A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.

🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️

No description yet.

The memory + security kernel for AI agents. Strata: a signed append-only log, receipts on every write, exact-handle recall, memory agents can't rewrite. Operator Lite: a GuardFall-proof gate on 16 hosts.

Security infrastructure your AI can't be — deterministic, current past your model's training cutoff, whole-repo-aware, author-independent. Security MCP for vibe coding. 530 rules, 39 tools, CLI + doctor. Prompt-level shift-left security (secure_prompt — e

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

Audit AI applications and agents for security risks before commit, PR, merge, or deployment. Deterministic findings with coverage and evidence receipts.

Official SonarQube MCP Server for code quality and security in AI agents

lunar.dev: Agent native MCP Gateway for governance and security

A security scanner for your LLM agentic workflows

A plugin-based gateway that orchestrates other MCPs and allows developers to build upon it enterprise-grade agents.

This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable, and secure AI workflows from session setup to service orchestration.

Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.

MCP Server for GitHub repository health monitoring

All-in-One malware analysis tool.

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

MCP server for JADX-AI Plugin

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.

MCP configuration to connect AI agent to a Linux machine.

MCP server that connects AI assistants to HackerOne for bug bounty hunting

Ephemeral data sandbox for AI workflows with guardrails and security

Wassette: A security-oriented runtime that runs WebAssembly Components via MCP