The best Security MCP servers
Wire security into your agent workflows — vulnerability scanning, secret management, and monitoring — as callable MCP tools. Connect once on BusinessMCP so agents can check, alert, and act on security signals from your unified endpoint.
Official connectors first, then verified entries, then by how many tools they expose.
Semgrep
semgrep
Static code analysis for security vulnerabilities. Scan code for bugs, security issues, and anti-patterns.
1Password
1password
Secure secrets management. Access vault items, generate passwords, and manage credentials safely.
URL Security Scanner
cybrlab-ai
MCP-native URL security scanner that protects AI agent workflows. Analyzes URLs for phishing, malware, and suspicious patterns.
Compare all 3 at a glanceShowHide
| Server | Tools | Status |
|---|---|---|
| Semgrep | 6 | Archived |
| 1Password | 7 | — |
| URL Security Scanner | 7 | — |
How we rank theseShowHide
Official connectors we host come first, then verifiedentries — ones where we hold the server’s own repository or the vendor’s own docs and have checked the link resolves — then the rest by how many agent-callable tools they expose. A listing on another directory doesn’t count as verification. We don’t publish install counts for third-party servers, because we have no way to measure them, and anything its maintainers have archived says so on the card. A dash in the Tools column means we haven’t listed that server’s tools yet, not that it has none.
Frequently asked questions
What is a Security MCP server?
It exposes security tooling — scanners, secret stores, or monitoring — as agent-callable functions over MCP, so agents can surface and respond to risks.
How are credentials protected?
Secrets live in your vault, scoped per connection. BusinessMCP routes requests but never stores, logs, or trains on your data.
Which models work with these?
All of them — model-agnostic across Claude, GPT, Gemini, and local agents.
Browse other categories
Connect Semgrep through one endpoint
Reach Semgrep and the rest of this list from Claude, ChatGPT, Gemini or Cursor without configuring each one. Free plan, no credit card.
Get started freeOr read how managed MCP hosting works first.