I
io.github.vmoranv/jshookmcp
No CVEs93A
MCP server for JavaScript analysis, security auditing, browser automation and hooks
2 toolsremote2.0k921/wk1d ago
Best MCP Servers for Security
Vulnerability scanning, secrets management, and compliance - MCP servers for security teams.
MCPpedia tracks 1,431 security MCP servers. 347 of them score at least 50 out of 100, and 180 clear 70 - about 13% of what has been published in this space. The remaining 1,084 are thinner: registry entries with no description, no published tool schema, or no commit in the last year. They are all still listed here, because knowing a server exists and is unmaintained is worth as much as knowing a good one exists.
io.github.vmoranv/jshookmcp leads the list at 93/100. Ida Pro MCP (92) and io.github.KryptosAI/mcp-observatory (92) follow. Every score is the same five weighted inputs: security (CVE scanning, tool-poisoning detection, and whether the server authenticates at all), maintenance (commit recency, release cadence, and download trend), documentation, client compatibility, and token efficiency - how much of your context window the tool definitions consume before you have asked anything.
13 of these servers are published by the vendor behind the underlying API rather than by a third party, which is usually the difference between an integration that tracks upstream changes and one that quietly stops working. 3 currently carry an open CVE; those are flagged on the server's own page with the advisory and its severity.
Also see: Best Security servers, Developers, Data Engineering, Productivity
Last updated
1
93score
2
Ida Pro Mcp
No CVEs92A
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
3 toolsremote12.4k2d ago
92score
3
I
io.github.KryptosAI/mcp-observatory
No CVEs92A
MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
4 toolsremote140624/wk6d ago
92score
4
I
io.github.arthurpanhku/dvalincode
No CVEs92A
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
1 toolsremote118370/wk7d ago
92score
5
Mcp Windbg
No CVEs91A
A Model Context Protocol server for Windows crash dump analysis using WinDbg/CDB
7 toolsremote1.6k8d ago
91score
6
Jadx Ai Mcp
No CVEs91A
Plugin for JADX to integrate MCP server
7 toolsremote2.8k6d ago
91score
7
I
io.github.sekera-radim/briefgate
No CVEs91A
Client intake for AI agents: get files, copy and logins from clients, chased automatically.
7 toolsremote137/wk7d ago
91score
8
Agent Brain
No CVEs90A
Local-first RAG memory for AI agents: hybrid + GraphRAG search, MCP server with OAuth 2.1, plugin for Claude Code / OpenCode / Codex.
16 toolsremote1199d ago
90score
9
Atomic Red Team Mcp
No CVEs90A
MCP server for Atomic Red Team
5 toolsremote1324d ago
90score
10
Mcpki Server
No CVEs90A
mcpki-server is the backend infrastructure for https://www.mcpki.org, enabling secure public key management and autonomous certificate handling for large language models (LLMs).
10 toolsremote1554.1k/wk1mo ago
90score
11
M
Manage AdGuard Home through AI assistants
No CVEs89A
Manage AdGuard Home through AI assistants
9 toolsremote10619/wk14d ago
89score
12
I
Inkog MCP Server
No CVEs89A
Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
14 toolsremote3109/wk13d ago
89score
13
I
io.github.coderifts/api-governance
No CVEs89A
Signed, offline-verifiable contract-change authorization. Only a granted change can proceed.
6 toolsremote446/wk2d ago
89score
14
Y
Yotta Verify MCP Plugin
No CVEs89A
YuanXinMCP (元信MCP) — pre-install security scanning for Agent skills, packaged as a YottaMeta Agent Plugin.
5 toolsstdio229/wk3d ago
89score
15
A
ai.dinglebear/labby
No CVEs89A
Rust MCP gateway with Code Mode, authentication, setup, logs, CLI, HTTP API, and operator web UI.
7 toolsremote526/wk2d ago
89score
16
I
io.github.chrischall/accessoticketing-mcp
No CVEs89A
Read accesso mobile ticket links: orders, admissions, barcodes and Google Wallet passes.
3 toolsremote547/wk3d ago
89score
17
I
io.github.adamsjack711-ux/pkgxray
No CVEs88A
Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
8 toolsremote113d ago
88score
18
V
Vnsh MCP Server
No CVEs88A
Portable workspaces for AI agents: one encrypted link any agent can read and write
4 toolsremote15631/wk22d ago
88score
19
I
io.github.CakeRepository/1password
No CVEs88A
MCP server for 1Password service accounts — tools and resources for vaults and credentials
8 toolsremote20336/wk28d ago
88score
20
I
io.github.enessubass/mobiloop-mcp
No CVEs88A
Guarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.
19 toolsremote1554.0k/wk5d ago
88score