Security & Compliance MCP servers connect AI assistants to vulnerability databases, network scanners, and compliance auditing engines. These integrations allow models to query threat feeds, inspect dependencies, run network diagnostics, and manage penetration testing findings using standard Model Context Protocol clients.
Security & Compliance MCP servers let AI assistants inspect infrastructure, query vulnerability feeds, analyze binary files, and audit software dependencies directly through standardized model context protocol interfaces. Instead of manually copying terminal output or security reports into chat prompts, operators connect their local or remote tools to let the model run scans, pull asset records, and evaluate risks systematically.
For threat analysis and defensive audits, several servers cover distinct domains: Shodan MCP Server queries internet-connected devices and CVE databases; Zeek-MCP bridges conversational clients with deep network traffic logs; NmapMCP runs active network scans directly from supported environments; and NPM Sentinel MCP analyzes JavaScript dependencies for package vulnerabilities and supply-chain risks.
| MCP server | What it connects to | Type | Repository |
|---|---|---|---|
| Zeropath | The Zeropath MCP server acts as a specialized bridge between AI assistants and a vulnerability management platform. In simple terms, | Unknown | https://github.com/zoedsoupe/zeropath-mcp |
| Zeek-MCP | Zeek-MCP acts as a friendly bridge between deep network traffic analysis and conversational AI. It allows anyone to "talk" to | Open Source | https://github.com/Gabbo01/Zeek-MCP |
| Shodan MCP Server | Shodan MCP Server is an MCP server that connects AI assistants to the Shodan search engine and CVE vulnerability databases. | Unknown | https://github.com/Cyreslab-AI/shodan-mcp-server |
| Shodan | Shodan is an MCP server that integrates Shodan's internet intelligence engine directly into Model Context Protocol environments. It connects AI | Unknown | https://github.com/X3r0K/shodan-mcp-server |
| Rug-Check-MCP | Rug-Check-MCP is an MCP server that detects potential risks and security vulnerabilities in Solana meme tokens by connecting to the | Open Source | https://github.com/kukapay/rug-check-mcp |
| Rhombus MCP Server | Rhombus MCP Server is an MCP server that integrates the Rhombus physical security and surveillance API with LLM clients like | Unknown | https://github.com/RhombusSystems/rhombus-node-mcp |
| Reports MCP Server | Reports MCP Server is an MCP server that manages penetration testing reports and tracked vulnerabilities via a dedicated REST API. | Unknown | https://github.com/izzy0101010101/mcp-reports-server |
| YaraFlux | YaraFlux is a specialized tool that helps AI assistants identify and understand digital threats by giving them a high-powered magnifying | Open Source | https://github.com/ThreatFlux/YaraFlux |
| x64dbgMCP | x64dbgMCP acts as a powerful bridge that connects artificial intelligence with the intricate world of software debugging. In simple terms, | Open Source | https://github.com/Wasdubya/x64dbgMCP |
| ZeroPath MCP Server | The ZeroPath MCP Server bridges the gap between security scanning and the development environment by allowing developers to interact with | Open Source | https://github.com/ZeroPathAI/zeropath-mcp-server |
Shodan MCP Server and Zeek-MCP are well suited for Claude Desktop users. Shodan MCP Server enables direct lookups against internet-connected hardware and known CVEs via external APIs, while Zeek-MCP allows analysts to query and inspect network traffic data directly from conversation threads.
To connect a server like ZeroPath MCP Server or NPM Sentinel MCP to Cursor, add the server definition to your Cursor configuration file. Specify the command, executable path, and required environment variables or API keys. Once saved, the assistant can query project vulnerabilities and audit package dependencies during development.
NmapMCP and Shodan MCP Server handle reconnaissance tasks. NmapMCP connects local Nmap scanning utilities directly to your AI client to audit network targets, whereas Shodan MCP Server searches global internet asset databases and indexed vulnerabilities without sending direct packets to the target network.
Yes, x64dbgMCP connects AI assistants to the x64dbg debugger for software debugging and binary inspection, while YaraFlux provides file-matching capabilities using YARA rules to identify malicious patterns and threat signatures.