I
io.github.vmoranv/jshookmcp
No CVEs95A
Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
2 toolsremote2.1k1.1k/wk3d ago
Best MCP Servers for Security
Vulnerability scanning, secrets management, and compliance - MCP servers for security teams.
MCPpedia tracks 1,939 security MCP servers. 458 of them score at least 50 out of 100, and 249 clear 70 - about 13% of what has been published in this space. The remaining 1,481 are thinner: registry entries with no description, no published tool schema, or no commit in the last year. They are all still listed here, because knowing a server exists and is unmaintained is worth as much as knowing a good one exists.
io.github.vmoranv/jshookmcp leads the list at 95/100. io.github.KryptosAI/mcp-observatory (92) and io.github.CakeRepository/1password (92) follow. Every score is the same five weighted inputs: security (CVE scanning, tool-poisoning detection, and whether the server authenticates at all), maintenance (commit recency, release cadence, and download trend), documentation, client compatibility, and token efficiency - how much of your context window the tool definitions consume before you have asked anything.
13 of these servers are published by the vendor behind the underlying API rather than by a third party, which is usually the difference between an integration that tracks upstream changes and one that quietly stops working. 3 currently carry an open CVE; those are flagged on the server's own page with the advisory and its severity.
Also see: Best Security servers, Developers, Data Engineering, Productivity
Last updated
1
95score
2
I
io.github.KryptosAI/mcp-observatory
No CVEs92A
MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
4 toolsremote120564/wk1d ago
92score
3
I
io.github.CakeRepository/1password
No CVEs92A
MCP server for 1Password service accounts — tools and resources for vaults and credentials
8 toolsremote221.8k/wk8d ago
92score
4
I
io.github.arthurpanhku/dvalincode
No CVEs92A
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
1 toolsremote120310/wk2d ago
92score
5
Malvex
No CVEs91A
AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server
10 toolsremote62362.7k/wk28d ago
91score
6
I
io.github.AVGVSTVS96/enclave
No CVEs91A
Your agent asks for a password by one-time link, not in chat, and uses it without seeing it.
2 toolsremote677/wk3d ago
91score
7
I
io.github.Anthony-Marcovecchio/prodlint
No CVEs90A
Scan AI-generated JS/TS for security and reliability issues; score a site for AI-agent readiness.
3 toolsremote15858/wk19h ago
90score
8
I
io.github.wiresage/mikrotik-mcp
No CVEs90A
MCP server for MikroTik routers: firewall, NAT, routing, DHCP, DNS, WireGuard and more via SSH.
6 toolsremote3343d ago
90score
9
S
Shodan MCP Server
No CVEs90A
MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
7 toolsremote1901.4k/wk4d ago
90score
10
V
Virustotal MCP Server
No CVEs90A
MCP server for querying VirusTotal API with comprehensive security analysis tools.
20 toolsremote155998/wk7d ago
90score
11
Atomic Red Team Mcp
No CVEs90A
MCP server for Atomic Red Team
5 toolsremote1367d ago
90score
12
I
io.github.imokokok/priorseal
No CVEs89A
Bounded authorization and independently verifiable execution evidence for agents.
1 toolsremote184/wk3h ago
89score
13
I
io.github.pipeworx-io/password
No CVEs89A
Password strength analysis MCP.
2 toolsremote295/wk4d ago
89score
14
Y
Yotta Verify MCP Plugin
No CVEs89A
YuanXinMCP (元信MCP) — pre-install security scanning for Agent skills, packaged as a YottaMeta Agent Plugin.
5 toolsstdio283/wk7d ago
89score
15
A
ai.dinglebear/labby
No CVEs89A
Rust MCP gateway with Code Mode, authentication, setup, logs, CLI, HTTP API, and operator web UI.
7 toolsremote125/wk1d ago
89score
16
I
io.github.chrischall/accessoticketing-mcp
No CVEs89A
Read accesso mobile ticket links: orders, admissions, barcodes and Google Wallet passes.
3 toolsremote413/wk5d ago
89score
17
I
io.github.arkheiaai/mcp-server
No CVEs89A
Detect fabrication and hallucination in any LLM output. 30+ models supported.
6 toolsremote2143/wk9d ago
89score
18
Jadx Ai Mcp
No CVEs89A
Plugin for JADX to integrate MCP server
7 toolsremote3.0k25d ago
89score
19
Mcp Windbg
No CVEs89A
A Model Context Protocol server for Windows crash dump analysis using WinDbg/CDB
7 toolsremote1.7k15d ago
89score
20
I
io.github.coderifts/api-governance
No CVEs89A
Signed, offline-verifiable contract-change authorization. Only a granted change can proceed.
6 toolsremote1.3k/wk6d ago
89score