260 security MCP servers, most popular first. The most popular is semgrep. Every listing shows its security level and install command.
| Name | Popularity | Security |
|---|---|---|
| semgrep Scan code for security vulnerabilities using Semgrep. | 17.1k ★ | Low risk |
| IDA Pro IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports. | 13k ★ | Low risk |
| Ghidra Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, cla | 11.4k ★ | Low risk |
| jadx-ai-mcp JADX decompiler plugin providing live, LLM-assisted reverse engineering. | 2.9k ★ | Low risk |
| beelzebub Honeypot framework for building decoy MCP tools that an agent would never use in normal work, to detect prompt | 2.2k ★ | Low risk |
| vet Locally check npm and PyPI packages, such as those suggested by AI coding tools, for vulnerabilities and malic | 1.1k ★ | Low risk |
| skylos Dead code detection, security scanning and code quality analysis for Python, TypeScript and Go, with AI-assist | 848 ★ | Low risk |
| GhidrAssistMCP Native Ghidra integration with GUI configuration, logging and no external dependencies. | 776 ★ | Low risk |
| apktool-mcp-server Automate reverse engineering of Android APKs with Apktool. | 674 ★ | Low risk |
| emilia-protocol Requires a named human's approval before irreversible agent actions such as payments or deploys, then issues a | 611 ★ | Low risk |
| binary_ninja_mcp Binary Ninja plugin and bridge for automating binary analysis and reverse engineering. | 455 ★ | Low risk |
| radare2-mcp Disassemble and inspect binaries for reverse engineering with the Radare2 disassembler. | 328 ★ | Low risk |
| DashClaw Fail-closed approval layer for unattended agent runs: checks actions against org policy, requests human approv | 313 ★ | Review before installing |
| Wireshark-MCP Wireshark packet analysis: capture, protocol statistics, field extraction and security analysis. | 308 ★ | Low risk |
| OpenWorkProof Verifiable execution protocol for agent tool calls: signed policy decisions, causal evidence chains and offlin | 287 ★ | Review before installing |
| mcp-maigret Search usernames across social networks and analyze URLs with maigret, an OSINT tool that collects account inf | 269 ★ | Low risk |
| mcp-server-wazuh Access real-time security alerts and event data from Wazuh SIEM. | 239 ★ | Low risk |
| PyMemoryEditor Read, write and scan the memory of running processes, Cheat Engine style: value scans that narrow down as the | 225 ★ | Low risk |
| secops-mcp Security testing toolbox that combines open source tools behind a single interface for pentesting, bug bounty | 218 ★ | Low risk |
| mcp-shodan Query the Shodan API and Shodan CVEDB: IP lookups, device searches, DNS lookups, vulnerability queries and CPE | 178 ★ | Low risk |
| rsigma Author, lint, validate and convert Sigma detection rules with RSigma, evaluate and explain detections against | 168 ★ | Low risk |
| mcp-virustotal Query the VirusTotal API: scan URLs, analyze file hashes and retrieve IP address reports. | 151 ★ | Low risk |
| GhidraMCP Ghidra plugin for binary analysis: function inspection, decompilation, memory exploration and import/export an | 148 ★ | Low risk |
| shellward Agent security middleware with layered defenses: prompt injection detection, DLP data flow tracking, command b | 139 ★ | Low risk |
| cve-search_mcp Query the CVE-Search API: browse vendors and products, get CVEs by ID and list the latest updated CVEs. | 107 ★ | Low risk |
| OPNSenseMCP Manage and interact with the OPNsense open source firewall in natural language. | 90 ★ | Low risk |
| DocSentinel Automate cybersecurity assessment of documents, questionnaires and reports to surface risks, compliance gaps a | 88 ★ | Review before installing |
| cybersec-toolkit Install a large security toolset and discover and run it through an authorization-gated server for CTF, pentes | 76 ★ | Low risk |
| cloud-audit AWS security scanner with attack chain detection, breach cost estimation and remediation snippets for CLI and | 72 ★ | Low risk |
| bugsy Mobb Vibe Shield identifies and remediates vulnerabilities in human and AI-written code. | 68 ★ | Low risk |
| mcp-zap-server Self-hosted OWASP ZAP integration with guided security scans, findings summaries and report generation. | 67 ★ | Low risk |
| MCP-Dandan Real-time security framework for MCP servers that detects and blocks malicious agent behavior by analyzing too | 67 ★ | Low risk |
| kastell Server security auditing and hardening (SSH, firewall, Docker, TLS) with CIS/PCI-DSS/HIPAA mapping, fleet mana | 60 ★ | Review before installing |
| studio-mcp Embeds Snyk's security engines into agentic workflows to secure AI-generated code in real time and work throug | 58 ★ | Low risk |
| mcp-security-audit Audit npm package dependencies for security vulnerabilities with real-time checks against the npm registry. | 57 ★ | Low risk |
| roadrecon_mcp_server Analyze ROADrecon gather results from Azure tenant enumeration. | 53 ★ | Low risk |
| MCP_Security Query the ORKL API to fetch threat reports, analyze threat actors and retrieve intelligence sources. | 52 ★ | Low risk |
| volatility-mcp Memory forensics with Volatility 3, exposing plugins such as pslist and netscan through REST APIs. | 52 ★ | Low risk |
| mcp-dnstwist Run dnstwist, a DNS fuzzing tool, to detect typosquatting, phishing and corporate espionage. | 51 ★ | Review before installing |
| database-sentinel Read-only security audit for Supabase. Four tools surface RLS gaps, permissive policies, exposed functions and | 50 ★ | Low risk |
| codeinspectus Local security scanner for AI-generated JS/TS that combines Opengrep, Gitleaks and Trivy with checks for expos | 48 ★ | Low risk |
| authenticator_mcp Securely interact with the Authenticator App. | 47 ★ | Low risk |
| mcp-panther Use Panther's SIEM platform in natural language to write detections, query logs and manage alerts. | 47 ★ | Review before installing |
| cyberchef-api-mcp-server Use CyberChef operations through the CyberChef server API. | 44 ★ | Low risk |
| osv-mcp Query the OSV (Open Source Vulnerabilities) database by package version or commit, batch-query multiple packag | 42 ★ | Low risk |
| entraid-mcp-server Microsoft Entra ID (Azure AD) directory, user, group, device, sign-in and security operations via Microsoft Gr | 41 ★ | Low risk |
| nobulex Proof-of-behavior enforcement for AI agents: define permit/forbid/require rules, enforce them at runtime and k | 40 ★ | Low risk |
| contrastapi Security intelligence: CVE/EPSS/KEV lookups, domain recon (DNS, WHOIS, SSL, subdomains), IOC threat intel, OSI | 33 ★ | Low risk |
| agent-bom AI supply chain security scanner: discovers MCP clients, scans dependencies for CVEs, maps blast radius to cre | 32 ★ | Low risk |
| mcp-recon Conversational recon with httpx and asnmap: domain analysis, security header inspection, certificate analysis | 31 ★ | Low risk |
| Cybersecurity-MCP-Server Local security reconnaissance: WHOIS, DNS and subdomain enumeration, Nmap scanning, TLS inspection, tech finge | 28 ★ | Low risk |
| csl-core Deterministic AI safety policy engine with Z3 formal verification: write, verify and enforce machine-verifiabl | 27 ★ | Low risk |
| ctrlrun Execution safety for agent actions: a YAML-policy gateway that allows, holds or denies tool calls, plus an app | 27 ★ | Low risk |
| CyberChef-MCP GCHQ CyberChef's encryption, encoding, compression and forensics operations, plus analysis tools such as hash | 26 ★ | Low risk |
| intruder-mcp Access Intruder to identify, understand and fix security vulnerabilities in your infrastructure. | 26 ★ | Low risk |
| operant-mcp Security testing tools for penetration testing, network forensics, memory analysis and vulnerability assessmen | 25 ★ | Low risk |
| AIM-MCP Security-focused safety guidelines and content analysis for AI agents. | 23 ★ | Low risk |
| mobsf-mcp-server Static and dynamic analysis of Android and iOS apps with MobSF. | 23 ★ | Low risk |
| attestable-mcp-server Demonstrates remote attestation of an MCP server running in a Gramine TEE via RA-TLS, so clients can verify th | 22 ★ | Review before installing |
| warden-mcp Manage Bitwarden and Vaultwarden vaults via the bw CLI: search, create, edit and organize logins, notes, cards | 22 ★ | Review before installing |
| mastyf.ai Runtime security proxy for MCP that blocks prompt injection, SSRF, shell/SQL injection and credential exfiltra | 21 ★ | Low risk |
| agentward MCP proxy that enforces least-privilege YAML policies on tool calls, classifies PII/PHI, detects dangerous ski | 19 ★ | Low risk |
| aegis Policy-based governance for agent tool calls across LangChain, OpenAI, Anthropic and MCP: YAML policies, appro | 18 ★ | Low risk |
| fida Local-first MCP gateway for coding agents that redacts detected secrets from file reads and command output bef | 18 ★ | Low risk |
| mcp-hangar Self-hosted policy enforcement for MCP server fleets: deterministic admission and egress policies, attributabl | 18 ★ | Low risk |
| mcp-server-cortex Cortex integration for observable analysis and automated security responses. | 17 ★ | Low risk |
| mcp_vms Retrieve live and recorded video from a CCTV recording program (VMS) and control it, such as opening live or p | 17 ★ | Low risk |
| mcp-server-thehive TheHive integration for collaborative security incident response and case management. | 16 ★ | Low risk |
| DROS-VajraClaw-Hacker Deterministic execution governance gateway and W3C DID security guardrail for AI agent MCP tool calls. | 16 ★ | Low risk |
| runtime-guard Runtime policy enforcement for AI agents that prevents accidental system damage and unauthorized access, with | 15 ★ | Low risk |
| avp-sdk Trust, W3C DID identity and EigenTrust reputation for AI agents, with attestations, disputes, sybil detection | 15 ★ | Low risk |
| s-gw Local credential gateway for coding agents: agents get handles instead of raw secrets, and one-time approvals | 15 ★ | Low risk |
| platform Governance proxy that wraps MCP servers with policy evaluation, human approval workflows and hash-chain audit | 15 ★ | Low risk |
| sint-protocol MCP governance proxy with capability tokens, tiered approvals, fail-closed execution and tamper-evident audit | 15 ★ | Low risk |
| depguard Pre-install npm package checks: static analysis, supply-chain attack detection, vulnerability audits, AI hallu | 15 ★ | Low risk |
| aegis Credential isolation proxy that injects secrets at the network boundary, with domain restrictions, agent authe | 14 ★ | Low risk |
| vuln-nist-mcp-server Query the NIST National Vulnerability Database (NVD) API. | 14 ★ | Low risk |
| pqc-tools Post-quantum readiness: scan code for quantum-vulnerable cryptography (RSA, ECDH, ECDSA, DH), get ML-KEM/ML-DS | 14 ★ | Review before installing |
| assay Fail-closed policy-as-code proxy for MCP that denies risky tool calls, produces offline-verifiable evidence bu | 13 ★ | Low risk |
| Project-Koma Classify input for prompt injection and out-of-scope content with Koma Gate's LLM-based classifier. | 13 ★ | Low risk |
| cervellaswarm Verify agent communication protocols with session types and Lean 4 proofs to catch deadlocks and role violatio | 12 ★ | Low risk |
| aletheia-mcp Deterministic pre-execution filter for agent tool calls that blocks scope creep (credential reads, SSRF, destr | 12 ★ | Low risk |
| authmcp-gateway Auth proxy for MCP servers: OAuth2 with DCR, JWT, RBAC, rate limiting, multi-server aggregation and a monitori | 12 ★ | Low risk |
| shield Local guardrail proxy for MCP servers: blocks destructive tool calls, pins tool catalogs against rug pulls and | 11 ★ | Low risk |
| opnsense-mcp OPNsense firewall operations via API: query ARP, DHCP, firewall rules, logs, interfaces, system status and pac | 11 ★ | Low risk |
| secretctl Secrets manager that injects credentials into commands as environment variables so agents never see plaintext | 11 ★ | Low risk |
| scopeblind-gateway Security gateway that wraps MCP servers with per-tool policies, approval gates and optional signed receipts, i | 11 ★ | Low risk |
| zitadel-mcp Zitadel identity management: manage users, projects, OIDC apps, roles and service accounts in natural language | 10 ★ | Review before installing |
| perspectivegraph Attack-path engine for cloud and Kubernetes: list routes from internet exposure to sensitive assets, explain e | 9 ★ | Low risk |
| ciphertrust-manager-mcp-server Thales CipherTrust Manager integration for key management, cryptographic operations and compliance monitoring. | 9 ★ | Review before installing |
| redacta Privacy boundary for healthcare AI agents: pseudonymises patient identifiers (NHS numbers, names, dates of bir | 8 ★ | Low risk |
| opa-mcp-server OPA and Rego policy toolkit wrapping the OPA CLI and Regal: format, lint, evaluate, test and benchmark policie | 8 ★ | Review before installing |
| mcp-audit Transparent proxy that intercepts, signs, rate-limits, redacts and audits MCP tool calls without modifying cli | 8 ★ | Low risk |
| proof-of-commitment Supply chain risk scoring for npm, PyPI, Cargo and Go packages from behavioral signals: publisher depth, relea | 8 ★ | Review before installing |
| sparda Injects a live, reversible MCP server into a running Express, FastAPI or Next.js app, with safe reads by defau | 8 ★ | Low risk |
| job-verify Check recruiters and job offers for scams: cross-checks company registration, domain age, look-alike domains, | 8 ★ | Low risk |
| hexforge-gateway APK reverse engineering workspace that orchestrates jadx, apktool, adb and Frida through a workflow engine, on | 8 ★ | Low risk |
| mcp-bastion Security proxy for MCP servers: tool-definition pinning, tool-poisoning and exfiltration detection, injection | 7 ★ | Low risk |
| echelongraph-mcp Keyless, read-only CVE and internet-exposure intelligence: CVE lookup and search, CISA KEV, EPSS history, CWE, | 7 ★ | Review before installing |
| minreestr-mcp Search the Russian software registry for import-substitution and FSTEC/FSB-certified products, with full-text | 7 ★ | Low risk |