Discover
Find tools for your stack. Pick an audience — we handle the noise.
Discover picks for MCP Security & Auth
See all tools in MCP Security & Auth →On Hacker News
Ranked by discussion
tailscale
HealthyThe easiest, most secure way to use WireGuard and 2FA.
CyberChef
HealthyThe Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
caddy
HealthyFast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
netbird
HealthyConnect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.
pocketbase
HealthyOpen Source realtime backend in 1 file
opensnitch
MixedOpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
pangolin
HealthyIdentity-aware VPN and proxy for remote access to anything, anywhere.
Maigret
Healthy♂ Collect a dossier on a person by username from 3000+ sites
certificates
MixedA private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
keycloak
HealthyOpen Source Identity and Access Management For Modern Applications and Services
mitmproxy
MixedAn interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
headscale
HealthyAn open source, self-hosted implementation of the Tailscale control server
Trending now
See all →-
1
UPinar/contrastapi
Security intelligence API with 31 MCP tools for CVE/EPSS/KEV lookup, domain recon (DNS/WHOIS/SSL/subdomains/CT logs), IOC/threat intel, OSINT (email/phone/username), and code security scanning (secrets, injection). Free 100 req/hr.
Healthy -
1
goklab/guardvibe
Security MCP for vibe coding with 330 rules and 29 tools. Purpose-built for AI-generated code — scans Next.js, Supabase, Clerk, Stripe, Prisma, Hono, GraphQL, and 25+ modules. Cross-file taint analysis, host security audit, auto-fix, SARIF export, pre-commit hook, and CVE version detection. Zero config, runs locally.
Healthy -
0
icoretech/warden-mcp
MCP server for Bitwarden and Vaultwarden vault management. Search, create, edit, and organize logins, notes, cards, identities, SSH keys, folders, collections, attachments, and Sends via the official `bw` CLI.
Healthy -
StacklokLabs/osv-mcp
Access the OSV (Open Source Vulnerabilities) database for vulnerability information. Query vulnerabilities by package version or commit, batch query multiple packages, and get detailed vulnerability information by ID.
At Risk -
intruder-io/intruder-mcp
MCP server to access Intruder, helping you identify, understand, and fix security vulnerabilities in your infrastructure.
At Risk -
aashari/mcp-server-aws-sso
AWS Single Sign-On (SSO) integration enabling AI systems to securely interact with AWS resources by initiating SSO login, listing accounts/roles, and executing AWS CLI commands using temporary credentials.
At Risk -
bx33661/Wireshark-MCP
Wireshark network packet analysis MCP Server with capture, protocol stats, field extraction, and security analysis capabilities.
Healthy -
DigiCatalyst-Systems/dep-diff-mcp
Translates a lockfile diff (npm, PyPI) into a human-readable upgrade plan. Point it at a Dependabot PR and get back semver classification, breaking changes from GitHub release notes, CVEs fixed in range, migration links, and a per-package recommendation. Bulk tool ranks up to 50 changes by risk (security > caution > review > likely-safe > safe)
Healthy -
panther-labs/mcp-panther
MCP server that enables security professionals to interact with Panther's SIEM platform using natural language for writing detections, querying logs, and managing alerts.
Mixed -
MCP Ethical Hacking by cmpxchg16
At Risk -
AIM-Intelligence/AIM-Guard-MCP
Security-focused MCP server that provides safety guidelines and content analysis for AI agents.
At Risk -
girste/mcp-cybersec-watchdog
Comprehensive Linux server security audit with 89 CIS Benchmark controls, NIST 800-53, and PCI-DSS compliance checks. Real-time monitoring with anomaly detection across 23 analyzers: firewall, SSH, fail2ban, Docker, CVE, rootkit, SSL/TLS, filesystem, network, and more.
At Risk