Best Security AI Skills & MCP Servers
122 curated Security skills and MCP servers — install any of them into Claude, Cursor, ChatGPT, n8n, or any AI stack with one command.
Steampipe
Steampipe MCP server to query cloud infrastructure, SaaS, code and more with SQL using AI.
Mcp
MCP server + live dashboard for AI code governance — OWASP LLM Top 10 (10/10), real-time MCP App UI, 25+ security patterns, Bayesian learning Brain, hallucinated import detection, multi-agent governance. Works with Claude, Cursor, VS Code, ChatGPT, Goose,
Excalidraw Sentinel
Hardened, self-hosted Excalidraw MCP server with SQLite persistence, multi-tenancy, auto-sync, security middleware, and 369 tests
Koi
MCP Server for KOI Security Platform API
Ssh
MCP server enabling AI assistants to securely execute SSH commands, transfer files via SFTP, manage port forwarding, and use parameterized command templates with comprehensive security controls
Powerpipe
Powerpipe MCP server to run benchmarks, detections and controls using AI.
Osint
OSINT intelligence MCP server — Shodan, VirusTotal, SecurityTrails, Censys, DNS, WHOIS, crt.sh, Wayback, BGP
Prodlint
Production readiness for vibe-coded apps — know your AI code is ready to ship
Code Auditor
Multi-language code quality auditor with MCP server - Analyze TypeScript, JavaScript, and Go code for SOLID principles, DRY violations, security patterns, and more
Apimesh
MCP server for APIMesh — 76 x402-payable tools for AI agents (74 APIs + wallet usage + spend caps). Covers web vitals, security headers, SEO audits, email security and verification, tech-stack detection, brand assets, redirect chains, indexability, brand
Server
Trust-score any AI skill or MCP server from inside Claude Code, Cursor, or any MCP client. Accepts GitHub repos, npm packages, Smithery URLs, and OpenClaw skills. 15 signals (incl. OSV/KEV/EPSS vulnerability intelligence), safety scanning, OpenClaw frontm
Apivalidator
APIValidator Model Context Protocol (MCP) server for local validation, OpenAPI security auditing, and premium global telephone/IBAN verification.
Agentaudit
Security scanner for AI agent packages — CLI + MCP server
Github Security
GitHub security posture audit tools for AI agents — organization, repository, Actions, secrets, supply chain analysis via MCP
Cybersec
MCP server with 323 cybersecurity prompts and 7 scenario workflows. Drops into Claude Desktop, Claude Code, Cursor, and other MCP-compatible clients.
Agent Secret Guard
Dangerous config and secret scanner for AI coding agents, MCP, and local automation projects.
Electromcp
Drive any Electron app from your AI. MCP server with 93 tools, 4 recipe packages (Slack/Discord/Notion/Linear), security primitives, and a CLI mirror. The testing surface area Tauri structurally cannot match.
Scan
Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 16+ AI tools for secrets, prompt injection, supply-chain risks, and 17+ security checks.
Security
MCP server for security scanning — structured Trivy, Semgrep, and Gitleaks findings for AI agents
Vibecipher
VibeSecurity — Auditoria de segurança para quem cria com IA. Secrets, vulnerabilidades e rotas sem auth.
Driftdetect
MCP server that gives AI agents (Claude, Cursor, Copilot) deep understanding of your codebase patterns, conventions, and architecture. Query patterns, security boundaries, call graphs in real-time.
Perfai
PerfAI MCP Server - Security, Design & Quality Analysis with Auth0 Authentication
Shark
Security scanner for AI agent tools. Local static scan of MCP IDE configs (41 rules, toxic flow heuristics, AAuth visibility, auto-fix, tool pinning). Optional proxy + in-browser dashboard: traffic, findings, AAuth Explorer, YARA, Playground. Smart Scan o
Server
MCP security trust layer. Scan packages, inspect repo MCP dependencies, generate Policy Gate setup, check exposure, and query abuse data.
About Security skills on iClaude
iClaude is the universal install layer for AI skills. Every Security skill on this page can be installed into Claude Code, Claude Desktop, Cursor, ChatGPT, n8n, Codex, and more — using a single copy-paste command. No config drift, no per-stack adapters, no manual MCP wiring.