Skip to content
MCPpedia
Submit
Best of

Best security MCP servers

Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1522 published MCP servers match this ranking. The highest trust scores right now are MCP Server for OSCAL at 71, mcp-bastion at 71, Electron MCP Server at 71. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.

Best of

Full ranking

Every server that matches this ranking, ordered by trust score.

1,522 servers
Trust score 68 of 100, Good

Nobel

by pipeworx-io · TypeScript

Nobel MCP — wraps the Nobel Prize API v2 (free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 10 days ago.
0 stars55/wk weekly downloads— tools
Trust score 68 of 100, Good

Datacite

by pipeworx-io · JavaScript

DataCite MCP — DOIs for research datasets (free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
0 stars55/wk weekly downloads— tools
Trust score 68 of 100, Good

Mastodon

by pipeworx-io · JavaScript

Mastodon MCP — public Mastodon data via mastodon.social (no auth required)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
0 stars36/wk weekly downloads— tools
Trust score 68 of 100, Good

Carbon

by pipeworx-io · TypeScript

Carbon MCP — UK Carbon Intensity API (free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 14 days ago.
0 stars53/wk weekly downloads— tools
Trust score 68 of 100, Good

Swapi

by pipeworx-io · TypeScript

SWAPI MCP — wraps the Star Wars API (free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 41 days ago.
0 stars43/wk weekly downloads— tools
Trust score 68 of 100, Good

Bible

by pipeworx-io · TypeScript

Bible MCP — wraps the Bible API (free, no auth) https://bible-api.com

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 14 days ago.
0 stars61/wk weekly downloads— tools
Trust score 68 of 100, Good

Breweries

by pipeworx-io · TypeScript

Breweries MCP — Open Brewery DB API (free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 14 days ago.
0 stars52/wk weekly downloads— tools
Trust score 68 of 100, Good

Citybikes

by pipeworx-io · TypeScript

Citybikes MCP — wraps CityBik.es API (free, no auth required)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 14 days ago.
0 stars37/wk weekly downloads— tools
Trust score 68 of 100, Good

Fbi Artcrimes

by pipeworx-io · JavaScript

FBI Art Crimes MCP — FBI National Stolen Art File (free, no auth).

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
0 stars38/wk weekly downloads— tools
Trust score 68 of 100, Good

Onthisday

by pipeworx-io · TypeScript

On This Day MCP — wraps byabbe.se/on-this-day (free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
0 stars51/wk weekly downloads— tools
Trust score 68 of 100, Good

Recipes

by pipeworx-io · TypeScript

Recipes MCP — wraps TheMealDB API (free tier, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 41 days ago.
0 stars56/wk weekly downloads— tools
Trust score 67 of 100, Good

mcp-audit

by saagpatel · Python

Scan, enumerate, and risk-score every MCP server configured on your machine.

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 12 days ago.
4 stars—/wk weekly downloads— tools
Trust score 67 of 100, Good

Read-only MCP server for Trino: queries run as the verified user, and Trino's own policies decide.

Registry
LicenseQualityMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 5 days ago.
4 stars—/wk weekly downloads— tools
Trust score 67 of 100, Good

MCP server for running Ox Security MegaLinter via mega-linter-runner

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 10 days ago.
3 stars—/wk weekly downloads— tools
Credential Broker logo
Trust score 67 of 100, Good

Local-first credential broker: agents use gated APIs through scoped, audited requests, never keys.

Registry
LicenseQualityMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 8 days ago.
2 stars—/wk weekly downloads— tools
Trust score 67 of 100, Good

ZeroDOM

by devhusnainai · Python

The deterministic attack-surface perception layer for AI security agents

Registry
LicenseQualityMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 21 days ago.
2 stars—/wk weekly downloads— tools
Trust score 67 of 100, Good

Uk Ons

by pipeworx-io · JavaScript

UK ONS MCP — Office for National Statistics (no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
0 stars31/wk weekly downloads— tools
Trust score 67 of 100, Good

Universities

by pipeworx-io · TypeScript

Universities MCP — Hipolabs Universities API (free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: C. 66/100 for listing completeness. Lost points: no README, short summary.Maintenance: B. Last commit or release 41 days ago.
0 stars26/wk weekly downloads1 tools
Trust score 67 of 100, Good

Urlhaus

by pipeworx-io · TypeScript

URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 41 days ago.
0 stars27/wk weekly downloads— tools
Trust score 67 of 100, Good

Videogames

by pipeworx-io · TypeScript

Videogames MCP — wraps Free-to-Play Games API (freetogame.com, free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 41 days ago.
0 stars25/wk weekly downloads— tools
Trust score 67 of 100, Good

Virustotal

by pipeworx-io · JavaScript

VirusTotal MCP — file / URL / domain / IP reputation (BYO key)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
0 stars31/wk weekly downloads— tools
Trust score 67 of 100, Good

Emojihub

by pipeworx-io · TypeScript

EmojiHub MCP — wraps EmojiHub API (free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 13 days ago.
0 stars18/wk weekly downloads— tools
Trust score 67 of 100, Good

Epa Echo

by pipeworx-io · JavaScript

EPA ECHO MCP — wraps EPA ECHO Web Services (free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
0 stars28/wk weekly downloads— tools
Trust score 67 of 100, Good

Eurostat

by pipeworx-io · JavaScript

Eurostat MCP — wraps Eurostat Statistical Data API (no auth required)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 8 days ago.
0 stars32/wk weekly downloads— tools