Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1524 published MCP servers match this ranking. The highest trust scores right now are Quotable at 67, Radio at 67, Pypi at 67. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.
Every server that matches this ranking, ordered by trust score.
Runtime AI-to-AI security monitor. 23 anomaly types, OWASP MCP Top 10 coverage.
PoC benign MCP server for update-hijack security research
PoC: Open Registry supply chain — unvetted server listing (security research)
Security proxy that wraps MCP servers with real-time monitoring and policy enforcement
Security scanner for MCP servers - detects tool poisoning and injection
AI coding ecosystem intelligence — breaking changes, tools, security alerts from 900+ sources
AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs
MCP server for CloudPayments API — charge, auth, confirm, void, refund, find transaction. 6 tools.
Scan dependencies for license compliance — copyleft conflicts, unknown licenses, risk.
Process management and monitoring for AI agents with strict security boundaries
Real-time semantic security for AI coding agents and MCP tools
SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.
Domain security scanning for AI agents. A-F grades, 8 checks, fix snippets.
Unknown author
Intent security pre-flight checks for autonomous AI agents.
Pre-install security scanner for AI agent skills (local stdio MCP). Offline static scan; no upload.
Security scanning and trust verification for AI agent tools.
MCP server for npm package management, security analysis, and compatibility checking
AI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.
1 MCP server, 13 databases, zero config. Multi-protocol transport with Auth + RBAC.
Scan npm dependencies for license compliance issues. Catch GPL contamination.
MCP server for PR code review, commit messages, changelogs, and secret detection.
MCP security proxy - detects and blocks 40+ MCP attack classes. Zero config.
Scan for prompt injection, secrets, PII, and vet MCP servers before installation
WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI