Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1524 published MCP servers match this ranking. The highest trust scores right now are Flood at 67, Gbif at 67, Genderize at 67. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.
Best of
Full ranking
Every server that matches this ranking, ordered by trust score.
URL risk evidence with scoped OAuth/API keys, capped prepaid costs and up to ten URLs per batch.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Search commercial real estate listings. Reads need no token; authoring is self-serve OAuth (DCR).
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Administer a FoxAuth OAuth 2.1 / OpenID Connect server: projects, apps, users, keys and settings.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Hand-verified free AI credits, API trials and free tiers. Read-only, no auth, updated daily.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
AI bias detection and fairness assessment for AI agents. Instant bias risk scan, demographic ana...
Registry
Deprecated
ALicense–QualityFMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: F. The listing is marked deprecated.
Firmware Attestation MCP — hardware trust layer for sovereign AI. Scan firmware, check
Registry
Deprecated
ALicense–QualityFMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: F. The listing is marked deprecated.
Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
Registry
Deprecated
ALicenseDQualityFMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: D. 48/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: F. The listing is marked deprecated.
Headless Metabase MCP: API-key auth, no OAuth. 178 tools, toolsets, stdio or HTTP, all tiers.
Registry
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 10 days ago.
Real, live npm/PyPI docs and OSV.dev vulnerability data for AI coding agents. No fake data.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
MCP server for VK Ads API: campaigns, audiences, budgets, stats. Click.ru, token or OAuth.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security for AI agents: MCP audits, secret redaction, skill vetting, network scans, agent checkout.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
AI-powered security scanning using Black Duck Signal for vulnerability detection.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security scanner for third-party AI agent-skill files (SKILL.md, hooks, scripts) via MCP.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security scanner and runtime proxy for MCP servers.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Convert Office files and PDFs, OCR a scan, or capture a web page — from your assistant.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Score agent manifests, generate CI workflows, and pull Clarx scan findings into your IDE.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration)
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Grade an MCP server's auth against the spec and diagnose which layer a failure is in.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Generic Baserow API client MCP server with automatic 2FA (TOTP) auth and OpenAPI validation.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Open Korean e-Gov and finance sites in a clean, disposable Windows Sandbox with security programs.
Registry
–LicenseCQuality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: C. 60/100 for listing completeness. Lost points: no listed tools, short summary, no docs link.Maintenance: Not graded. No commit or release date has been recorded.
Safety checks an agent runs before it acts: package malware, destructive command, secret leak.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Encrypted credential vault for AI agents — auto OAuth refresh, rate limiting, audit logging.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Supply-chain guard for AI coding agents: verify packages, check vulns/malware, detect typosquats.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
