---
title: MCP servers for security and IT
description: "16 remote MCP servers for security and IT: Semgrep, Socket, Vanta, Drata, Clerk, WorkOS and GitHub, ready for Claude, Cursor and Codex."
canonical: https://mcp1.com/servers/category/security
---

# MCP servers for security and IT

> Code scanning, supply chain, compliance and identity. Semgrep, Socket and Sonatype Guide check code and dependencies, Vanta, Drata and Sprinto track compliance controls, Clerk, WorkOS and Stytch manage users and sign-in, and JupiterOne maps assets. Security teams use them to triage findings and gather evidence for an audit.

16 servers. The whole catalog: https://mcp1.com/servers

- [Semgrep](https://mcp1.com/servers/semgrep): Scan code for security vulnerabilities with Semgrep rules. One-click authentication.
- [Vanta](https://mcp1.com/servers/vanta): Failing tests, vendors and compliance across your frameworks. One-click authentication.
- [Socket](https://mcp1.com/servers/socket): Security scores and supply chain risk for open source packages. Public.
- [Stytch](https://mcp1.com/servers/stytch): Manage Stytch projects, redirect URLs and email templates. One-click authentication.
- [Drata](https://mcp1.com/servers/drata): Controls, evidence, policies, risks, vendors and personnel in Drata. One-click authentication.
- [Sprinto](https://mcp1.com/servers/sprinto): Controls, checks, evidence, risks, vendors and policies in Sprinto. One-click authentication.
- [JupiterOne](https://mcp1.com/servers/jupiterone): J1QL queries, alerts, rules, dashboards and integrations in JupiterOne. One-click authentication.
- [Have I Been Pwned](https://mcp1.com/servers/have-i-been-pwned): Breaches, exposed email addresses and domains, stealer logs and Pwned Passwords. One-click authentication.
- [Sonatype Guide](https://mcp1.com/servers/sonatype): Vulnerabilities, safe versions and licenses for open source packages. Token.
- [Malwarebytes](https://mcp1.com/servers/malwarebytes): Scam checks for links, phone numbers and email addresses, plus WHOIS lookups. Public.
- [GitHub](https://mcp1.com/servers/github): Repositories, issues, pull requests, code search and Actions. Token.
- [Cloudflare](https://mcp1.com/servers/cloudflare): The whole Cloudflare API: Workers, DNS, R2, zones and more. One-click authentication.
- [Datadog](https://mcp1.com/servers/datadog): Logs, metrics, traces, monitors and incidents in Datadog. One-click authentication.
- [Clerk](https://mcp1.com/servers/clerk): Clerk SDK snippets plus your apps, users and organizations. One-click authentication.
- [WorkOS](https://mcp1.com/servers/workos): Manage your WorkOS workspace: users, orgs, SSO and directories. One-click authentication.
- [ngrok](https://mcp1.com/servers/ngrok): Manage ngrok endpoints, domains, traffic policies and credentials. Token.