mcptest.io

Remote MCP Inspector

Security MCP servers

12 remote MCP servers in Security: Semgrep, Cloudflare Audit Logs, WorkOS and 9 more. They most often cover authentication, identity and cloudflare. 2 need no credentials; 9 use OAuth 2.1 and 1 takes a bearer token. The catalog validator observed public inventories for 2 of 12: 106 tools, most often to get, delete or create.

Authentication
No authentication 2OAuth 2.1 9Bearer token 1
Transport
Streamable HTTP 12
Browser ready
0 of 12
Tool inventories
2 of 12 · 106 tools observed

Showing 12 of 12 Security servers

Guides for Security servers

  • MCP server evaluation and trust checklist

    Evaluate a server's publisher, code and hosting, permissions, authentication, write behavior, evidence, logging, and revocation before connecting it.

  • Is MCP safe?

    What a connected MCP server can see and do, how tool poisoning and prompt injection work, what OAuth consent and tool approvals protect, and how to vet a server before you connect it.

  • MCP OAuth 2.1 reference

    Reference for MCP authorization covering RFC 9728 and RFC 8414 discovery, PKCE S256, CIMD versus dynamic registration, RFC 8707 audience, step-up, refresh, iss validation, confused deputy, and what a browser client can do.