Browse 256 Security & Financial — MCP Server Configurations

Code property graph for C, Python and TypeScript: callers/callees, data and taint flow with source-to-sink witnesses, points-to and guard/sink structure.

Automate reverse engineering of Android APKs with Apktool.

guard MCP server](https://glama.ai/mcp/servers/runtimeguard/runtime-guard/badges/score.svg)](https://glama.ai/mcp/servers/runtimeguard/runtime-guard) 🐍 🏠 🍎 🪟 - Runtime policy enforcement for AI agents that prevents accidental system damage and unauthorized access, with automatic backups before file writes.

bom MCP server](https://glama.ai/mcp/servers/@msaad00/agent-bom/badges/score.svg)](https://glama.ai/mcp/servers/@msaad00/agent-bom) 🐍 🏠 ☁️ 🍎 🪟 🐧 - AI supply chain security scanner: discovers MCP clients, scans dependencies for CVEs, maps blast radius to credentials and tools, and generates SBOMs.

Policy-based governance for agent tool calls across LangChain, OpenAI, Anthropic and MCP: YAML policies, approval gates, risk assessment and audit logging.

sentinel MCP server](https://glama.ai/mcp/servers/Farenhytee/database-sentinel/badges/score.svg)](https://glama.ai/mcp/servers/Farenhytee/database-sentinel) 🐍 ☁️ - Read-only security audit for Supabase. Four tools surface RLS gaps, permissive policies, exposed functions and grants; an `audit` prompt returns scored findings with fix SQL.

Ghidra plugin for binary analysis: function inspection, decompilation, memory exploration and import/export analysis.

Static and dynamic analysis of Android and iOS apps with MobSF.

mcp MCP server](https://glama.ai/mcp/servers/nh4ttruong/secobserve-mcp/badges/score.svg)](https://glama.ai/mcp/servers/nh4ttruong/secobserve-mcp) 🐍 🏠 ☁️ 🍎 🪟 🐧 - SecObserve vulnerability and license management: triage observations, manage products and rules, import scan reports and SBOMs, run scans and generate VEX.

MCP MCP server](https://glama.ai/mcp/servers/rev2ret/SecureAudit-MCP/badges/score.svg)](https://glama.ai/mcp/servers/rev2ret/SecureAudit-MCP) 📇 🏠 🍎 🪟 🐧 - Static C/C++ memory-safety scanning and PE/ELF binary protection audits (ASLR, DEP/NX, SafeSEH, PIE), with remediation via secure templates.

Agent security middleware with layered defenses: prompt injection detection, DLP data flow tracking, command blocking and PII detection.

Verify IBAN, VAT, VIN, barcodes, national and tax IDs, crypto addresses, phone numbers, dates and holidays against checksums and curated data.

Fail-closed approval layer for unattended agent runs: checks actions against org policy, requests human approval and logs every decision to a causal ledger.

Secrets manager that injects credentials into commands as environment variables so agents never see plaintext secrets, and sanitizes command output.

Identity and credential broker for MCP servers: issues scoped, short-lived credentials per agent, with audit logging and human approval gates.

mcp MCP server](https://glama.ai/mcp/servers/sachio222/54ch10-mcp/badges/score.svg)](https://glama.ai/mcp/servers/sachio222/54ch10-mcp) 📇 ☁️ - JSON risk briefs for wallet addresses, tokens and URLs: scores, flags and sources from phishing, scam and URL-reputation heuristics, including OpenPhish.

Microsoft Entra ID (Azure AD) directory, user, group, device, sign-in and security operations via Microsoft Graph.

Domain and URL security analysis with GridinSoft Inspector to verify website and link safety.

action MCP server](https://glama.ai/mcp/servers/gostanos/smallprint-action/badges/score.svg)](https://glama.ai/mcp/servers/gostanos/smallprint-action) 📇 ☁️ - Query the Small Print record: versioned, diffed tool descriptions and schemas of MCP servers, skills and plugins, with graded changes and public advisories.

ai/verax MCP server](https://glama.ai/mcp/servers/verax-ai/verax/badges/score.svg)](https://glama.ai/mcp/servers/verax-ai/verax) 📇 🏠 🪟 🐧 - Sits between an agent and its tools: every call passes a policy gate and leaves a signed decision record before it runs, a refusal is recorded like an approval, payments wait for an operator on the same machine, and the ledger stays there and verifies offline. Apache-2.0.

Read-only checks before an agent acts: prompt-injection and phishing scan of untrusted text (local), npm package check for malware, hijacked releases and typosquats, crypto address and token scan, and address-poisoning comparison. Zero dependencies.

Use CyberChef operations through the CyberChef server API.

fyi/vaulted-mcp-server MCP server](https://glama.ai/mcp/servers/vaulted-fyi/vaulted-mcp-server/badges/score.svg)](https://glama.ai/mcp/servers/vaulted-fyi/vaulted-mcp-server) 📇 🏠 🍎 🪟 🐧 - Share end-to-end encrypted, self-destructing secrets from an agent, reading them from env vars or files so they stay out of LLM context.

ai/mastyf.ai MCP server](https://glama.ai/mcp/servers/mastyf-ai/mastyf.ai/badges/score.svg)](https://glama.ai/mcp/servers/mastyf-ai/mastyf.ai) 📇 🏠 🍎 🪟 🐧 - Runtime security proxy for MCP that blocks prompt injection, SSRF, shell/SQL injection and credential exfiltration, plus trust scores for npm MCP packages.