Best Security MCP servers.

Sourced, scored comparisons of crypto exchanges, wallets, savings accounts and brokerages.

Live behavioral security verifier, schema auditor, and trust oracle for A2A, MCP & x402 agents.

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.

Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.

Verified German HR data with legal source: minimum wage, social security, holidays, notice periods

Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

HTTP, DNS, SSL, WHOIS, ping, security-header, SEO and AI-readiness checks for any website.

Your apps as AI tools: one sign-in, one vault, 125 services and 1,851 endpoints, with receipts.

IP geolocation, security, ASN, abuse, time zones, astronomy, and user-agent parsing over stdio.

Verifiable, portable AI memory. Optional vault: encrypted on your machine, 12 words only you hold.

Pre-flight verdict on MCP servers: known-bad identity, CVEs, dependency tree, tool drift. Signed.

Investigate security events and manage the allow/deny lists an analyst acts on.

Purchaser-gated MCP for Vault, HMRC TRS, 95/5 equity, and Companies House PSC.

SOC 2 Type II compliance for trust services criteria (security, availability, processing

378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402.

Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.

Production security for Node.js apps: investigate live attacks, block IPs, tune detections.