MCP Servers

Official Snyk MCP server that brings developer security scanning into AI agent workflows. Lets agents scan code, open-source dependencies, containers, and infrastructure-as-code for vulnerabilities, retrieve fix advice, and check license issues directly from the editor or CI, using the Snyk CLI under the hood.

Official Semgrep MCP server for static application security testing. Lets AI agents scan code for security vulnerabilities and bugs, run custom rules, and return findings with severity and remediation guidance, embedding SAST into AI-powered development workflows.

MCP server for HashiCorp Vault secrets management. Enables AI agents to read and write secrets, list secret paths, and manage key/value engines under controlled policies, so applications and workflows can retrieve credentials securely from AI-powered tools.

Auth0's official MCP server that connects AI agents to the Auth0 Management API. Lets developers create and configure applications, deploy Actions, manage APIs and connections, and query tenant logs using natural language. Runs locally with interactive tenant authentication and stores access tokens in the system keychain so the model never sees them directly, supporting secure Auth0 administration.

Google's official collection of Model Context Protocol servers that expose Google's security products to MCP clients. Provides access to Google SecOps (Chronicle) for SIEM search and case management, Google Threat Intelligence for indicator and malware lookups, and Security Command Center for cloud posture and findings. Lets security agents investigate alerts, enrich indicators of compromise, and triage vulnerabilities directly from natural language.

Infisical's official MCP server for its open-source secret management platform. Lets AI agents list projects and environments and create, read, update, and delete secrets and folders through controlled tools, so assistants can help manage application configuration without exposing raw credentials in code. Authenticates using a machine identity.

An MCP server for Keycloak administration, enabling AI-assisted management of users and realms. Lets agents create, look up, and disable users, assign roles and groups, and inspect realm configuration through the Keycloak Admin API, which is useful for identity operations and onboarding or offboarding workflows.

Aqua Security's Trivy plugin that runs as a Model Context Protocol server, exposing Trivy's scanning capabilities to AI assistants. Scans container images, filesystems, and repositories for vulnerabilities, misconfigurations, exposed secrets, and license issues, returning structured findings agents can triage and act on.