🔒 安全 AI 工具

scorecard-mcp is an example MCP server for querying OpenSSF Scorecard security practices.

The simplest AI-ready secrets manager. Local-first, single-binary CLI & Desktop app with MCP integration. Never expose secrets to AI agents.

Devici MCP Server for managing users, collections, and threat models via the Devici API.

针对OpenClaw平台的综合安全审计工具，扫描运行时、渠道、智能体等7大域，支持三级专业度，提供可视化安全仪表盘与本地化报告，只读无损运行。

Nikto MCP is a secure server for AI agents to perform web security scans using Nikto.

A POC MCP server for network forensics with 50+ analysis tools.

MCP-Server-Vuln-Analysis project analyzes vulnerabilities in MCP servers to enhance security.

A pentesting MCP Server with tools for network, web, and OSINT security.

MCP server to use the SSLMate Certificate Transparency Log Search

A Python interface for MITRE's CWE database for vulnerability research.

WinLog-mcp is a tool for retrieving and analyzing Windows event logs for security monitoring.

MCP Sanitizer is a security library for MCP servers, preventing various attacks.

TheHive official MCP server

Vectra AI MCP Server connects AI tools to enhance threat detection and response.

A secure SpamAssassin MCP server for email security analysis.

面向研发生安团队的AI审计助手支持代码审计渗透测试及云基设安全评估与合规治理落地

为AI Agent提供安全的第三方服务认证授权能力，支持OAuth委托、多租户隔离，让Agent合规操作外部工具无需暴露用户凭证

Risky Business AI MCP Server aids in cybersecurity vulnerability assessment and analysis.

通过AI识别资产、建模威胁、评分漏洞、映射NIST/SOC2合规要求，自动生成网络安全风险评估报告与应急响应方案。

MCP Outlier Scanner detects malicious tools in MCP servers using hybrid AI.

使用合成测试数据对AI Agent进行常见注入攻击检测，验证输入净化能力，无需访问本地文件，自包含运行安全自检。

MCP Server for managing Keycloak identity and access via REST API.

AI-powered security testing for Claude Desktop. MCP server integrating 6 essential pentesting tools (nmap, nikto, sqlmap, wpscan, dirb, searchsploit) in a secure Kali Linux Docker container. Perform ethical security assessments through natural conversation.

自动扫描代码隐私风险,生成DPIA合规文档,追踪数据主体权利请求,助力企业快速通过GDPR审查

Real-time semantic security for AI coding agents and MCP tools.

为OpenClaw技能提供故障安全的策略网关,在工具执行前拦截并检查,自动执行低风险操作,高风险操作需人工审批,危险操作直接阻止。

A Model Context Protocol (MCP) server designed as a honeypot to catch AI systems that automatically try to report users to law enforcement agencies.

An MCP server for searching and filtering data from Immunefi bug bounty programs.

Suricata_rule_generator_mcp generates optimized Suricata rules for various vulnerabilities.

Comprehensive API for managing vulnerabilities and assets in InsightVM.

MCPF provides a trust framework for AI agents using DIDs and VCs.

Grype mcp server simplifies vulnerability scanning for developers using Grype.

为AI生成的代码、脚本、内容提供执行前安全验证。通过策略引擎检测危险模式,防止恶意指令执行,保护系统安全。

HTB MCP Server provides AI access to HackTheBox functionalities with 12 tools.

Permit.io MCP server manages access requests using natural language.

Dradis-MCP is a FastMCP server for managing projects and vulnerabilities in Dradis Pro.

Minimal Safe Wallet Client with CLI and MCP Support

A VirusTotal MCP server for comprehensive security analysis and data fetching.

MCP server to perform a scan and produce an SBOM

An MCP server to check and revoke ERC-20 token allowances for enhanced security.

this is a mcp server for artemis sast tool

MCP Server for Sliver C2

Asgardeo MCP Server enables natural language management of Asgardeo or WSO2 Identity Server.

An MCP server for domain registration and SSL certificate monitoring.

This MCP provides developers with programmatic access to SSOJet's enterprise SSO capabilities, allowing applications to authenticate users and manage authorization through any supported identity provider without the complexity of building custom SSO integrations.

MCP tools for Windows Security

Nmap MCP Server exposes Nmap CLI features via FastMCP for efficient network scanning.

The MCP ZK Integrity Layer enables cryptographic proof of computational integrity and data authenticity using zero-knowledge protocols, ensuring trust without exposing sensitive information. It provides modular circuits (e.g., Poseidon, Keccak) for seamless integration into MCP workflows.

MCP server for assessing crawler compliance risks on webpages.

ShyHurricane is an MCP server aiding AI in offensive security testing with efficient tools.