Security & Testing MCP Servers

MCP servers for security scanning, vulnerability testing, secrets management and QA automation. Each entry is scanned with the deterministic Capability-Flow Trust Model — grades are computed, never self-reported.

Guard npm
A
@aiclude/mcp-guard

MCP runtime security proxy — intercepts and enforces security policies on MCP tool calls

Security & Testing Score 93/100 1 finding 77/wk Cap. High
Guardrails npm
A
guardrails-mcp-server

AI Agent Guardrails MCP Server - Security layer for Claude Code and AI agents

Security & Testing Score 93/100 2 findings 76/wk Cap. High
Pictify npm
A
@pictify/mcp-server

MCP server for Pictify - Generate images, GIFs, and PDFs with AI agents

Security & Testing Score 93/100 1 finding 76/wk Cap. High
E2e Runner npm
A
@matware/e2e-runner

E2E test runner using Chrome Pool (browserless/chrome) with parallel execution

Security & Testing Score 93/100 9 findings 75/wk Cap. High
Iphone npm
A
@blitzdev/iphone-mcp

MCP server for controlling iOS simulators and physical iPhones

Security & Testing Score 93/100 8 findings 75/wk Cap. High
Gremlin npm
A
@gremlin/mcp-server

Gremlin MCP Server

Security & Testing Score 93/100 1 finding 70/wk Cap. High
Tactual npm
A
tactual

Screen-reader navigation cost analyzer. Measures how hard it is for AT users to discover, reach, and operate web content.

Security & Testing Score 93/100 1 finding 67/wk Cap. High
Apimesh npm
A
@mbeato/apimesh-mcp-server

MCP server for APIMesh — 76 x402-payable tools for AI agents (74 APIs + wallet usage + spend caps). Covers web vitals, security headers, SEO audits, email security and verification, tech-stack detection, brand assets, redirect chains, indexability, brand

Security & Testing Score 93/100 1 finding 66/wk Cap. High
Attestd npm
A
@attestd/mcp

MCP server exposing Attestd CVE and supply-chain checks for Claude Code and other MCP clients

Security & Testing Score 93/100 1 finding 64/wk Cap. High
Switchboard Mcp Cli npm
A
@switchboard-mcp/cli

One firewall and password manager for all your AI coding agents' MCP servers and secrets.

Security & Testing Score 93/100 2 findings 60/wk Cap. High
Cleaner Code npm
A
cleaner-code

Scans AI-generated code for invisible Unicode, Trojan Source, and supply-chain threats.

Security & Testing Score 93/100 6 findings 59/wk Cap. High
Shieldly npm
A
@shieldly/mcp

AI-Powered Security Analysis for AWS — official MCP server

Security & Testing Score 93/100 1 finding 52/wk Cap. High
Arcwall npm
A
@arcwall/mcp-server

Arcwall Security MCP server for Claude Code, Cursor, Windsurf and any MCP-compatible AI coding tool

Security & Testing Score 93/100 1 finding 50/wk Cap. High
Mockserver Mcp Charles npm
A
mockserver-mcp-charles

MCP Mock Server for React Native with Charles proxy support

Security & Testing Score 93/100 1 finding 47/wk Cap. High
Patchwarden npm
A
patchwarden

Secure local MCP bridge for ChatGPT and local agents, with workspace-scoped task loops, safe summaries, audits, and Direct editing.

Security & Testing Score 93/100 15 findings 45/wk Cap. High
Driftdetect npm
A
driftdetect-mcp

MCP server that gives AI agents (Claude, Cursor, Copilot) deep understanding of your codebase patterns, conventions, and architecture. Query patterns, security boundaries, call graphs in real-time.

Security & Testing Score 93/100 1 finding 44/wk Cap. High
Osv Scanner npm
A
osv-scanner-mcp

MCP server that wraps Google's OSV-Scanner to scan Java projects for known vulnerabilities

Security & Testing Score 93/100 1 finding 43/wk Cap. High
Weixin Devtools npm
A
weixin-devtools-mcp

WeChat Mini Program automation MCP server with intelligent connection, page interaction, assertion validation and network monitoring

Security & Testing Score 93/100 1 finding 43/wk Cap. High
Ios Sim npm
A
ios-sim-mcp

MCP server that drives the iOS Simulator via semantic accessibility-tree snapshots with stable refs. Includes an injectable dylib for in-process view introspection, HTTP capture, JavaScript eval, and byte-perfect text input. Chrome-DevTools-quality DX for

Security & Testing Score 93/100 11 findings 41/wk Cap. High
Remote With Okta npm
A
mcp-remote-with-okta

MCP remote server with Adobe IMS/Okta authentication wrapper

Security & Testing Score 93/100 3 findings 39/wk Cap. High
Defense npm
A
defense-mcp-server

Defense MCP Server — 31 defensive security tools with 250+ actions for system hardening, compliance, and threat detection on Linux

Security & Testing Score 93/100 7 findings 37/wk Cap. High
Security Agent npm
A
mcp-security-agent

An MCP-based security scanner and agentic AI for vulnerability detection

Security & Testing Score 93/100 1 finding 37/wk Cap. High
Chrome Enterprise Premium npm
A
@google/chrome-enterprise-premium-mcp

Chrome Enterprise Premium MCP server

Security & Testing Score 93/100 2 findings 36/wk Cap. High
Jrejaud Op npm
A
@jrejaud/op-mcp

Lightweight 1Password MCP server using op CLI. Zero idle CPU.

Security & Testing Score 93/100 1 finding 36/wk Cap. High