Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1522 published MCP servers match this ranking. The highest trust scores right now are shodan at 76, virustotal at 76, CrowdStrike Falcon MCP Server at 73. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.
Best of
Full ranking
Every server that matches this ranking, ordered by trust score.
MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.
Registry
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 19 days ago.
MCP server for querying VirusTotal API with comprehensive security analysis tools.
Registry
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 15 days ago.
Connects AI agents with CrowdStrike Falcon for security analysis and automation.
Registry
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 30 days ago.
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 6 days ago.
Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.
Registry
ALicense–QualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 22 days ago.
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
Registry
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 26 days ago.
AI agent tools for Open Security Controls Assessment Language (OSCAL)
Registry
ALicense–QualityFMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: F. The repository is archived.
Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.
Registry
ALicense–QualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
Electron.js MCP server — IPC scaffolding, security auditing, build tooling for AI assistants
Registry
ALicenseAQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: A. 95/100 for listing completeness. Lost points: short summary.Maintenance: A. Last commit or release 23 days ago.
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 23 days ago.
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 8 days ago.
IMF PortWatch MCP — global maritime trade & chokepoint signals (free, no auth)
RegistryRemote
ALicenseAQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: A. 95/100 for listing completeness. Lost points: short summary.Maintenance: A. Last commit or release 8 days ago.
DefiLlama MCP — DeFi analytics from DefiLlama (free, no auth)
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
OWID MCP — Our World in Data chart/indicator access (free, no auth)
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
ServiceNow MCP server — 100 tools over the full REST surface, every auth method, flows, diagrams.
RegistryRemote
CLicense–QualityAMaintenanceLicense: C. GPL-3.0 is a strong copyleft license: derived works must use the same license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 8 days ago.
Art MCP — Metropolitan Museum of Art Collection API (free, no auth)
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 15 days ago.
Words MCP — wraps Datamuse API (free, no auth required)
RegistryRemote
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 41 days ago.
BIS MCP — Bank for International Settlements statistics (no auth)
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
Execute SAS code and query Compute, CAS, and model APIs on SAS Viya via OAuth 2.0.
Registry
ALicense–QualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 15 days ago.
Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.
Registry
ALicense–QualityBMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 4 days ago. Down one letter for 20 open issues against 9 stars.
Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
Registry
ALicense–QualityBMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 3 days ago. Down one letter for 41 open issues against 7 stars.
Public DNS, certificate transparency, and identity observations.
Registry
ALicense–QualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 25 days ago.
Gutendex MCP — wraps Gutendex API for Project Gutenberg books (free, no auth)
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 11 days ago.
Iconify MCP — wraps the Iconify public API (free, no auth)
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 11 days ago.
