Security & Testing MCP Servers

MCP servers for security scanning, vulnerability testing, secrets management and QA automation. Each entry is scanned with the deterministic Capability-Flow Trust Model — grades are computed, never self-reported.

Semgrep npm
A
mcp-server-semgrep

MCP Server for Semgrep Integration - static code analysis with AI

Security & Testing Score 92/100 3 findings 430/wk Cap. High
Chron npm
A
chron-mcp

Audit-grade timestamped logs for every AI conversation

Security & Testing Score 92/100 8 findings 286/wk Cap. High
Sophos Central npm
A
sophos-central-mcp-server

MCP server for Sophos Central API - SOC monitoring, endpoint management, admin automation, and XDR investigation

Security & Testing Score 92/100 1 finding 230/wk Cap. High
Security npm
A
security-mcp

AI security MCP server and enforcement gate for Claude Code, Cursor, GitHub Copilot, Codex, Replit, and any MCP-compatible editor. Applies OWASP, MITRE ATT&CK, NIST, Zero Trust, PCI DSS, SOC 2, and ISO 27001.

Security & Testing Score 92/100 43 findings 108/wk Cap. High
Axecap npm
A
@icjia/axecap

MCP axe-core audit server for Claude Code — WCAG A/AA/AAA compliance audits with compressed results optimized for Claude's context window

Security & Testing Score 92/100 2 findings 105/wk Cap. High
Wundervault npm
A
@wundervault/mcp-server

MCP server for Wundervault zero-knowledge secret management

Security & Testing Score 92/100 7 findings 92/wk Cap. High
Nyx Intelligence Val npm
A
@nyx-intelligence/val-mcp

Val: a 100% MCP QA agent for vibecoders. Drives a real browser to catch UX bugs (broken links, 404s, console errors, broken images) so your coding agent can fix them.

Security & Testing Score 92/100 5 findings 91/wk Cap. High
Aegis npm
A
mcp-aegis

A Node.js testing library for Model Context Protocol (MCP) servers

Security & Testing Score 92/100 8 findings 90/wk Cap. High
Owasp Mcp Scan npm
A
owasp-mcp-scan

Security scanner for Model Context Protocol (MCP) servers. Audits running servers against the OWASP MCP Top 10 and outputs console, JSON, and SARIF reports. Runs as a CLI or as an MCP server itself.

Security & Testing Score 92/100 6 findings 85/wk Cap. High
Chirindo npm
A
@headlessoracle/chirindo

Chirindo — a fail-closed cryptographic gate for the MCP tool-call boundary. The watchtower for your AI agents. By Headless Oracle.

Security & Testing Score 92/100 1 finding 81/wk Cap. High
Supership Scan npm
A
supership-scan

supership indexes the entire x402 economy (52,000 services) so an AI agent can find and buy the right data across Base, Solana, and Polygon -- ranked by real usage, with a signed delivery receipt. No wallet needed on the seller's chain.

Security & Testing Score 92/100 6 findings 78/wk Cap. High
Android Ui Assist npm
A
android-ui-assist-mcp

An MCP server that captures Android emulator/device screenshots for AI agent visual analysis

Security & Testing Score 92/100 1 finding 72/wk Cap. High
Tripwire Roblox npm
A
tripwire-roblox

Tripwire: an MCP server for Roblox Studio and Open Cloud. Downloads the prebuilt Rust binary for your platform.

Security & Testing Score 92/100 3 findings 68/wk Cap. High
Phantom Secrets npm
A
phantom-secrets-mcp

MCP server for Phantom Secrets — lets AI coding tools manage API keys safely without ever seeing real values. 25 tools for Claude Code, Cursor, Windsurf, and Codex.

Security & Testing Score 92/100 2 findings 67/wk Cap. High
React Native Mcp Guide npm
A
@mrnitro360/react-native-mcp-guide

MCP server for React Native best practices guidance with expert-level code remediation

Security & Testing Score 92/100 3 findings 63/wk Cap. High
Agent Guard npm
A
@liminallablibs/agent-guard-mcp

Verify-before-act safety MCP for AI coding agents: check packages, lockfiles, skill/plugin manifests, and CI workflows before installing or merging.

Security & Testing Score 92/100 2 findings 57/wk Cap. High
Humsana npm
A
@humsana/mcp-server

MCP server for Humsana - AI that reads the room

Security & Testing Score 92/100 11 findings 53/wk Cap. High
Runsec npm
A
@runsec/mcp

RunSec MCP server rewritten in TypeScript.

Security & Testing Score 92/100 3 findings 52/wk Cap. High
Code Sentinel npm
A
code-sentinel-mcp

MCP server for code quality analysis - security, errors, deceptive patterns, and placeholder detection

Security & Testing Score 92/100 1 finding 49/wk Cap. High
Ui Test Gen npm
A
ui-test-gen-mcp

A Model Context Protocol (MCP) server that generates Playwright visual testing scripts from CSV data with advanced configuration management, environment switching capabilities, and organized code structure.

Security & Testing Score 92/100 2 findings 37/wk Cap. High
Nmap npm
A
mcp-nmap-server

MCP server for performing network scanning using NMAP

Security & Testing Score 92/100 2 findings 36/wk Cap. High
Ios Mcp Code Quality npm
A
ios-mcp-code-quality-server

A CLI and MCP server for analyzing iOS code quality using AI suggestions and test results.

Security & Testing Score 92/100 3 findings 31/wk Cap. High
Selfhosted Doctor npm
A
selfhosted-doctor

AI-ready security checks for self-hosted homelabs, starting with Docker Compose.

Security & Testing Score 92/100 1 finding 30/wk Cap. High
Testing Library npm
A
mcp-testing-library

A CLI tool for running Model Context Protocol (MCP) tests

Security & Testing Score 92/100 6 findings 27/wk Cap. High