Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1524 published MCP servers match this ranking. The highest trust scores right now are Colorapi at 67, Advice at 67, Airports at 67. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.
Best of
Full ranking
Every server that matches this ranking, ordered by trust score.
Staff live events: gigs, crew, setlists, call lists, ingest. Hosted MCP with OAuth.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Swiss merchant ARVI SA: 27,000+ fine & rare wine labels, 300,000+ bottles ready to ship. No auth.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Free German workforce calculators (bridge days, net working time, staffing/PeBeM) - no auth needed.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
B2B company and contact data for lead lists, enrichment, research, and outreach. OAuth sign-in.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Check a live app you own for public databases, leaked keys and exposed files.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Observed Vinted market analytics: compare brands, research niches, and discover trends via OAuth.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Website QA for your coding agent: audit SEO, performance, security, accessibility over MCP.
RegistryRemote
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 21 days ago. Down one letter for 105 open issues against 283 stars.
Local credential broker: agents call APIs, SSH and DBs via scoped presets; secrets stay in keychain.
Registry
ALicenseDQualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: D. 43/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 4 days ago.
Self-hosted federated MCP gateway: one OAuth 2.1 MCP server in front of N apps, user-level scopes.
RegistryRemote
ALicenseDQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 43/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 12 days ago.
Live threat intel for agents: incidents, actors, CVEs with KEV/EPSS, ransomware leak-site victims.
RegistryRemote
CLicenseDQualityAMaintenanceLicense: C. GPL-3.0 is a strong copyleft license: derived works must use the same license.Quality: D. 48/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 23 days ago.
Local-first secret scanning, rotation, vault, and audit-log tools for AI agents.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security gateway for MCP agents: blocks prompt-injection-driven tool calls before they execute.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Stdio MCP auth proxy: wrap any MCP server with per-tool permission enforcement.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Scaffold invite-only Python/FastAPI apps: auth, admin dashboard, dev server, deploy to fly.io.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Audits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
RunSec MCP server for workspace security scanning and remediation workflows.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Rust MCP server and CLI for Tailscale devices, users, keys, policies, and auth.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
