awesome-mcp-security

🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️
https://github.com/puliczek/awesome-mcp-security

Last synced: 5 days ago
JSON representation

📕 Articles and Blog Posts
- MCP Servers: The New Security Nightmare by equixly.com
📕 Articles, X threads and Blog Posts
Build Tools & Dependency Management
- 🔧 Dependency Analysis
  - arvindand/maven-tools-mcp - Universal Maven Central dependency intelligence for JVM build tools (Maven, Gradle, SBT, Mill). Provides version lookups, dependency health checks, age analysis, release patterns, and upgrade guidance with Context7 integration.
CI/CD & DevOps Pipelines
- 🔗 Aggregators
  - askbudi/roundtable - Zero-configuration MCP server that unifies multiple AI coding assistants (Codex, Claude Code, Cursor, Gemini) through intelligent auto-discovery and standardized interface.
  - Composiohq/Rube - Rube is an MCP server built on the Composio integration platform. It connects your AI tools to 500+ apps.
  - julien040/anyquery - Query more than 40 apps with one binary using SQL. It can also connect to your PostgreSQL, MySQL, or SQLite compatible database. Local-first and private by design.
  - metatool-ai/metatool-app - MetaMCP is the one unified middleware MCP server that manages your MCP connections with GUI.
  - mindsdb/mindsdb - Connect and unify data across various platforms and databases with [MindsDB as a single MCP server](https://docs.mindsdb.com/mcp/overview).
  - glenngillen/mcpmcp-server - A list of MCP servers so you can ask your client which servers you can use to improve your daily workflow.
  - mcpproxy-go - Local MCP proxy that aggregates multiple servers behind a single endpoint. Features BM25 tool discovery, quarantine security, activity logging, Docker isolation, and web UI.
  - wegotdocs/open-mcp - Turn a web API into an MCP server in 10 seconds and add it to the open source registry: [https://open-mcp.org](https://open-mcp.org)
  - PipedreamHQ/pipedream - Connect with 2,500 APIs with 8,000+ prebuilt tools, and manage servers for your users, in your own app.
  - VeriTeknik/pluggedin-mcp-proxy - A comprehensive proxy server that combines multiple MCP servers into a single interface with extensive visibility features. It provides discovery and management of tools, prompts, resources, and templates across servers, plus a playground for debugging when building MCP servers.
  - tigranbs/mcgravity - A proxy tool for composing multiple MCP servers into one unified endpoint. Scale your AI tools by load balancing requests across multiple MCP servers, similar to how Nginx works for web servers.
  - WayStation-ai/mcp - Seamlessly and securely connect Claude Desktop and other MCP hosts to your favorite apps (Notion, Slack, Monday, Airtable, etc.). Takes less than 90 secs.
  - sxhxliang/mcp-access-point - Turn a web service into an MCP server in one click without making any code changes.
- 📂 Browser Automation
  - aircodelabs/grasp - Self-hosted browser using agent with built-in MCP and A2A support.
  - Automata-Labs-team/MCP-Server-Playwright - An MCP server for browser automation using Playwright
  - blackwhite084/playwright-plus-python-mcp - An MCP python server using Playwright for browser automation, more suitable for llm
  - browserbase/mcp-server-browserbase - Automate browser interactions in the cloud (e.g. web navigation, data extraction, form filling, and more)
  - browsermcp/mcp - Automate your local Chrome browser
  - co-browser/browser-use-mcp-server - browser-use packaged as an MCP server with SSE transport. includes a dockerfile to run chromium in docker + a vnc server.
  - executeautomation/mcp-playwright-server - An MCP server using Playwright for browser automation and webscrapping
  - eyalzh/browser-control-mcp - An MCP server paired with a browser extension that enables LLM clients to control the user's browser (Firefox).
  - getrupt/ashra-mcp - Extract structured data from any website. Just prompt and get JSON.
  - kimtth/mcp-aoai-web-browsing - A `minimal` server/client MCP implementation using Azure OpenAI and Playwright.
  - microsoft/playwright-mcp - Official Microsoft Playwright MCP server, enabling LLMs to interact with web pages through structured accessibility snapshots
  - modelcontextprotocol/server-puppeteer - Browser automation for web scraping and interaction
  - ndthanhdev/mcp-browser-kit - An MCP Server for interacting with manifest v2 compatible browsers.
- 👨‍💻 Code Execution
  - pydantic/pydantic-ai/mcp-run-python - Run Python code in a secure sandbox via MCP tool calls
  - yepcode/mcp-server-js - Execute any LLM-generated code in a secure and scalable sandbox environment and create your own MCP tools using JavaScript or Python, with full support for NPM and PyPI packages
  - ckanthony/openapi-mcp - OpenAPI-MCP: Dockerized MCP Server to allow your AI agent to access any API with existing api docs.
  - alfonsograziano/node-code-sandbox-mcp - based sandboxes for executing JavaScript snippets with on-the-fly npm dependency installation and clean teardown
- 🤖 Coding Agents
  - oraios/serena - A fully-featured coding agent that relies on symbolic code operations by using language servers.
  - ezyang/codemcp - Coding agent with basic read, write and command line tools.
  - Wolfe-Jam/claude-faf-mcp
  - doggybee/mcp-server-leetcode - An MCP server that enables AI models to search, retrieve, and solve LeetCode problems. Supports metadata filtering, user profiles, submissions, and contest data access.
  - jinzcdev/leetcode-mcp-server - MCP server enabling automated access to LeetCode's programming problems, solutions, submissions and public data with optional authentication for user-specific features (e.g., notes), supporting both `leetcode.com` (global) and `leetcode.cn` (China) sites.
  - juehang/vscode-mcp-server - A MCP Server that allows AI such as Claude to read from the directory structure in a VS Code workspace, see problems picked up by linter(s) and the language server, read code files, and make edits.
  - scrapeless/mcp-server-scrapeless - Seamlessly integrate real-time Google SERP(Google Search, Google Flight, Google Map, Google Jobs....) results into your LLM applications using the Scrapeless MCP server.
- 🔄 Continuous Integration
  - Tiberriver256/mcp-server-github-actions - MCP server for interacting with GitHub Actions workflows, enabling AI assistants to manage CI/CD pipelines.
  - lobehub/mcp-hello-world - A simple Hello World MCP server for CI/CD test.
- 🔄 DevOps Visibility
  - SBDI/mcp-devps-hub - MCP server for end-to-end development visibility (Jira, GitHub, CI/CD, etc.).
  - Acid-base/FastMCP-Proper - Python MCP server with CI/CD tooling and testability built-in.
  - gofireflyio/firefly-mcp - Integrates, discovers, manages, and codifies cloud resources with [Firefly](https://firefly.ai).
- 📱 Mobile CI/CD
  - stefanoamorelli/codemagic-mcp - Codemagic CI/CD MCP Server for mobile app CI/CD pipeline management.
Cloud Infrastructure
- ☁️ Cloud Providers
  - awslabs/mcp - Official AWS MCP server for interacting with AWS services using the Model Context Protocol. Enables AI assistants to manage AWS resources through natural language and programmatic interfaces.
  - aaronsb/ado-mcp - Azure DevOps MCP Server for integrating AI assistants with Azure DevOps services.
  - erikhoward/adls-mcp-server - MCP Server for Azure Data Lake Storage. It can perform manage containers, read/write/upload/download operations on container files and manage file metadata.
  - hardik-id/azure-resource-graph-mcp-server - A Model Context Protocol server for querying and analyzing Azure resources at scale using Azure Resource Graph, enabling AI assistants to explore and monitor Azure infrastructure.
  - jdubois/azure-cli-mcp - A wrapper around the Azure CLI command line that allows you to talk directly to Azure.
  - stefanskiasan/azure-devops-mcp-server - MCP Server for Cline to Access Azure DevOps.
  - Tiberriver256/mcp-server-azure-devops - Azure DevOps integration for repository management, work items, and pipelines.
  - Vortiago/mcp-azure-devops - A Model Context Protocol server enabling AI assistants to interact with Azure DevOps services via Python SDK.
  - aliyun/alibaba-cloud-ops-mcp-server - A MCP server that enables AI assistants to operation resources on Alibaba Cloud, supporting ECS, Cloud Monitor, OOS and widely used cloud products.
  - bright8192/esxi-mcp-server - A VMware ESXi/vCenter management server based on MCP (Model Control Protocol), providing simple REST API interfaces for virtual machine management.
  - cloudflare/mcp-server-cloudflare - Integration with Cloudflare services including Workers, KV, R2, and D1.
  - thunderboltsid/mcp-nutanix - Go-based MCP Server for interfacing with Nutanix Prism Central resources.
- 🖥️ Command Line
  - ferrislucas/iterm-mcp - A Model Context Protocol server that provides access to iTerm. You can run commands and ask questions about what you see in the iTerm terminal.
  - g0t4/mcp-server-commands - Run any command with `run_command` and `run_script` tools.
  - maxim-saplin/mcp_safe_local_python_executor - Safe Python interpreter based on HF Smolagents `LocalPythonExecutor`
  - MladenSU/cli-mcp-server - Command line interface with secure execution and customizable security policies
  - OthmaneBlial/term_mcp_deepseek - A DeepSeek MCP-like Server for Terminal
  - tumf/mcp-shell-server - A secure shell command execution server implementing the Model Context Protocol (MCP)
  - automateyournetwork/pyATS_MCP - Cisco pyATS server enabling structured, model-driven interaction with network devices.
  - wonderwhy-er/DesktopCommanderMCP - A swiss-army-knife that can manage/execute programs and read/write/search/edit code and text files.
- 🐳 Container Orchestration
  - rohitg00/kubectl-mcp-server - A Model Context Protocol (MCP) server for Kubernetes that enables AI assistants like Claude, Cursor, and others to interact with Kubernetes clusters through natural language.
  - alexei-led/k8s-mcp-server - A lightweight yet robust server that empowers AI assistants to securely execute Kubernetes CLI commands (`kubectl`, `helm`, `istioctl`, and `argocd`) using Unix pipes in a safe Docker environment with multi-architecture support.
  - Flux159/mcp-server-kubernetes - Typescript implementation of Kubernetes cluster operations for pods, deployments, services.
  - portainer/portainer-mcp - A powerful MCP server that enables AI assistants to seamlessly interact with Portainer instances, providing natural language access to container management, deployment operations, and infrastructure monitoring capabilities.
  - rrmistry/tilt-mcp - Model Context Protocol server that integrates with Tilt to provide programmatic access to Tilt resources, logs, and management operations for Kubernetes development environments.
  - strowk/mcp-k8s-go - Kubernetes cluster operations through MCP.
  - weibaohui/k8m - Provides MCP multi-cluster Kubernetes management and operations, featuring a management interface, logging, and nearly 50 built-in tools covering common DevOps and development scenarios. Supports both standard and CRD resources.
  - weibaohui/kom - Provides MCP multi-cluster Kubernetes management and operations. It can be integrated as an SDK into your own project and includes nearly 50 built-in tools covering common DevOps and development scenarios. Supports both standard and CRD resources.
  - wenhuwang/mcp-k8s-eye - MCP Server for kubernetes management, and analyze your cluster, application health.
  - kocierik/mcp-nomad - MCP Server for nomad management, and analyze your cluster, application health, logs and ACL.
  - aadarshjain/kubectl-mcp-server - A STDIO based MCP server for Kubernetes that interacts seamlessly with your local clusters (~/.kube/config) using `kubectl` CLI commands. Uses read-only operations by default to prevent accidental modifications/deletion of K8s resources.
- 🏗️ Infrastructure as Code
  - dulltz/mcp-server-hcp-terraform - MCP server for working with HashiCorp Cloud Platform (HCP) Terraform, enabling AI assistants to interact with Terraform Cloud resources.
  - guilhermeyoshida/mcp-terraform-assistant - An MCP server for managing infrastructure as code using Terraform.
  - jashkahar/Terraform-MCP-Server - This project provides an MCP server that exposes Terraform infrastructure-as-code operations through natural language.
  - nwiizo/tfmcp - A Terraform MCP server allowing AI assistants to manage and operate Terraform environments, enabling reading configurations, analyzing plans, applying configurations, and managing Terraform state.
  - severity1/terraform-cloud-mcp - A Model Context Protocol server that integrates AI assistants with the Terraform Cloud API, allowing you to manage your infrastructure.
  - thrash888/terraform-mcp-server - Terraform Registry MCP Server for interacting with Terraform registries.
  - westonplatter/mcp-terraform-python - MCP server to run terraform operations locally.
  - stakpak/mcp - MCP Server for interacting, editing and generating code for Terraform, Kubernetes, GithubActions and Dockerfile.
- 🔒 Security
  - LaurieWired/GhidraMCP - A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling binaries, renaming methods and data, and listing methods, classes, imports, and exports.
  - BurtTheCoder/mcp-virustotal - MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.
  - BurtTheCoder/mcp-shodan - MCP server for querying the Shodan API and Shodan CVEDB. This server provides tools for IP lookups, device searches, DNS lookups, vulnerability queries, CPE lookups, and more.
  - semgrep/mcp - Allow AI agents to scan code for security vulnerabilites using [Semgrep](https://semgrep.dev).
  - 13bm/GhidraMCP - MCP server for integrating Ghidra with AI assistants. This plugin enables binary analysis, providing tools for function inspection, decompilation, memory exploration, and import/export analysis via the Model Context Protocol.
  - fr0gger/MCP_Security - MCP server for querying the ORKL API. This server provides tools for fetching threat reports, analyzing threat actors, and retrieving intelligence sources.
  - girste/mcp-cybersec-watchdog - Comprehensive security audit tool for Linux servers. Analyzes firewall, SSH hardening, threats, fail2ban, Docker, kernel hardening. Returns actionable recommendations with zero configuration.
  - qianniuspace/mcp-security-audit - A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.
  - slouchd/cyberchef-api-mcp-server - MCP server for interacting with the CyberChef server API which will allow an MCP client to utilise the CyberChef operations.
  - rad-security/mcp-server - MCP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.
  - securityfortech/secops-mcp - All-in-one security testing toolbox that brings together popular open source tools through a single MCP interface. Connected to an AI agent, it enables tasks like pentesting, bug bounty hunting, threat hunting, and more.
  - roadwy/cve-search_mcp - A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs.
  - nickpending/mcp-recon - Conversational recon interface and MCP server powered by httpx and asnmap. Supports various reconnaissance levels for domain analysis, security header inspection, certificate analysis, and ASN lookup.
- 🔄 Version Control
  - adhikasp/mcp-git-ingest - Read and analyze GitHub repositories with your LLM
  - ddukbg/github-enterprise-mcp - MCP server for GitHub Enterprise API integration
  - gitea/gitea-mcp - Interactive with Gitea instances with MCP.
  - github/github-mcp-server - Official GitHub server for integration with repository management, PRs, issues, and more.
  - kopfrechner/gitlab-mr-mcp - Interact seamlessly with issues and merge requests of your GitLab projects.
  - modelcontextprotocol/server-git - Direct Git repository operations including reading, searching, and analyzing local repositories
  - modelcontextprotocol/server-gitlab - GitLab platform integration for project management and CI/CD operations
  - oschina/mcp-gitee - Gitee API integration, repository, issue, and pull request management, and more.
Frameworks
- 📋 Project Management
  - MervinPraison/praisonai-mcp - AI Agents framework with 64+ built-in MCP tools for automation, including search, memory, workflows, code execution, and file operations.
  - FastMCP - A high-level framework for building MCP servers in Python
  - FastMCP - A high-level framework for building MCP servers in TypeScript
💾 MCP Security Servers
- IDA-Pro-MCP by mrexodia - MCP server for reverse engineering in IDA Pro, a tool for analyzing software and binary files.
- binaryninja-mcp by MCPPhalanx - MCP server for Binary Ninja, a binary analysis tool.
- Burp Suite MCP by PortSwigger - MCP integration for web security testing in Burp Suite, a security testing tool for web applications.
- BloodHound-MCP-AI by MorDavid - MCP server integration for BloodHound, a tool for analyzing Active Directory domains.
- RoadRecon MCP by atomicchonk - MCP server for Azure AD data analysis with ROADRecon, a tool for mapping Azure Active Directory environments.
- Jadx MCP Plugin by mobilehackinglab - Jadx plugin for MCP server access via HTTP, used for decompiling Android apps.
- DNStwist MCP Server by BurtTheCoder - MCP server for DNS fuzzing with dnstwist, a tool for detecting phishing and domain takeover threats.
- Maigret MCP Server by BurtTheCoder - MCP server for OSINT data collection with Maigret, a tool that gathers user info from various sources.
- pomerium/pomerium - Identity-aware proxy with native support for Zero Trust access, now including MCP support.
- pomerium/mcp-app-demo
- pomerium/mcp-servers
- RunReveal MCP Server - MCP server for RunReveal to query security logs at scale
- Nuclei MCP Integration by addcontent - Provides a standardized MCP interface for Nuclei, a fast and customizable vulnerabilty scanner, for performing scans and managing vulnerablity assessments
- Illumio MCP Server by alexgoller - MCP server for interacting with Illumio Policy Compute Engine for Illumio workload management, label operations, traffic flow analysis
- TriageMCP by eversinc33 - MCP server for doing basic static triage of Portable Executable (PE) files
- urldna/mcp - urlDNA MCP server for phishing detection and URL analysis through advanced contextual scanning.
Monitoring & Observability
- 🔔 Alerting & Notification
  - kaznak/alertmanager-mcp - A Model Context Protocol server that integrates with Prometheus Alertmanager for alert management and notification.
- 🔍 Application Performance Monitoring
  - dynatrace-oss/dynatrace-mcp - MCP server for Dynatrace Observability monitoring, providing AI-powered insights into application performance and infrastructure health.
  - last9/last9-mcp-server - Last9 MCP Server for observability and monitoring, providing AI assistants with access to metrics, logs, and traces.
  - willibrandon/CursorMCPMonitor - Real-time monitoring tool for Model Context Protocol interactions in Cursor AI editor. Track, analyze, and debug AI context exchanges.
  - Polar Signals Remote MCP - MCP server for Polar Signals Cloud continuous profiling platform, enabling AI assistants to analyze CPU performance, memory usage, and identify optimization opportunities in production systems.
- 📊 Metrics & Monitoring
  - CaesarYangs/prometheus_mcp_server - A Model Context Protocol server enabling LLMs to query, analyze, and interact with Prometheus databases through predefined routes.
  - etruong42/prometheus-mcp - MCP server to connect LLMs with Prometheus HTTP API for metrics querying and analysis.
  - loginmqv/mcp-server-prometheus - MCP server for interacting with Prometheus, enabling AI assistants to query and analyze metrics data.
  - pab1it0/prometheus-mcp-server - A Model Context Protocol server that enables AI assistants to query and analyze Prometheus metrics through standardized interfaces.
  - VictoriaMetrics-Community/mcp-victoriametrics - The implementation of Model Context Protocol (MCP) server for VictoriaMetrics. This provides access to your VictoriaMetrics instance and seamless integration with VictoriaMetrics APIs and documentation.
💻 Other Useful Resources
- Official MCP Specification
- I gave Claude root access to my server... Model Context Protocol explained by Fireship
- Model Context Protocol (MCP): The Key To Agentic AI by Jack Herrington
- Please read and follow our contributing guide
- Awesome Cybersecurity Agentic AI - Collection of resources on using AI agents for security use cases
📃 Papers
Project & Service Management
- 📋 Project Management
  - nguyenvanduocit/jira-mcp - A Go-based MCP connector for Jira that enables AI assistants like Claude to interact with Atlassian Jira. This tool provides a seamless interface for AI models to perform common Jira operations including issue management, sprint planning, and workflow transitions.
  - sooperset/mcp-atlassian - MCP server for Atlassian products (Confluence and Jira). Supports Confluence Cloud, Jira Cloud, and Jira Server/Data Center. Provides comprehensive tools for searching, reading, creating, and managing content across Atlassian workspaces.

Programming Languages

Python 53 TypeScript 38 Go 21 JavaScript 8 Java 5 Rust 2 C# 1

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Awesome

awesome-mcp-security

📕 Articles and Blog Posts

📕 Articles, X threads and Blog Posts

Build Tools & Dependency Management

🔧 Dependency Analysis

CI/CD & DevOps Pipelines

🔗 Aggregators

📂 Browser Automation

👨‍💻 Code Execution

🤖 Coding Agents

🔄 Continuous Integration

🔄 DevOps Visibility

📱 Mobile CI/CD

Cloud Infrastructure

☁️ Cloud Providers

🖥️ Command Line

🐳 Container Orchestration

🏗️ Infrastructure as Code

🔒 Security

🔄 Version Control

Frameworks

📋 Project Management

💾 MCP Security Servers

Monitoring & Observability

🔔 Alerting & Notification

🔍 Application Performance Monitoring

📊 Metrics & Monitoring

💻 Other Useful Resources

📃 Papers

Project & Service Management

📋 Project Management