900+ sources

Official German land values (Bodenrichtwerte) for any German address — OAuth-secured MCP server.

Query your trades, stats, and journal in EdgeLock and log new entries by chat. OAuth; free account.

disease

Disease MCP — wraps disease.sh API (COVID-19 statistics, no auth required)

io.github.beneb89/changegamer

Agent-first resource directory for AI agents: protocols, security, RAG, memory, evals, and more.

Pubmed

PubMed MCP — wraps the NCBI E-utilities API (biomedical literature, free, no auth)

JWT Decoder API

Decode JWT tokens — inspect header, payload, claims, expiry. x402 micropayment.

net.programmes/developer-tools

65+ free in-browser developer tools (JSON, Base64, JWT, hash, regex…) callable over MCP.

superhero

Superhero MCP — wraps akabab.github.io/superhero-api (free, no auth)