Skip to content
Best of

Best security MCP servers

Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1524 published MCP servers match this ranking. The highest trust scores right now are Nvd at 67, Postcodes at 67, Propublica Nonprofit at 67. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.

Best of

Full ranking

Every server that matches this ranking, ordered by trust score.

1,524 servers
QRX logo
Trust score 41 of 100, Fair

QRX

by qrxcodes · TypeScript

Turn a prompt and a link into a branded, print-ready QR code that always scans.

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 26 days ago.
0 stars476/wk weekly downloads— tools
Trust score 41 of 100, Fair

hookcheck

by cloudcorprecords · TypeScript

Persistence hook auditor: scan repos for auto-exec hooks, flag Shai-Hulud patterns.

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: C. 60/100 for listing completeness. Lost points: no listed tools, short summary, no docs link.Maintenance: A. Last commit or release 11 days ago.
0 stars—/wk weekly downloads— tools
Trust score 41 of 100, Fair

Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 43/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 10 days ago.
0 stars—/wk weekly downloads— tools
Trust score 41 of 100, Fair

Scan what AI agents read for prompt injection: hidden unicode, comment instructions, exfil, lures.

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 43/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 11 days ago.
0 stars—/wk weekly downloads— tools
Truthifi logo
Trust score 41 of 100, Fair

One verified household record for your AI: accounts, holdings, fees and Score. Can't move money.

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 48/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 6 days ago.
0 stars—/wk weekly downloads— tools
Trust score 41 of 100, Fair

Agent tool-call guardrail: fail-closed runtime security verification with Ed25519 evidence receipts.

Registry
Deprecated
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: D. 48/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: F. The listing is marked deprecated.
— stars162/wk weekly downloads— tools
Trust score 41 of 100, Fair

Dynamic QR codes for AI agents — custom styling, scan tracking, webhooks

Registry
Deprecated
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: F. The listing is marked deprecated.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

grantex

by mishrasanjeev · TypeScript

OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: D. 48/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: A. Last commit or release 13 days ago.
33 stars264/wk weekly downloads— tools
Trust score 40 of 100, Fair

Ebay

by pipeworx-io · JavaScript

eBay MCP — Browse + Taxonomy APIs via client_credentials OAuth

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 7 days ago.
1 stars28/wk weekly downloads— tools
Trust score 40 of 100, Fair

Sbir

by pipeworx-io · TypeScript

SBIR MCP — wraps the SBIR.gov public API (free, no auth)

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 41 days ago.
0 stars45/wk weekly downloads— tools
Trust score 40 of 100, Fair

Secure grip for your agent's secrets - security-hardened MCP gateway with proxy token architecture

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

PoC benign MCP server for update-hijack security research

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Runtime AI-to-AI security monitor. 23 anomaly types, OWASP MCP Top 10 coverage.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

This package is intended for demonstration only. Maintained by JFrog Security.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Moltbook MCP server: post, comment, upvote, DMs, communities. API key auth.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

MCP smart contract scanner with NEAR-focused security context.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Minimal MCP server for Ghost Security API - compatible with all MCP clients

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Submit URLs to Google and Bing for indexing, scan sitemaps, check index status.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Process management and monitoring for AI agents with strict security boundaries

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Real-time semantic security for AI coding agents and MCP tools

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Signed, non-replayable API auth. Agents self-register and sign requests with ERC-8128.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Enterprise certification for codebases with multi-agent security, reliability, and quality audits

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools