10 MCP servers for security
Security MCP servers equip your AI with tools for vulnerability scanning, threat intelligence, secrets management, and security auditing. These servers bring the power of security tools like Semgrep, Snyk, and Shodan directly into your AI workflow, making security analysis accessible through natural language.
The servers span several security disciplines: static analysis with Semgrep for finding code vulnerabilities, dependency scanning with Snyk for known CVEs, network reconnaissance with Shodan for discovering exposed services, and malware analysis with VirusTotal. For secrets management, the HashiCorp Vault server provides secure access to credentials and encryption keys.
Security servers are particularly valuable for shift-left security practices. Ask your AI to scan a codebase for vulnerabilities before a release, check if a domain has been typosquatted, look up CVEs affecting your dependencies, or verify that a suspicious file is safe. Integrating these tools into your AI workflow means security checks happen as part of your natural development process, not as an afterthought.
by Semgrep
Static analysis security scanning with Semgrep. Find vulnerabilities, enforce code patterns, and audit codebases.
npx -y semgrep-mcpby BurtTheCoder
Search Shodan for internet-connected devices and services. Scan IPs, discover open ports, and assess network exposure.
npx -y mcp-shodanby BurtTheCoder
Scan files, URLs, and domains with VirusTotal. Check for malware, analyze threat intelligence, and verify file safety.
npx -y mcp-virustotalby nicepkg
Scan dependencies for vulnerabilities with Snyk. Check for known CVEs, license issues, and security risks.
npx -y snyk-mcp-serverby BurtTheCoder
OSINT username search across 500+ websites with Maigret. Find social media profiles and digital footprints from a username.
npx -y mcp-maigretby nicepkg
Access HashiCorp Vault secrets. Read, write, and manage secrets, encryption keys, and dynamic credentials.
npx -y hashicorp-vault-mcpby StacklokLabs
Query the OSV vulnerability database. Look up CVEs, check package vulnerabilities, and assess security risks across ecosystems.
npx -y osv-mcpby BurtTheCoder
Detect domain squatting and phishing with dnstwist. Find typosquatting domains, homoglyph attacks, and lookalike URLs.
npx -y mcp-dnstwistby dkvdm
Secure credential retrieval from 1Password for AI agents. Access secrets, passwords, and API keys stored in your 1Password vaults without exposing them in plaintext.
npx -y @dkvdm/onepassword-mcp-serverby Gaffx
Memory forensics analysis powered by Volatility 3.x. Run plugins like pslist and netscan through AI assistants to investigate memory dumps without manual CLI work.
npx -y @gaffx/volatility-mcp