MCP Sunucuları

Google's official collection of Model Context Protocol servers that expose Google's security products to MCP clients. Provides access to Google SecOps (Chronicle) for SIEM search and case management, Google Threat Intelligence for indicator and malware lookups, and Security Command Center for cloud posture and findings. Lets security agents investigate alerts, enrich indicators of compromise, and triage vulnerabilities directly from natural language.

Official Semgrep MCP server for static application security testing. Lets AI agents scan code for security vulnerabilities and bugs, run custom rules, and return findings with severity and remediation guidance, embedding SAST into AI-powered development workflows.

Official Snyk MCP server that brings developer security scanning into AI agent workflows. Lets agents scan code, open-source dependencies, containers, and infrastructure-as-code for vulnerabilities, retrieve fix advice, and check license issues directly from the editor or CI, using the Snyk CLI under the hood.

MCP server for HashiCorp Vault secrets management. Enables AI agents to read and write secrets, list secret paths, and manage key/value engines under controlled policies, so applications and workflows can retrieve credentials securely from AI-powered tools.

Official SonarQube MCP server that brings code quality and security analysis into AI workflows. Lets agents fetch project issues, security hotspots, quality-gate status, and metrics from SonarQube Server or SonarCloud, so code health can be inspected and triaged conversationally.

Auth0's official MCP server that connects AI agents to the Auth0 Management API. Lets developers create and configure applications, deploy Actions, manage APIs and connections, and query tenant logs using natural language. Runs locally with interactive tenant authentication and stores access tokens in the system keychain so the model never sees them directly, supporting secure Auth0 administration.

Infisical's official MCP server for its open-source secret management platform. Lets AI agents list projects and environments and create, read, update, and delete secrets and folders through controlled tools, so assistants can help manage application configuration without exposing raw credentials in code. Authenticates using a machine identity.

Aqua Security's Trivy plugin that runs as a Model Context Protocol server, exposing Trivy's scanning capabilities to AI assistants. Scans container images, filesystems, and repositories for vulnerabilities, misconfigurations, exposed secrets, and license issues, returning structured findings agents can triage and act on.

AI araçlarını doğrudan GitHub platformuna bağlayan resmî GitHub MCP Sunucusu. AI agent'ların repository'leri, issue'ları, pull request'leri, branch'leri, dosyaları, GitHub Actions iş akışlarını ve kod güvenliğini yönetmesini sağlar. OAuth ile uzak modu ve ayrıntılı toolset yapılandırmasıyla Docker veya binary üzerinden yerel modu destekler.

Official Cloudflare MCP server for managing Cloudflare services. Enables AI agents to interact with Workers, KV namespaces, R2 storage, D1 databases, and DNS records. Supports deploying Workers scripts, managing environment variables, querying analytics, and configuring security settings across Cloudflare's edge network.