Skip to content
Best of

Best security MCP servers

Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1524 published MCP servers match this ranking. The highest trust scores right now are Jsonplaceholder at 67, Gong at 67, Nih Reporter at 67. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.

Best of

Full ranking

Every server that matches this ranking, ordered by trust score.

1,524 servers
Taskade MCP logo
Trust score 44 of 100, Fair

Taskade MCP

by taskade · TypeScript

Taskade projects, tasks and AI agents. Hosted OAuth server or local stdio package.

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 12 days ago.
170 stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

Real-time data-breach lookup and analytics for emails and domains from XposedOrNot.

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 13 days ago.
100 stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

A simple Node.js module that fetches and parses the latest Common Weakness Enumeration (CWE) list

LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 2 months ago.
10 stars41/wk weekly downloads— tools
Trust score 44 of 100, Fair

Input firewall for AI agents: scan text and files before an agent reads them. Local, no network.

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 48/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 10 days ago.
10 stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 48/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: B. Last commit or release 49 days ago.
9 stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 43/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: B. Last commit or release 38 days ago.
5 stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

OAuth LangChain OpenAI Agent

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

FastAPI Auth Token JWT Service

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

FastAPI Auth Token Service

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

Google OAuth Credential Service

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

Encrypted OAuth LLM Agent

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

Auth Token MCP Traced Service

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

Google OAuth LangChain Agent

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

OAuth Multi-LLM Orchestrator

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 44 of 100, Fair

Auth Token MCP Service

RegistryRemote
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 43 of 100, Fair

Search ~300 airlines and book flights with a checkout link. OAuth sign-in by email code.

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: C. 65/100 for listing completeness. Lost points: no listed tools, short summary.Maintenance: A. Last commit or release 12 days ago.
78 stars—/wk weekly downloads— tools
Tailscale RMCP logo
Trust score 43 of 100, Fair

Tailscale device, route, DNS, key, user, and ACL management over MCP and CLI.

RegistryRemote
LicenseQualityMaintenanceLicense: C. AGPL-3.0 is a strong copyleft license: derived works must use the same license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 37 days ago.
5 stars48/wk weekly downloads— tools
Trust score 43 of 100, Fair

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 20 days ago.
2 stars301/wk weekly downloads— tools
Trust score 42 of 100, Fair

ContrastAPI

by upinar · Python

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 11 days ago.
35 stars—/wk weekly downloads— tools
Trust score 42 of 100, Fair

Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 15 days ago. Down one letter for 71 open issues against 31 stars.
31 stars—/wk weekly downloads— tools
Spytrend logo
Trust score 42 of 100, Fair

Spytrend

by spytrend · Python

Analytics, advertising: Facebook/Meta, TikTok, competitor ads. Free plan; Spytrend OAuth in browser

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 11 days ago.
30 stars—/wk weekly downloads— tools
Apprise RMCP logo
Trust score 42 of 100, Fair

Apprise notifications over MCP and CLI with authenticated stdio and HTTP transports.

Registry
LicenseQualityMaintenanceLicense: C. AGPL-3.0 is a strong copyleft license: derived works must use the same license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 37 days ago.
2 stars58/wk weekly downloads— tools
Trust score 42 of 100, Fair

CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.

RegistryRemote
LicenseQualityMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 6 days ago.
1 stars291/wk weekly downloads— tools
Trust score 42 of 100, Fair

Offline methodology engine for authorized penetration testing, CTF, and security research.

RegistryRemote
LicenseQualityMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 8 days ago.
1 stars355/wk weekly downloads— tools