- Shodan @w0h1v/shodanMCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.174 GitHub stars.
- Agent Security Scanner @sinewaveai/agent-security-scanner-mcpSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.123 GitHub stars.
- Dvalincode @arthurpanhku/dvalincodeDeterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.120 GitHub stars.
- GitHits @githits/githitsSearch public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.115 GitHub stars.
- Dependency Management @sonatype/dependency-management-mcp-serverSonatype component intelligence: versions, security analysis, and Trust Score recommendations6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.74 GitHub stars.
- ZettelForge @rolandpg/zettelforgeAgentic memory for cyber threat intelligence. STIX graphs, actor aliasing, offline RAG, Sigma/YARA.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.65 GitHub stars.
- Snyk MCP @snyk/mcpEasily find and fix security issues in your applications leveraging Snyk platform capabilities.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.55 GitHub stars.
- Cork MCP @servosity/cork-mcpEvery Cork API operation, plus cross-client risk attribution and exploitability-first vuln triage.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.47 GitHub stars.
- CodeInspectus @synvoya/codeinspectusLocal-first MCP security scanner and CLI for AI-generated applications.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.47 GitHub stars.
- Mythos Agent @mythos-agent/mythos-agentOpen-source AI security agent: SAST, DAST, and policy-as-code over MCP.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.44 GitHub stars.
- Containerization Assist @azure/containerization-assistTypeScript MCP server for AI-powered containerization workflows with Docker and Kubernetes support5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.43 GitHub stars.
- Maven Tools @arvindand/maven-tools-mcpJVM dependency intelligence for AI assistants via Maven Central3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.33 GitHub stars.
- ContrastAPI @contrastcyber/api55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.33 GitHub stars.
- agent-bom @msaad00/agent-bomSecurity scanner and graph for agentic infrastructure — agents, MCP, runtime, and blast radius.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.31 GitHub stars.
- AynOps @aynops/aynopsAynOps is a reconnaissance focused MCP Server which gives reconnaissance capabilities to AI Clients18% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.27 GitHub stars.
- Grasp — Code Architecture & Dependency Analysis @ashfordeou/graspCodebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.26 GitHub stars.
- Red Hat Lightspeed MCP @redhatinsights/insights-mcpModel Context Protocol server for Red Hat Lightspeed - advisor, image builder, inventory, and more4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.25 GitHub stars.
- ToolTrust Scanner @agentsafe-ai/tooltrust-scannerScans MCP servers for prompt injection, data exfiltration, and privilege escalation.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.19 GitHub stars.
- NPM Sentinel @nekzus/npm-sentinel-mcpAdvanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.18 GitHub stars.
- NPM Sentinel @smithery/nekzus-npm-sentinel-mcpProvide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.18 GitHub stars.
- Hound @tiluckdave/houndThe dependency bloodhound for AI coding agents. Zero API keys, zero config.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
Vulnerability management MCP servers
A server here known vulnerabilities (CVEs), security advisories or vulnerable dependencies.
Not here: general code review and uptime monitoring.
185 remote220 localTagged by Odel's AI, which can make mistakes
Most popular in Vulnerability management
By GitHub stars, at most two per publisher- Number 1: SafeDep Vet MCP@safedep/vet-mcpProtect your AI agents and IDEs from malicious open-source packages.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1,110 GitHub stars.
- Number 2: Skylos@duriantaco/skylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.846 GitHub stars.
- Number 3: SSH Manager@bvisible/mcp-ssh-managerSSH server management for agents, with per-server read-only and allowlist security modes5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.502 GitHub stars.
