Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1523 published MCP servers match this ranking. The highest trust scores right now are SAS Viya at 68, Corvus at 68, Draugr at 68. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.
Best of
Full ranking
Every server that matches this ranking, ordered by trust score.
Postcodes MCP — wraps postcodes.io UK postcode API (free, no auth)
RegistryRemote
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 42 days ago.
ProPublica Nonprofit MCP — ProPublica Nonprofit Explorer API (free, no auth)
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
Quotable MCP — wraps the Quotable dataset (free, no auth)
RegistryRemote
ALicenseAQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: A. 91/100 for listing completeness. Lost points: short summary.Maintenance: A. Last commit or release 9 days ago.
Radio MCP — wraps Radio Browser API (free, no auth)
RegistryRemote
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 42 days ago.
PyPI MCP — wraps the Python Package Index (PyPI) JSON API (free, no auth).
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
RBA MCP — Reserve Bank of Australia statistics (free, no auth).
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
Random User MCP — wraps randomuser.me (free, no auth)
RegistryRemote
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 42 days ago.
Rick and Morty MCP — wraps the Rick and Morty API (free, no auth)
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 9 days ago.
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 41 days ago.
Self-hosted WordPress MCP server with 203 tools and per-change undo. OAuth sign-in or API key. Free.
RegistryRemote
CLicense–QualityAMaintenanceLicense: C. GPL-2.0 is a strong copyleft license: derived works must use the same license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 11 days ago.
Self-hosted Canvas LMS for every device: 237 student tools over HTTP with OAuth and phone alerts.
Registry
ALicenseCQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: C. 65/100 for listing completeness. Lost points: no listed tools, short summary.Maintenance: A. Last commit or release 4 days ago.
Check, diff and history of MCP tool definitions, from a public signed log of 88k+ servers.
Registry
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 5 days ago.
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 13 days ago.
Offline security scanning for AI-generated code: seven open-source scanners in one MCP server.
Registry
ALicense–QualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 21 days ago.
Dad Jokes MCP — wraps icanhazdadjoke.com (free, no auth)
RegistryRemote
ALicenseCQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: C. 66/100 for listing completeness. Lost points: no README, short summary.Maintenance: A. Last commit or release 13 days ago.
MCP server for the Frame security scanner: scan, verify, fix, exploit, packs and separation logic.
Registry
ALicense–QualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 11 days ago.
Deck of Cards MCP — wraps deckofcardsapi.com (free, no auth)
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 13 days ago.
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 46 days ago.
Project board for teams and coding agents: Kanban, sprints, 46 tools, OAuth 2.1 or API tokens.
RegistryRemote
CLicense–QualityAMaintenanceLicense: C. AGPL-3.0 is a strong copyleft license: derived works must use the same license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 21 days ago.
Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.
Registry
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 12 days ago.
One searchable history across every AI coding tool, with secret scanning and a shared task board.
RegistryRemote
–License–QualityAMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 6 days ago.
AI product videos, photos and ads from a product link: TikTok, Reels and Shorts clips, earn per sale
RegistryRemote
ALicenseAQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: A. 95/100 for listing completeness. Lost points: short summary.Maintenance: A. Last commit or release 25 days ago.
Run 100+ AI models — image, video, audio, 3D — through one API with pay-per-use billing.
RegistryRemote
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 2 months ago.
Manage your Tolstoy workspace: products, media library, uploads, models, templates and projects.
RegistryRemote
ALicense–QualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 11 days ago.
