Security servers scan code and dependencies, look up threat intelligence, and query SIEM tools. Hold them to a higher bar: published source, pinned versions, and a clear tool list. 1523 published MCP servers match this ranking. The highest trust scores right now are recon at 68, Gutendex at 68, Iconify at 68. The order is the published trust score: registry record, license, maintenance, popularity, documentation, and security signals. Featured slots, when an editor sets them, are labeled and do not change the score. Best security MCP servers is not a paid placement.
Best of
Full ranking
Every server that matches this ranking, ordered by trust score.
Run 100+ AI models — image, video, audio, 3D — through one API with pay-per-use billing.
RegistryRemote
ALicense–QualityBMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: B. Last commit or release 2 months ago.
Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies…
ALicenseDQualityAMaintenanceLicense: A. MIT is a permissive open source license.Quality: D. 53/100 for listing completeness. Lost points: short README, no listed tools.Maintenance: A. Last commit or release 20 days ago.
Find APIs and MCP servers for AI agents: auth, free tier, MCP endpoint, docs, last-checked date.
RegistryRemote
–License–QualityAMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 5 days ago.
Write, validate, render and analyze spintax templates. Backed by @spintax/core. No auth.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
–License–QualityAMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 10 days ago.
Read-only audit evidence for security, tests, native coverage, runtime failures and repair status.
Registry
–License–QualityAMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 7 days ago.
DME billing and medical coding: code lookup, DMEPOS fee schedules, Medicare prior-auth checks
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Google Docs MCP Pack — read, create, and edit Google Docs via OAuth. Reuses the google_sheets…
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Code, package, docs, paper and vulnerability search. 17 tools, keyless lanes.
Registry
–License–QualityAMaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 22 days ago.
Compact MCP server for SAP ABAP ADT over HTTP, RFC or SNC: one tool per operation, object in args
Registry
ALicense–QualityAMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 22 days ago.
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
TLS security grades from SSL Labs. No key required.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Pay-per-call x402 tools on Base: web extract/render, burn-once secret vault, chart, GeoTIFF
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
WatchGuard Cloud Firebox, Endpoint Security, ThreatSync, NDR and AuthPoint APIs for every customer
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
x402 Endpoint Scanner — a free local health probe for x402 paid endpoints as an MCP server.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Scan Street View areas into PanoIDs and download imagery through PanoOn.
Registry
–LicenseCQuality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: C. 55/100 for listing completeness. Lost points: short README, no listed tools, short summary.Maintenance: Not graded. No commit or release date has been recorded.
Europe PMC search, search analytics, full text, enrichment, PICO, MeSH, data links, export, auth
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Local vulnerability scan on top of grype, with prioritised upgrade actions for agents.
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
MCP server for ALTR data security: databases, tags, policies, classification, access, audits
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Local first MCP checks for Unicode confusables, mixed scripts, invisible controls, and...
Registry
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.
RegistryRemote
–License–Quality–MaintenanceLicense: Not graded. No license is recorded for this server.Quality: Not graded. No README or tool list has been captured yet.Maintenance: Not graded. No commit or release date has been recorded.
