Skip to content
Best of

Best security MCP servers

Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1524 published MCP servers match this ranking. The highest trust scores right now are Nationalize at 67, Jokes at 67, Ukpolice at 67. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.

Best of

Full ranking

Every server that matches this ranking, ordered by trust score.

1,524 servers
Trust score 52 of 100, Fair

Official HitPay MCP: sales, payouts, balances; create payment links and invoices. OAuth; no refunds.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

Review supplied buying evidence or OAuth-linked accounts, opportunities and workspace settings.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

YABA family budget

Unknown author

Family budget for couples: spending, budget, pace, bills and Monobank-synced entries. OAuth.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
SofortFax – Faxen mit KI (Login) logo
Trust score 52 of 100, Fair

Fax from ChatGPT/Claude with OAuth sign-in: pay per fax or KI credits. DE/AT + 40 countries.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

FET112

Unknown author

Security intelligence for AI agents monitoring Ethereum before actions.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

Threatist

Unknown author

Vulnerability records: CVE, GHSA, CISA KEV, EPSS and vendor fixes in one place. No key needed.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

Generate visual analytical reports from verified outlines. Account and OAuth required.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Mini Accountant logo
Trust score 52 of 100, Fair

Invoicing, expenses, accounting analytics. OAuth 2.1 dynamic client registration, no API key.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

Connect any AI agent to 1,000+ apps and 27,000+ actions through one remote MCP server (OAuth).

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

Agent security: prompt injection, PII & secret scans, TLS/header/CORS audits, MCP checks. Free.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Huntertech.io Vendor Insights logo
Trust score 52 of 100, Fair

Vendor incidents, public pricing, and plan-gated account tools. OAuth at /mcp/auth.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

Tender discovery and buyer intelligence. Read-only OAuth; client pre-registration required.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Action1 MCP by usefulapi logo
Trust score 52 of 100, Fair

Read endpoints, missing updates, CVE vulnerabilities, installed software and reports in Action1.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

High-speed regex and entropy-based scanner redacting API keys, JWT tokens, and credentials

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

Couryo

Unknown author

Transactional email API: send, read delivery timelines, explain bounces, manage domains (OAuth).

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

Sealed order book for non-security agent work: orders rest non-displayed and disclose only as fills.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

Verified identity plus consented personal context, starting with medical records, images & insurance

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
InjectScan logo
Trust score 52 of 100, Fair

InjectScan

Unknown author

Scan text for prompt injection: risk score, verdict, matched spans. Built by Crypto Money Maker

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

tech-risk

Unknown author

Scan any MCP server for tool-poisoning/prompt-injection/exfiltration (OWASP LLM01/08) + Base data

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
LetKite logo
Trust score 52 of 100, Fair

Run commands and manage files on your own machines. Needs a LetKite account; OAuth sign-in.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Mystic Timing BaZi logo
Trust score 52 of 100, Fair

Mystic Timing BaZi

Unknown author

What your birth date and time say about you: personality, love, timing. Readings in 20 languages.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

SealGate

Unknown author

既存のログインにパスキーを追加する API (日本製)。プロジェクト・API キー・パスキー・監査ログを tool で扱う。管理画面のアカウントでログインしてつなぐ (OAuth)

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: F. 38/100 for listing completeness. Lost points: short README, no listed tools, no repository link.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 52 of 100, Fair

Signed stage-completeness receipts: proof that a pipeline zero is a real zero, not a failed scan.

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Auth logo
Trust score 52 of 100, Fair

Auth

Unknown author

Usuários, sessões, logins sociais e webhooks da sua aplicação

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools