MCP servers · by job
Security MCP servers
119 MCP servers that scan, test and investigate security issues. 31 are SAFE, 21 CAUTION and 67 BLOCK. Ranked by trust score; each card opens the full audit.
Cite
Cite this page
ModelsAtlas. “Security MCP servers”. Retrieved 28 Oct 2026. https://modelsatlas.com/mcp/topic/security
Verdicts · 119 servers
Transports
- stdio, runs locally89
- Streamable HTTP, remote49
- SSE, legacy remote9
- Not declared18
A server can list more than one transport.
Tool risk
26
servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 14 tools.
Servers with no destructive tools →119 security servers
1–24 of 119 · ranked by trust score, then stars
Agentic Radar
splx-ai/agentic-radar
A security scanner for your LLM agentic workflows
Kali Connector
wh0am123/mcp-kali-server
MCP configuration to connect AI agent to a Linux machine.
Security Hub
fuzzinglabs/mcp-security-hub
A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.
Apktool
zinja-coder/apktool-mcp-server
A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)
H1 Brain
patrikfehrenbach/h1-brain
MCP server that connects AI assistants to HackerOne for bug bounty hunting
OnionClaw
christinminor459/onionclaw
Provide AI agents with full Tor network access and dark web data through a zero-config OpenClaw skill or standalone tool.
Maigret
burtthecoder/mcp-maigret
MCP server for maigret, a powerful OSINT tool that collects user account information from various public sources.
OpenClaw
freema/openclaw-mcp
🦞 MCP server for OpenClaw - secure bridge between Claude.ai and your self-hosted OpenClaw assistant with OAuth2 authentication
Shodan
burtthecoder/mcp-shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.
VirusTotal
burtthecoder/mcp-virustotal
MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.
x64dbg
bromoket/x64dbg_mcp
Drive x64dbg with your AI. MCP server: 23 mega-tools / 153 endpoints for breakpoints, memory, disasm, tracing, anti-debug & PE dumping. Claude/Cursor/Windsurf/Cline. All local.
Cve Search
roadwy/cve-search_mcp
A Model Context Protocol (MCP) server for querying the CVE-Search API
Awsome Kali
ccq1/awsome_kali_mcpservers
awsome kali MCPServers is a set of MCP servers tailored for Kali Linux
ExternalAttacker
mordavid/externalattacker-mcp
A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.
Cheat Engine
bethington/cheat-engine-server-python
MCP Cheat Engine Server — provides safe, structured read-only access to memory analysis and debugging functionality through the Model Context Protocol (MCP). For developers, security researchers, and game modders.
OSINT
badchars/osint-mcp-server
OSINT intelligence MCP server for AI agents — 37 tools, 12 sources. Shodan, VirusTotal, Censys, SecurityTrails, DNS reconnaissance, WHOIS, certificate transparency, BGP routing, Wayback Machine, GeoIP. Automated open source intelligence and attack surface mapping via Model Context Protocol.
Security Audit
qianniuspace/mcp-security-audit
A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.
DNStwist
burtthecoder/mcp-dnstwist
MCP server for dnstwist, a powerful DNS fuzzing tool that helps detect typosquatting, phishing, and corporate espionage.
Shodan
cyreslab-ai/shodan-mcp-server
MCP server for Shodan — host/network recon, CVE and exploit lookup, InternetDB, and persistent alerts (34 tools).
Copilot Security
robotti-io/copilot-security-instructions
✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.
ExploitDB
cyreslab-ai/exploitdb-mcp-server
MCP server for Exploit-DB — search public exploits and shellcode by CVE, platform, type, and tags.
MalwareBazaar
mytechnotalent/malwarebazaar_mcp
An AI-driven MCP server that autonomously interfaces with Malware Bazaar, delivering real-time threat intel and sample metadata for authorized cybersecurity research workflows.
Binary Analysis
ap3x/binaryanalysis-mcp
MCP server for analyzing PE, ELF, and Mach-O binaries using LIEF
Kali Go
found-cake/kali-mcp-go
MCP runtime for AI-assisted security testing with Kali tools, explicit target controls, bounded scanning, structured evidence, and persistent Docker deployment.
Other jobs
By risk
Questions
How do you decide which servers are security servers?
Which security MCP servers rank highest on trust?
How many security servers only read?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- How do you decide which servers are security servers?
- Which security MCP servers rank highest on trust?
- How many security servers only read?