Security & Auth MCP Servers

Microsoft Entra ID is an identity and access management service that provides secure authentication and authorization for users accessing Microsoft services and applications. It is primarily used for managing user identities and safeguarding access to resources.

Run Trivy or Grype on your machine via MCPBundles Desktop. Used by Vulnerability Intelligence scan_triage to scan container images and project filesystems locally before cloud enrichment.

OPUSWatch provides API-based solutions for managing operational risk and ensuring regulatory compliance, mainly for Dutch organizations. Use it to track, analyze, and report on compliance metrics efficiently.

The NIST National Vulnerability Database (NVD) is the U.S. government repository of standards-based vulnerability management data. Search CVEs, check CVSS scores, find known exploited vulnerabilities, and track vulnerability changes.

Container CVE triage and cross-source vulnerability intelligence: local Trivy scans via Desktop, NIST NVD + CISA KEV + EPSS enrichment, and explainable exploit_priority / patch_today / defer bucketing.

Intruder is a cybersecurity platform that offers automated vulnerability scanning to help businesses identify and address security weaknesses in their systems. Use it to enhance your organization's security posture and protect against potential threats.

The CISA Known Exploited Vulnerabilities (KEV) Catalog is the authoritative U.S. government list of vulnerabilities that are actively being exploited in the wild. Federal agencies are required to remediate KEV entries by their due dates. Search the catalog, look up specific CVEs, find recently added entries, filter by ransomware campaign use, and get summary stats.

Persona provides identity verification and authentication services, enabling businesses to verify customer identities and ensure compliance with regulatory standards. It is primarily used for secure and efficient identity management and fraud prevention.

The Exploit Prediction Scoring System (EPSS) by FIRST.org estimates the probability that a CVE will be exploited in the wild within 30 days. Look up exploit scores for specific CVEs, discover the most exploitable vulnerabilities, track score trends over time, and filter by score or percentile ranges for risk prioritization.

OFAC-API.com provides KYC, AML, and sanctions compliance screening against 25+ global data sources including OFAC SDN, EU, UN, UK, PEP, INTERPOL, and more.

Certman allows users to create and manage their own Certificate Authority, providing tools for internal security and certificate management. It is aimed at IT professionals and organizations seeking to enhance their security infrastructure.

This server provides identity management, authorization, and audit trail capabilities, ensuring secure access and permission management for applications. It is ideal for developers and organizations focused on enhancing security and compliance in their systems.

This server acts as a gateway for managing persistent identities and shared content within a collaborative environment. It is designed for users who need to maintain a consistent identity across various applications and share content seamlessly.

Python supply-chain security platform. Track installed packages and versions, monitor vulnerabilities via the OSV database, and validate against organization-wide allow lists.

Clerk provides tools for managing user authentication and access control, streamlining the integration of user management into applications. This server is ideal for developers looking to enhance security and user experience in their software.

Sonatype's component intelligence server provides tools for managing software components, including version tracking and security analysis. Developers can utilize this server to ensure they are using the most secure and up-to-date components in their applications. It is particularly useful for software teams focused on maintaining high standards of security and compliance.

SecurityScan provides automated security assessments for web applications, helping developers identify vulnerabilities and ensure compliance with security standards. This tool is essential for cybersecurity professionals and developers looking to enhance the security posture of their applications.

Cloudflare One CASB (Cloud Access Security Broker) identifies security misconfigurations across SaaS applications, safeguarding organizations against data leaks and compliance violations. It scans connected services for risky settings, exposed data, and policy violations.

ScamVerify provides threat verification services to identify and mitigate potential scams and fraudulent activities. It is particularly useful for businesses and individuals seeking to protect themselves from online threats and ensure safe transactions.

xProof provides tools for certifying and verifying digital files, ensuring their authenticity and integrity. Users can discover services related to proof verification and audit agent sessions, making it a valuable resource for businesses that require secure document handling and proof management.

Kevros provides a suite of tools for verifying and attesting identities, allowing users to manage trust relationships and validate outcomes. This service is particularly useful for organizations that require secure identity management and verification processes, such as financial institutions and online platforms. Users can check peer statuses and manage health checks to ensure compliance and security.

The Guardian Engine server offers tools and services for managing security and compliance, likely aimed at developers and organizations focused on protecting their applications and data. It provides essential functionalities for monitoring and safeguarding digital assets.

Fingerprint's official MCP server for device intelligence and fraud detection. Query identification events, detect anomalies, investigate fraud patterns, and manage workspace configuration through natural language.

This server verifies EUDI/Talao wallet data using OIDC4VP, ensuring secure and accurate wallet management. It is aimed at developers and organizations needing to authenticate and validate wallet information.