Best Security MCP servers

Scanned servers (60)

Safety-scanned and ordered by adoption. If you run one of these, a review puts it in the section above.

• 1
  Skylos

  Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
  not reviewed
  Established
  C
• 2
  PyMemoryEditor

  Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.
  not reviewed
  Established
  A
• 3
  Snyk

  Easily find and fix security issues in your applications leveraging Snyk platform capabilities.
  not reviewed
  Established
  B
• 4
  CrowdStrike Falcon MCP Server

  Connects AI agents with CrowdStrike Falcon for security analysis and automation.
  not reviewed
  Established
  A
• 5
  Wireshark

  Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
  not reviewed
  Established
  A
• 6
  Virustotal

  MCP server for querying VirusTotal API with comprehensive security analysis tools.
  not reviewed
  Established
  B
• 7
  Virustotal

  MCP server for querying VirusTotal API with comprehensive security analysis tools.
  not reviewed
  Established
  B
• 8
  Reversecore MCP

  Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
  not reviewed
  Established
  B
• 9
  Rede

  MCP server for Rede — Itaú-owned BR acquirer: authorize/capture/refund, zero-auth, card tokens
  not reviewed
  Established
  B
• 10
  CodeInspectus

  Local-first MCP security scanner and CLI for AI-generated applications.
  not reviewed
  Established
  C
• 11
  Autopilot Jobhunt

  Agentic job hunt: scan careers pages, score against your resume, draft applications. Never applies.
  not reviewed
  Growing
  A
• 12
  Niubiz

  MCP server for Niubiz — Peru card acquirer: security token, session, authorize, reverse
  not reviewed
  Growing
  B
• 13
  MCPProxy

  Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings
  not reviewed
  Growing
  B
• 14
  SonarQube MCP Server

  Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.
  not reviewed
  Growing
  B
• 15
  Cinema4d

  MCP server for Cinema 4D — entity CRUD, parameter-level access, batched undo, security controls.
  not reviewed
  Growing
  A
• 16
  Solana Security Standard

  Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.
  not reviewed
  Growing
  A
• 17
  OpenQR

  Generate, edit and track dynamic (editable) QR codes with scan analytics. Hosted MCP and REST API.
  not reviewed
  Growing
  B
• 18
  Mastyf AI

  Runtime proxy for MCP security, cost governance & audit
  not reviewed
  Growing
  B
• 19
  Guardvibe

  Deterministic security layer your AI can't be. 644 rules, 39 tools, CLI + doctor + host audit.
  not reviewed
  Growing
  C
• 20
  Dep Scope

  Symbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts.
  not reviewed
  Growing
  A
• 21
  Prodcheck

  4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.
  not reviewed
  Growing
  A
• 22
  DNS Doctor

  Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.
  not reviewed
  Growing
  A
• 23
  Notebooklm Secure

  Security-hardened NotebookLM MCP with post-quantum encryption
  not reviewed
  Growing
  A
• 24
  chunk-invariance

  Checks whether your streaming redactor leaks a secret split across chunks; writes a pytest for it.
  not reviewed
  Growing
  A
• 25
  NetsCLI

  Network scanner for AI agents: discover hosts, scan TCP and UDP ports, query DNS and mDNS.
  not reviewed
  Growing
  A
• 26
  Raziel

  MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
  not reviewed
  Growing
  A
• 27
  Dechonet

  30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
  not reviewed
  Growing
  A
• 28
  npm Registry MCP Server

  npm registry MCP server — package intelligence, security audits, dependency analysis
  not reviewed
  Growing
  B
• 29
  quantakrypto pqc-tools

  Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.
  not reviewed
  Growing
  B
• 30
  MyMedi-AI

  DME billing and medical coding: code lookup, DMEPOS fee schedules, Medicare prior-auth checks
  not reviewed
  Growing
  A
• 31
  prodlint

  Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.
  not reviewed
  Growing
  A
• 32
  Healthclaw Guardrails

  Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation
  not reviewed
  Growing
  A
• 33
  Pentest

  Offline methodology engine for authorized penetration testing, CTF, and security research.
  not reviewed
  Growing
  B
• 34
  SafeWeave

  Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.
  not reviewed
  Growing
  C
• 35
  spintax.net MCP server

  Write, validate, render and analyze spintax templates. Backed by @spintax/core. No auth.
  not reviewed
  Growing
  A
• 36
  Ts Template

  TypeScript template for building MCP servers with declarative tooling, observability, and auth.
  not reviewed
  Growing
  A
• 37
  Npm Sentinel

  Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
  not reviewed
  Growing
  A
• 38
  Unclaimed Sol

  The first Vibe Claiming MCP: AI agents scan and reclaim dormant SOL on Solana. Signs locally.
  not reviewed
  Growing
  B
• 39
  Code Factory

  Read-only audit evidence for security, tests, native coverage, runtime failures and repair status.
  not reviewed
  Growing
  B
• 40
  pkgxray

  Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
  not reviewed
  Growing
  B
• 41
  EchelonGraph CVE & Exposure

  CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
  not reviewed
  Growing
  A
• 42
  QualityMax QA MCP

  Final release; the checks moved to 9lives (9l mcp). Local QA MCP: scan, inspect, repro, run tests.
  not reviewed
  Growing
  A
• 43
  MCP ZAP Server

  Safe, self-hosted ZAP operator for guided AI security scans and reports.
  not reviewed
  Growing
  B
• 44
  Patch Tuesday

  Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment
  not reviewed
  Growing
  B
• 45V
  VMware NSX Security

  VMware NSX security: DFW policies, security groups, tags, Traceflow, IDPS — 21 MCP tools.
  not reviewed
  Growing
  A
• 46
  Canary

  Mindstone-internal release-pipeline test connector; not for use. Single ping tool; no auth.
  not reviewed
  Growing
  A
• 47
  Backgen

  Generate Express.js backend projects with ORMs, auth, payments, and DevOps
  not reviewed
  Growing
  A
• 48
  SPARDA

  AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.
  not reviewed
  Growing
  A
• 49
  Zn Gate

  The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
  not reviewed
  Growing
  B
• 50
  n8n MCP Community

  A security-focused MCP server for self-hosted n8n Community Edition.
  not reviewed
  Growing
  B
• 51
  Bawbel Scanner

  Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
  not reviewed
  Growing
  B
• 52
  Servicenow AI

  ServiceNow MCP server — 100 tools over the full REST surface, every auth method, flows, diagrams.
  not reviewed
  Growing
  B
• 53
  Servicenow AI

  ServiceNow MCP server — 67 tools over the full REST surface, every auth method, flows, diagrams.
  not reviewed
  Growing
  B
• 54
  Royal

  Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org.
  not reviewed
  Growing
  A
• 55
  Trent

  Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
  not reviewed
  Growing
  A
• 56
  AgentPlaybooks

  Vendor-neutral home for portable agents: skills, MCP tools, memory, canvas, and secret proxy.
  not reviewed
  Growing
  A
• 57
  Security Proxy

  MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

  More from GuardBee →
  not reviewed
  Growing
  A
• 58V
  VMware NSX Security

  VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.
  not reviewed
  Growing
  A
• 59
  crosscheck

  Checks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.
  not reviewed
  Growing
  A
• 60
  Secret Scanner

  Scans files for leaked secrets and API keys

  More from 4hmetuyar →
  not reviewed
  Growing
  A