🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️

A Model Context Protocol server that connects AI assistants like Claude to AWS security services, allowing them to autonomously query, inspect, and analyze AWS infrastructure for security issues and misconfigurations.

A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.

Security testing toolkit for AI Agent: curated SecLists wordlists, injection payloads, and expert agents for authorized pentesting, CTFs, and bug bounties

MCP servers for Google SecOps, GTI, SOAR, and SCC.

Browse the web, directly from Cursor etc.

🤖 Curated AI OSINT resources — Google dorks, Shodan queries, GitHub dorks, and techniques to discover exposed LLM endpoints, leaked AI API keys, misconfigured vector databases, and unprotected AI agents

Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 19 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

Wassette: A security-oriented runtime that runs WebAssembly Components via MCP

Remote MCP Server that securely connects Enterprise context with your LLM, IDE, or agent platform of choice.

BloodHound-MCP-AI is integration that connects BloodHound with AI through Model Context Protocol, allowing security professionals to analyze Active Directory attack paths using natural language instead of complex Cypher queries.

The Okta MCP Server is a groundbreaking tool built by the team at Fctr that enables AI models to interact directly with your Okta environment using the Model Context Protocol (MCP). Built specifically for IAM engineers, security teams, and Okta administrators, it implements the MCP specification to help work with Okta enitities

Reticle intercepts, visualizes, and profiles JSON-RPC traffic between your LLM and MCP servers in real-time, with zero latency overhead. Stop debugging blind. Start seeing everything.

A set of MCP security checklists and guides for agents and MCP servers.

📦️ A fast, secure MCP server that extends its capabilities through WebAssembly plugins.

Sovereign Digital Twins that execute operational processes inside secure, audited environments.

OpenZIM MCP is a modern, secure, and high-performance MCP (Model Context Protocol) server that enables AI models to access and search ZIM format knowledge bases offline.

js hook toolkit that all you need

Write detections, investigate alerts, and query logs from your favorite AI agents

MCP server that connects AI assistants to HackerOne for bug bounty hunting

MCP Server for Wazuh SIEM

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.