MCP servers · by job
Security MCP servers
119 MCP servers that scan, test and investigate security issues. 31 are SAFE, 21 CAUTION and 67 BLOCK. Ranked by trust score; each card opens the full audit.
Cite
Cite this page
ModelsAtlas. “Security MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/security/page/2
Verdicts · 119 servers
Transports
- stdio, runs locally89
- Streamable HTTP, remote49
- SSE, legacy remote9
- Not declared18
A server can list more than one transport.
Tool risk
26
servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 14 tools.
Servers with no destructive tools →119 security servers
25–48 of 119 · ranked by trust score, then stars
Model Context Provider
allsmog/mcp-pentest
MCP server for authorized pentest workflows: Nmap/Gobuster orchestration, context aggregation, AI-assisted triage, and reporting.
ed-dryha-reolink
ed-dryha/reolink-mcp
An open-source MCP (Model Context Protocol) server for Reolink cameras: lets Claude — or any MCP client — see and control Reolink cameras on the local network.
forcedream
forcedreamai/forcedream-mcp
MCP server for ForceDream — discover, invoke, and trustlessly verify AI agents with cryptographic proofs.
airlock-rls-mcp
mateuszingano/airlock-rls-mcp
MCP server: let Cursor / Claude Code check a Supabase app for an exposed service_role key and broken RLS while it builds it
attestd-mcp
attestd-io/attestd-mcp
Official MCP server for Attestd. Use Attestd supply chain and CVE signals directly in Claude Code, Cursor, and Windsurf.
beepboop2025-data-breach-detector
beepboop2025/data-breach-detector
Read-only breach intelligence for defenders: exposure checks, breach news, and threat assessment over MCP. Never leaked records.
fino
tophole-alphabetizer167/fino
Track personal finances locally with AI, connect bank accounts, analyze spending, and chat with Claude while keeping data on your machine
linkedin-osint-cli
gnmike57/linkedin-osint-cli
LinkedIn CLI + MCP server: 43 platform commands plus a 13-command OSINT suite (company discovery, employee scraping, username generation, role classification, org charts). Interactive console, cookie-session auth, AI-agent native.
selflabbs-security-intel
datakoot/security-intel-mcp
Vulnerability-intelligence MCP server for AI agents: CVE lookups (NVD) and dependency-manifest audits (OSV). Keyless.
seosiri-api-guard-mcp-server
SEOSiri-Official/seosiri-api-guard-mcp-server
A sovereign, universal API validation and multi-industry compliance security MCP server supporting OWASP, HIPAA, PCI-DSS, GDPR, and SEO/AEO metadata guardrails.
mcp-tenant-isolation
subodhkc/mcp-tenant-isolation
Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.
SonarQube
sonarsource/sonarqube-mcp-server
Official SonarQube MCP Server for code quality and security in AI agents
llamator-mcp-server
kyle122497/llamator-mcp-server
🚀 Automate LLM red teaming workflows with the MCP server for LLAMATOR, featuring asynchronous job handling and seamless integration.
ghidra-mcp
bethington/ghidra-mcp
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
GitGuardian
gitguardian/ggmcp
MCP server for remediating hardcoded secrets using GitGuardian’s API. It detects over 600 secret types and prevents credential leaks before code is made public.
GitGuardian
gitguardian/gg-mcp
MCP server for remediating hardcoded secrets using GitGuardian’s API. It detects over 600 secret types and prevents credential leaks before code is made public.
Security Tools
cyproxio/mcp-for-security
MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.
echelongraph-mcp
echelongraph/echelongraph-mcp
MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, version, SBOM and lockfile checks, vendor advisories, and per-CVE exposure from Shodan data (© Shodan). Free and keyless.
rustpanosmcp
mechubsec/rustpanosmcp
Async Rust MCP server for Palo Alto Networks PAN-OS firewalls — bearer-token auth, per-token device/tool scopes, guarded candidate-config lifecycle
Ghidra
bethington/ghidra-mcp
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
Fast ThreatIntel
4r9un/fastmcp-threatintel
AI-Powered Threat Intelligence MCP tool
webcrypt
putervision/webcrypt
Zero-dependency Web Crypto suite & Model Context Protocol (MCP) server for AES-256-GCM, RSA-4096, and AI agent security.
MiMo Free API
fu-jie/mimo-free-api-mcp
MiMo Free API MCP: 基于官网逆向的高性能 OpenAI / HTTP MCP 代理网关。支持搜索、识图、长文本分段及 SQLite 持久化。
OpenOSINT
openosint/openosint
AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.
Other jobs
By risk
Questions
How do you decide which servers are security servers?
Which security MCP servers rank highest on trust?
How many security servers only read?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- How do you decide which servers are security servers?
- Which security MCP servers rank highest on trust?
- How many security servers only read?