MCP Servers

Google's official collection of Model Context Protocol servers that expose Google's security products to MCP clients. Provides access to Google SecOps (Chronicle) for SIEM search and case management, Google Threat Intelligence for indicator and malware lookups, and Security Command Center for cloud posture and findings. Lets security agents investigate alerts, enrich indicators of compromise, and triage vulnerabilities directly from natural language.

Official Semgrep MCP server for static application security testing. Lets AI agents scan code for security vulnerabilities and bugs, run custom rules, and return findings with severity and remediation guidance, embedding SAST into AI-powered development workflows.

Official Snyk MCP server that brings developer security scanning into AI agent workflows. Lets agents scan code, open-source dependencies, containers, and infrastructure-as-code for vulnerabilities, retrieve fix advice, and check license issues directly from the editor or CI, using the Snyk CLI under the hood.

MCP server for HashiCorp Vault secrets management. Enables AI agents to read and write secrets, list secret paths, and manage key/value engines under controlled policies, so applications and workflows can retrieve credentials securely from AI-powered tools.

Official SonarQube MCP server that brings code quality and security analysis into AI workflows. Lets agents fetch project issues, security hotspots, quality-gate status, and metrics from SonarQube Server or SonarCloud, so code health can be inspected and triaged conversationally.

Auth0's official MCP server that connects AI agents to the Auth0 Management API. Lets developers create and configure applications, deploy Actions, manage APIs and connections, and query tenant logs using natural language. Runs locally with interactive tenant authentication and stores access tokens in the system keychain so the model never sees them directly, supporting secure Auth0 administration.

Infisical's official MCP server for its open-source secret management platform. Lets AI agents list projects and environments and create, read, update, and delete secrets and folders through controlled tools, so assistants can help manage application configuration without exposing raw credentials in code. Authenticates using a machine identity.

Aqua Security's Trivy plugin that runs as a Model Context Protocol server, exposing Trivy's scanning capabilities to AI assistants. Scans container images, filesystems, and repositories for vulnerabilities, misconfigurations, exposed secrets, and license issues, returning structured findings agents can triage and act on.

GitHub's official MCP Server that connects AI tools directly to GitHub's platform. Enables AI agents to manage repositories, issues, pull requests, branches, files, actions workflows, and code security. Supports both remote (OAuth) and local (Docker/binary) modes with fine-grained toolset configuration.

Official Cloudflare MCP server for managing Cloudflare services. Enables AI agents to interact with Workers, KV namespaces, R2 storage, D1 databases, and DNS records. Supports deploying Workers scripts, managing environment variables, querying analytics, and configuring security settings across Cloudflare's edge network.