MCP Sunucuları

Aqua Security's Trivy plugin that runs as a Model Context Protocol server, exposing Trivy's scanning capabilities to AI assistants. Scans container images, filesystems, and repositories for vulnerabilities, misconfigurations, exposed secrets, and license issues, returning structured findings agents can triage and act on.

Google's official collection of Model Context Protocol servers that expose Google's security products to MCP clients. Provides access to Google SecOps (Chronicle) for SIEM search and case management, Google Threat Intelligence for indicator and malware lookups, and Security Command Center for cloud posture and findings. Lets security agents investigate alerts, enrich indicators of compromise, and triage vulnerabilities directly from natural language.

IBM's MCP Context Forge is a gateway, registry, and proxy for MCP, A2A, REST, and gRPC services with centralized discovery and guardrails.

Auth0's official MCP server that connects AI agents to the Auth0 Management API. Lets developers create and configure applications, deploy Actions, manage APIs and connections, and query tenant logs using natural language. Runs locally with interactive tenant authentication and stores access tokens in the system keychain so the model never sees them directly, supporting secure Auth0 administration.

Infisical's official MCP server for its open-source secret management platform. Lets AI agents list projects and environments and create, read, update, and delete secrets and folders through controlled tools, so assistants can help manage application configuration without exposing raw credentials in code. Authenticates using a machine identity.

MCP server for HashiCorp Vault secrets management. Enables AI agents to read and write secrets, list secret paths, and manage key/value engines under controlled policies, so applications and workflows can retrieve credentials securely from AI-powered tools.

Official Semgrep MCP server for static application security testing. Lets AI agents scan code for security vulnerabilities and bugs, run custom rules, and return findings with severity and remediation guidance, embedding SAST into AI-powered development workflows.

Official Snyk MCP server that brings developer security scanning into AI agent workflows. Lets agents scan code, open-source dependencies, containers, and infrastructure-as-code for vulnerabilities, retrieve fix advice, and check license issues directly from the editor or CI, using the Snyk CLI under the hood.