Security

Security-focused tools - vulnerability scanners, secret detection, penetration testing aids, and compliance checks.

⚠ Privilege abuse · scanner blind spots · false safety
460Total Servers
Sort:460 servers
ServerLanguageStarsDownloads
fastmcp-dominion

Trust-gated MCP middleware for FastMCP via Dominion Observatory

Python--
fastmcp-ironbook

Iron Book agent-based security integration for FastMCP servers

Python--
fastmcp-oauth

by gazzadownunder

TypeScript1-
fastmcp-pvl-core

Shared FastMCP infrastructure: auth, middleware, logging, server-factory helpers

Python--
fastmcp_react_oauth_client

This React application validates the connection from a React App to a FastMCP Cloud Server with OAuth authentication.

by osduenx

TypeScript0-
fastmcp-test

MCP server (FastMCP) with bearer-token auth & per-tool admin scopes, plus a React client (Chakra UI + TanStack Query) using the MCP TypeScript SDK.

by spunkypanda

TypeScript0-
FEDLIN Scanners

Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.

by fedlin

—--
FedRAMP Docs

Provides access to FedRAMP documentation and compliance data, enabling search through security requirements, control mappings, and guidance documents with specialized functions for tracking Key Security Indicators, Methods and Assessment Standards, and NIST control references.

—18-
FeedOracle Compliance

Regulatory compliance checks for MiCA, DORA, custody risk, and evidence scoring.

—--
FeedOracle Compliance Agent

MiCA compliance evidence, stablecoin risk, macro regime, agent governance. 79 tools.

by feedoracle

—--
Feishu

Reads Feishu (Lark) documents, spreadsheets, and bitables with OAuth2 user token authentication and automatic refresh.

—3-
Fenjing

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

by Marven11

Python1.3k-
fga-mcp

MCP Server for querying and management of OpenFGA or Auth0 FGA authorization stores

by BobDickinson

TypeScript9-
FieldRobin

Authenticated FieldRobin workspace tools, including scope-authorized customer and job creation.

by fieldrobin

—--
FindWeedNY

Licensed NY cannabis dispensaries, brands, deals, license checks and lab-anchored reviews. No auth.

by findweedny

—--
FINLY Balance Report Analysis

Israeli mortgage reports with Hebrew results, 15-minute recovery and authorized external OCR.

by finly

—--
fi.northpoint/marketing-compliance

Crypto marketing compliance rulesets over MCP: MiCA, FCA, GDPR, SEC, MAS, VARA. Not legal advice.

by northpoint

—--
Firecrawl (Effect-TS)

Self-hostable Firecrawl MCP server built with Effect-TS and Bun, supporting Vercel deployment, Prometheus metrics, multi-tenant authentication, and safe mode restrictions.

—4-
Flare

Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys

by flarehq

TypeScript307-
FlightFinder Aviation Safety Data

Aviation accident narratives from 128 official authorities, plus FAA wildlife, laser and drone data

by himaxym

—--
forge-mcp

Claude Code plugin for building enterprise-grade MCP servers — guided discovery, security audits, code generation using @modelcontextprotocol/sdk

by randyquaye

TypeScript0-
Formasty

Create, edit, validate, publish, and inspect Formasty forms and quizzes over authenticated MCP.

by formasty

—--
FormBuilder

Create form drafts, publish on request, read responses and create authorized response webhooks.

by formbuilder

—--
Framekeep Public Discovery

Read-only discovery of Framekeep capabilities, security boundaries, and public resources.

by framekeep

—--
Freedcamp

Integrates with Freedcamp's task management platform to create, update, list, and delete tasks with bulk operations and secure HMAC-SHA1 authentication.

TypeScript4-