Skip to content
Best of

Best security MCP servers

Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1524 published MCP servers match this ranking. The highest trust scores right now are Rba at 67, Randomuser at 67, Rick And Morty at 67. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.

Best of

Full ranking

Every server that matches this ranking, ordered by trust score.

1,524 servers
Trust score 40 of 100, Fair

This package is intended for demonstration only. Maintained by JFrog Security.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Security scanner for MCP servers - detects tool poisoning and injection

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Security proxy that wraps MCP servers with real-time monitoring and policy enforcement

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Read-only runtime secret retrieval from HashiCorp Vault via Keymaster for autonomous AI agents.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Secure grip for your agent's secrets - security-hardened MCP gateway with proxy token architecture

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Security scanning and trust verification for AI agent tools.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

AI smart contract forge — 8-agent security audits, generation, and compilation across 8 chains

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: B. 82/100 for listing completeness. Lost points: short README, 1 of 7 tools barely described, short summary.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads7 tools
Trust score 40 of 100, Fair

Signed, non-replayable API auth. Agents self-register and sign requests with ERC-8128.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

MCP server for DiskCleanKit - One Touch Scan and Clean for Mac

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

AI agent governance — security scanning, BYOK routing, audit logging, and Council approvals.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

OT security standards: IEC 62443, NIST 800-82/53, MITRE ATT&CK for ICS

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Process management and monitoring for AI agents with strict security boundaries

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

MCP server for VibeScan — scan projects for leaked secrets and security issues

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Ybe Check – security and compliance orchestrator for AI-generated repositories.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Moltbook MCP server: post, comment, upvote, DMs, communities. API key auth.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

MCP smart contract scanner with NEAR-focused security context.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 40 of 100, Fair

Security gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.

Registry
LicenseQualityMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
— stars—/wk weekly downloads— tools
Trust score 39 of 100, Limited

Final release; the checks moved to 9lives (9l mcp). Local QA MCP: scan, inspect, repro, run tests.

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 25 days ago.
4 stars—/wk weekly downloads— tools
Trust score 39 of 100, Limited

vaultgate

by adamrowles1996 · TypeScript

Self-hosted remote MCP server for Bitwarden and Vaultwarden with OAuth 2.1; agents hold tokens only

RegistryRemote
LicenseQualityMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 5 days ago.
3 stars—/wk weekly downloads— tools
Trust score 39 of 100, Limited

MCP server for Kalshi prediction markets: native RSA-PSS auth, rate limiting, demo/prod safety.

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 13 days ago.
3 stars—/wk weekly downloads— tools
Trust score 39 of 100, Limited

Security-first, self-hosted MCP server for Firefly III — 152 operations behind 5 scoped tools.

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 12 days ago.
3 stars—/wk weekly downloads— tools
Trust score 39 of 100, Limited

AI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints

Registry
LicenseQualityMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 45 days ago.
2 stars—/wk weekly downloads— tools