Scan MCP Online API Star

Security & Testing MCP Servers

MCP servers for security scanning, vulnerability testing, secrets management and QA automation. Each entry is scanned with the deterministic Capability-Flow Trust Model — grades are computed, never self-reported.

Playwright Wizard Source verified npm
A
playwright-wizard-mcp

MCP server providing Playwright test generation wizard with intelligent prompts and best practices

Security & Testing Score 100/100 0 findings 51/wk Cap. Minimal
Touchstone Cv Source verified npm
A
@touchstone-cv/mcp

Local MCP server for Touchstone — record agent actions into a tamper-evident, externally-anchored log. Signs locally; your Ed25519 key never leaves your machine.

Security & Testing Score 100/100 0 findings 51/wk Cap. Minimal
Codecov Source verified npm
A
@egulatee/mcp-codecov

MCP server for querying Codecov coverage data with configurable URL support

Security & Testing Score 100/100 0 findings 46/wk Cap. Minimal
Ctftime Source verified npm
A
mcp-ctftime

Model Context Protocol (MCP) server wrapping the public CTFtime API - query CTF events, teams, rankings, and results

Security & Testing Score 100/100 0 findings 46/wk Cap. Minimal
Qurl Source verified npm
A
@layervai/qurl-mcp

MCP server for qURL™ — secure link management for AI agents. Quantum URL is how you enter the hidden layer of the internet.

Security & Testing Score 100/100 0 findings 46/wk Cap. Minimal
Stream Source verified npm
A
@evertrust/stream-mcp

MCP server for Evertrust Stream 2.1 (PKI: CA, VA/OCSP, TSA, SSH)

Security & Testing Score 100/100 0 findings 45/wk Cap. Minimal
Yamory Source verified npm
A
@aranseshita/yamory-mcp-server

MCP server for yamory vulnerability management cloud

Security & Testing Score 100/100 0 findings 44/wk Cap. Minimal
Bruno Source verified npm
A
bruno-mcp-server

MCP server for Bruno CLI integration - Execute API tests through Model Context Protocol

Security & Testing Score 100/100 0 findings 40/wk Cap. Minimal
Ping Identity Aic Source verified npm
A
@ping-identity/aic-mcp-server

[![License: Apache 2.0](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE) [![GitHub release](https://img.shields.io/github/v/release/pingidentity/aic-mcp-server?include_prereleases&sort=semver)](https://github.com/pingidentity/aic-mcp-

Security & Testing Score 100/100 0 findings 36/wk Cap. Minimal
Wazuh Source verified npm
A
wazuh-mcp

Read-only Wazuh SIEM/XDR control CLI with an MCP adapter

Security & Testing Score 100/100 0 findings 34/wk Cap. Minimal
Ory Kratos Source verified npm
A
mcp-ory-kratos

MCP server for Ory Kratos Admin API

Security & Testing Score 100/100 0 findings 31/wk Cap. Minimal
Jira Qmetry Source verified npm
A
jira-qmetry-mcp-server

MCP Server for QMetry Test Management in Jira

Security & Testing Score 100/100 0 findings 28/wk Cap. Minimal
Protonmail Source verified npm
A
@darkroomhq/protonmail-mcp

MCP server for ProtonMail via Proton Bridge (SMTP + IMAP)

Security & Testing Score 100/100 0 findings 27/wk Cap. Minimal
Vorionsys Source verified npm
A
@vorionsys/mcp-server

MCP server for Vorion audit and trust primitives — pre-flight trust checks for tool execution, proof logging, tier lookup, and remote Cognigate Runtime tools

Security & Testing Score 100/100 0 findings 24/wk Cap. Minimal
Wpscan Source verified npm
A
@wwa/wpscan-mcp

MCP server for the WPScan (wpscan.com) API

Security & Testing Score 100/100 0 findings 24/wk Cap. Minimal
Fitbit Source verified npm
A
mcp-fitbit

Model Context Protocol (MCP) server for accessing Fitbit health and fitness data. Connect AI assistants like Claude to your Fitbit data for personalized health insights.

Security & Testing Score 100/100 0 findings 22/wk Cap. Minimal
Kaminari Click Source verified npm
A
@kaminari-click/mcp

Official Model Context Protocol (MCP) server for Kaminari Click — traffic-quality statistics, saved reports, shared reports, and IP/UA reference databases.

Security & Testing Score 100/100 0 findings 22/wk Cap. Minimal
Entra Permissions Source verified npm
A
@mjendza/entra-permissions-mcp

MCP server exposing Microsoft Graph permissions and Microsoft first-party apps data

Security & Testing Score 100/100 0 findings 21/wk Cap. Minimal
Oathe Source verified npm
A
oathe-mcp

MCP server for Oathe AI security audits — check trust scores before installing MCP servers, plugins, or AI agent skills

Security & Testing Score 100/100 0 findings 20/wk Cap. Minimal
Vaulted Source verified npm
A
@vaulted/mcp-server

Zero-knowledge encrypted secret sharing for AI agents via MCP

Security & Testing Score 100/100 0 findings 20/wk Cap. Minimal
Secure Remote Source verified npm
A
mcp-secure-remote

Remote proxy for Model Context Protocol servers with mTLS (mutual TLS) client certificate authentication support.

Security & Testing Score 100/100 0 findings 19/wk Cap. Minimal
Thehive Cortex Source verified npm
A
thehive-cortex-mcp

Cortex observable-analysis control CLI with an MCP adapter

Security & Testing Score 100/100 0 findings 19/wk Cap. Minimal
Controlplane Source verified npm
A
@perfscale/controlplane-mcp

MCP server for the perfscale controlplane (perfscale.su / perfscale.ru): machines, tests, runs, metrics, audit

Security & Testing Score 100/100 0 findings 18/wk Cap. Minimal
Hio Client Source verified npm
A
@humanisoffline/hio-client

Human Is Offline agent client — resolve, read, encrypt ask-first notes, receipt

Security & Testing Score 100/100 0 findings 18/wk Cap. Minimal