MCP servers · Security & identity

50 listings on this page, in order of arrival. Each one has its own page with README, repository facts and source links.

1. VMware Harden ★ 3
   VMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection.
2. VulnCheck ★ 8
   VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.
3. Works With Agents MCP
   14 MCP tools: facts, pitfalls, skills, handoff protocols, trust scores, identity verification.
4. ClaudeInk — Knowledge Vault
   Save, search, and compile valuable knowledge from your Claude conversations.
5. AgentHill
   A daily game played by AI agents: ten places on a hill, resolved every night. OAuth 2.1.
6. Animam Agent Platform
   Configure & analyze AI chatbots: personas, corpus, tools, digests, multi-bot. OAuth 2.1.
7. io.github.wundervault/wundervault-mcp ★ 2
   Zero-knowledge MCP secrets vault for AI agents: secrets injected at runtime, never seen by the model
8. Blumira
   MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.
9. HIPAA Agent
   HIPAA compliance AI agent — scan, grade, SRA, and generate compliance docs.
10. io.github.xiaoxuzhu303-prog/harmony-mcp
    AI copilot for WeChat Mini Program - compile-fix, size analysis, compliance. 20 tools.
11. io.github.xu-c0/cybersec-mcp ★ 1
    Cybersecurity MCP server: 323 prompts + 7 workflows for red team, blue team, SOC, cloud, OSINT.
12. kdbx ★ 4
    Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.
13. PkgSeek Linux Intelligence
    Linux package, file, command, vulnerability, lifecycle, migration, and repository intelligence.
14. io.github.yessGlory17/jobverify ★ 7
    Detect fake-recruiter and job-offer scams using free OSINT. No API keys.
15. VMware Harden ★ 3
    VMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection.
16. Identity Forge
    Design kits, brand naming, and domain research for coding agents.
17. io.illumora/craft
    Illumora Craft — evidence-augmented prompt compile for agents via remote MCP (OAuth) or local stdio.
18. io.imaginevid/imaginevid-ai-generation
    OAuth-protected ImagineVid MCP for image, video, and music generation.
19. KernelScan
    Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.
20. io.polyblog/polyblog
    Manage multilingual Polyblog articles, localization coverage and editorial plans through OAuth.
21. io.robells/robells
    The shared task board for teams and their AI agents — connect over OAuth, every action signed.
22. Seal Security
    Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.
23. Skycloak
    Managed Keycloak from any MCP client: clusters, realms, apps, SSO, users, domains, audit events.
24. Toolforest
    Hosted MCP server with managed OAuth for 15+ toolkits: Google Workspace, Fitbit, Oura, Kalshi, etc.
25. io.tooloracle/accessoracle
    AccessOracle - 10 access control tools: IAM, PAM, recertification, segregation of duties.
26. io.tooloracle/agentguard
    AgentGuard — 20-tool AI safety MCP: policy preflight, risk scoring, audit logging, rate limits.
27. io.tooloracle/aml
    AMLOracle — 12-tool AML/CFT MCP: 87k sanctions names, PEP screening, adverse media, SAR/STR.
28. io.tooloracle/ampel
    AmpelOracle — 50-tool compliance traffic-light: Go/Caution/Stop signals for ESG, MiCA, AML.
29. io.tooloracle/conductor
    DORA OS Conductor — 16-tool meta-orchestrator for DORA compliance workflow automation.
30. io.tooloracle/cybershield
    CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.
31. io.tooloracle/doraeventfabric
    DORA OS EventFabric - 14-tool event stream for DORA compliance signals and pub/sub fabric.
32. io.tooloracle/insuranceoracle
    InsuranceOracle - 12 insurance compliance tools: GDV, BaFin VAG, Solvency II, IDD.
33. io.tooloracle/mica
    MiCAOracle — 24 tools for EU MiCA stablecoin compliance: peg, reserves, attestations.
34. io.tooloracle/tlpt
    TLPTOracle — 17-tool TIBER-EU TLPT framework: scope, threat intel, scenarios, reports.
35. io.tooloracle/zkevidenceoracle
    ZKEvidenceOracle - 14 zero-knowledge proof tools for compliance evidence: Groth16, PLONK.
36. TrustAgent — counterparty verification
    Is this address safe to pay? OFAC sanctions, ERC-8004 reputation, contract analysis.
37. MCP for Oura
    Multi-tenant hosted MCP server for Oura Ring — 21 read-only tools, OAuth per user.
38. Lineup
    Turn one sentence into an event pack: event card, identity badges, QR codes, and .ics.
39. BezBaseina
    Latvian property portal: search rentals, sales & nightly stays; market stats; owner tools via OAuth.
40. Route6 — Agent Network Identity
    Gives AI agents a public IPv6 identity, hostname, port forwarding, web fetch, team mesh. Free tier.
41. SecurityScan
    Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
42. Compliance Registry
    First A2A registry where AI agents discover & transact with compliance firms - audits, permits.
43. Globimmo Property Search
    International real-estate search and buyer workflows for AI agents via MCP and OAuth 2.1.
44. net.hepcloud/mcp
    Manage HepCloud (Turkish cloud) servers and managed PostgreSQL from your AI assistant. OAuth 2.1.
45. HoneyLabs ★ 2
    Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.
46. RaidRunner
    Manage your Twitch raid-train schedule from an AI assistant: claim, release & trade slots via OAuth.
47. StreamScanner
    Query your Twitch streams, events, supporters, raids & rankings from an AI assistant via OAuth.
48. Stigmer
    Execution graph of AWS: verified contracts, least-privilege IAM policies, pre-flight authorization.
49. kcp-harness — KCP compliance proxy
    MCP compliance proxy between agent and tools: deterministic governance, fail-closed, audit trail.
50. Firmaradar
    Norwegian company intelligence: ownership, roles, financials, risk, KYC/AML/PEP (multi-source)