Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1524 published MCP servers match this ranking. The highest trust scores right now are Malwarebazaar at 67, Marine at 67, Npm at 67. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.
Best of
Full ranking
Every server that matches this ranking, ordered by trust score.
AI hiring tools CV screening, social media profile scan, and document search for any organization.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
DeFi MCP fleet: oracle, security audit, treasury yield, QA attestation, and compute tools on Base.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Sports MCP — wraps TheSportsDB API (free tier, test key 3, no auth required)
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
–LicenseBQuality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: B. 80/100 for listing completeness. Lost points: short README, short summary.Maintenance: Not graded. No commit or release date has been recorded.
Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
UK Global Talent Visa handbook, endorser criteria, cost calculator, draft scoring. Free, no auth.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Sealed prediction-market verdicts, graded in public across Polymarket and Kalshi. No auth required.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Real-time electricity prices for AI agents. 40+ countries, 100+ zones. No auth required.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Signed security scores for what an AI agent runs and reads: skills, MCP servers, prompts, tokens.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 19 days ago.
Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.
Registry
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 2 days ago.
Network scanner for AI agents: discover hosts, scan TCP and UDP ports, query DNS and mDNS.
Registry
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 26 days ago. Down one letter for 20 open issues against 16 stars.
Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit
Registry
ALicense–QualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 8 days ago.
Guarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.
Registry
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 23 days ago.
Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
Registry
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 23 days ago.
ALicenseDQualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 48/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: B. Last commit or release 2 months ago.
Vet MCP tool manifests before attachment; returns block, review, or no blocking finding.
Registry
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 10 days ago.
Send a password or API key as a link that opens once. Encrypted client-side, so we cannot read it.
Registry
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 38 days ago.
IBM i / RPG / DB2 bridge — parse, map, govern (IBM i security / SOX).
Registry
Deprecated
–License–QualityFMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: F. The listing is marked deprecated.
One verified household record for your AI: accounts, holdings, fees and Score. Can't move money.
RegistryRemote
ALicenseDQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 48/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 6 days ago.
Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.
Registry
ALicenseDQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 43/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 10 days ago.
Scan what AI agents read for prompt injection: hidden unicode, comment instructions, exfil, lures.
Registry
ALicenseDQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 43/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 11 days ago.
