MCP Servers for Security

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

A tool for secrets management, encryption as a service, and privileged access management

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Find, verify, and analyze leaked credentials

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

A vulnerability scanner for container images and filesystems

Help secure Express apps with various HTTP headers

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Application Security Verification Standard

Completely free, private, UI based Tech Documentation MCP server. Designed for coders and software developers in mind. Easily integrate into Cursor, Windsurf, Cline, Roo Code, Claude Desktop App

An MCP server that provides LLMs with the latest stable package versions when coding

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

MCP Server for Snyk Security Scanning

An MCP (Model Context Protocol) server that provides tools for querying OCI registries and image references.

Privacy-focused macOS MCP server for secure, user-approved window screenshots

An SSE-based MCP server that allows LLM-powered applications to query the OSV database for vulnerability information