Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1524 published MCP servers match this ranking. The highest trust scores right now are Intercom at 67, Uselessfacts at 67, Timezone at 67. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.
Best of
Full ranking
Every server that matches this ranking, ordered by trust score.
Security audits for WordPress plugins and themes — 62 verification layers, fix plans and SBOMs.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
Registry
ALicenseDQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 43/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 22 days ago.
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
Registry
ALicenseBQualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: B. 71/100 for listing completeness. Lost points: 1 of 1 tools barely described, short summary.Maintenance: B. Last commit or release 22 days ago. Down one letter for 33 open issues against 124 stars.
PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check.
RegistryRemote
ALicenseDQuality–MaintenanceLicense: A. MIT License is a permissive open source license.Quality: D. 48/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: Not graded. No commit or release date has been recorded.
Mochii work graph: projects, tasks, meetings. Stiki OAuth. Not Nexus memory.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Front desk for the AIS MCP campus: lists our buildings (CVE, Flight Recorder), prices, how to pay
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Draw your app's architecture on a live canvas and flag the bottlenecks and security gaps.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Agent-native travel platform: read-only flight, hotel, and brand tools over MCP. OAuth sign-in.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Deterministic runtime safety for AI agents: scan PII, gate tool actions, verify LLM output.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Premium agentic endpoint for delegatecall-vulnerability-mcp.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Create, edit, preview, and build Flutter apps via FlutterGo.AI cloud MCP (OAuth).
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Family schedules and household tools with OAuth. External calendars remain read-only.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Persistent memory for AI assistants — one shared, OAuth-secured vault for every MCP client.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Website analyses and Knowledge Packs for the authenticated account via OAuth 2.1 + DCR.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Two independent AI models read a GPR, locate or pipe scan and flag the do-not-core call.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
SOAR security playbooks for AI agents: fetch, full-text search, and count. Metered via Stripe.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Sanctions, PEP, watchlist, recall, business, and contract screening. Free tier, no auth required.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Operate secure JoinLayer data pipelines through delegated OAuth.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Write lyrics in 100+ styles, score them, generate full songs with 4 engines, split stems. OAuth.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Remote MCP connector for App Store + Google Play data via StoreBridge API. No auth required.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.