Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1523 published MCP servers match this ranking. The highest trust scores right now are Stackexchange at 68, Kalshi at 68, Usgs Volcano at 68. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.
Best of
Full ranking
Every server that matches this ranking, ordered by trust score.
61 video, image, voice and music models at provider list price. Sign in with OAuth or use a key.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Client editing for sites you built: register, scan, publish, go live, invite the client.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
FAOSTAT data for 245 countries: crops, trade, food security, and emissions via 23 MCP tools.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Scan what an AI agent running as you can reach; optionally verify which keys are live (x402).
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Act for a person on websites: sandboxed browser, phone approvals, saved logins, scheduled plans.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Offline full-text search over the HackTricks security wiki, synced every 3 days.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Lets an AI agent hand a secret to a person as a one-time link, with no way to read it back.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Ask your security cameras anything and set up alert rules in a sentence. Built into Agent DVR.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Detect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video.
RegistryRemote
ALicenseDQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 48/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 11 days ago.
Renamed to AskYourStack: use com.askyourstack/askyourstack. Same service, now at askyourstack.com.
RegistryRemote
Deprecated
–LicenseAQualityFMaintenanceLicense: Not graded. No license is recorded for this server.Quality: A. 94/100 for listing completeness. Lost points: 2 of 40 tools barely described, short summary.Maintenance: F. The listing is marked deprecated.
MCP server for Kaseya SaaS Alerts — SaaS security monitoring for M365 & Google Workspace.
Registry
–LicenseCQualityAMaintenanceLicense: Not graded. No license is recorded for this server.Quality: C. 65/100 for listing completeness. Lost points: no listed tools, short summary.Maintenance: A. Last commit or release 19 days ago.
Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.
Registry
ALicense–QualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 10 days ago.
Citepath public MCP server for LLM readiness audits and public scan results.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
26 tools: web pages to Markdown, metadata, tech stack, SSL, SEO, domains, email auth and SSO checks.
RegistryRemote
–LicenseAQuality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: A. 95/100 for listing completeness. Lost points: short summary.Maintenance: Not graded. No commit or release date has been recorded.
Agent document workspace with wallet auth. Create, update and share markdown docs. By AutEng.ai
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Hosted MCP server for GA4, Google Ads and Search Console. Google OAuth, nothing to install.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
