Security & Testing MCP Servers for Codex CLI

Local MCP server for Black Duck vulnerability, BOM, policy, and remediation workflows

AI agent safety layer for crypto transactions - blocks honeypots, blacklists, and rug pulls before they happen

MCP server for CTFd that lets regular users browse challenges, manage dynamic instances, and submit flags.

Elytra Security as a Model Context Protocol server. Gives your AI agent access to Elytra's hosted scanning surface — 180 detectors

Official MCP server for FalconFeeds.io threat intelligence data

GitHub Advanced Security MCP server

Simple TypeScript implementation of Ghidra MCP

Official Anchore Grype MCP Server for AI-assisted vulnerability scanning

MCP server for KVM Fleet — let an AI assistant read your fleet, audit log, and compliance state and (opt-in) act on it. Includes curated

Audit Python and npm dependency licenses before you ship, judged against how you distribute.

Official LiteSOC MCP (Model Context Protocol) Server — gives AI editors direct access to your security alerts, events, and forensic

Encrypted secrets for Next.js. AES-256-GCM with no vault needed.

MCP wrapping C2PA + watermarking as an EU Code of Practice on AI content marking (draft 2, June 2026

Palo Alto Networks AI Security MCP Relay

PostgreSQL security for AI agents: CVEs, yanked releases, exploits, and upgrade paths

Signed, hash-chained provenance receipts for AI agent actions.

Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.

Scan a blob of code/text/diff for LEAKED SECRETS before you commit or share — API keys (AWS, GitHub, OpenAI, Stripe, Google, Slack…)

Contract testing and quality gates for spreadsheets created by AI agents.

AI-powered smart contract security MCP server for Solana — x402 pay-per-audit, 12 tools, 40 vulnerability patterns

MCP server for Supabase security: audit (with active anon-key probe that proves leaks live), dry-run fixes, and apply remediations with