MCP servers · by job

Security MCP servers

119 MCP servers that scan, test and investigate security issues. 31 are SAFE, 21 CAUTION and 67 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Security MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/security/page/3

Verdicts · 119 servers

✓SAFE31!CAUTION21✕BLOCK67

Transports

A server can list more than one transport.

Tool risk

26

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 14 tools.

Servers with no destructive tools →

119 security servers

49–72 of 119 · ranked by trust score, then stars

Ethereum Wallet Toolkit

nirholas/ethereum-wallet-toolkit

!CAUTION C

Python toolkit for Ethereum wallets: CLI tools + Model Context Protocol (MCP) servers for wallet generation, BIP39/BIP44 HD wallets, Web3 Secret Storage V3 keystores, and EIP-712 typed data signing

★ 253 writestdio

windbg-mcp

glslang/windbg-mcp

!CAUTION C

MCP server exposing WinDbg/DbgEng (live user-mode, kernel, crash dumps, Time Travel Debugging) to AI agents over stdio or over HTTP with --listen

★ 14Not listed in sourcestdio

LitterBox

blacksnufkin/litterbox

✕BLOCK D

A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.

★ 1,5412 destructivestdio

mcp-security

google/mcp-security

✕BLOCK D
★ 5314 destructivestdio

Jeb

dawnslab/jebmcp

✕BLOCK D
★ 2602 writesse

Jebmcp

flankerhqd/jebmcp

✕BLOCK D
★ 2602 writesse

Ida Pro Server

fdrechsler/mcp-server-idapro

✕BLOCK D

A Model Context Protocol (MCP) server that enables AI assistants to interact with IDA Pro for reverse engineering and binary analysis tasks.

★ 1022 writestdio

Pentester

halilkirazkaya/pentester-mcp

✕BLOCK D

Elevate your AI assistants (like Claude & Cursor) into autonomous cybersecurity experts. Pentester-MCP integrates 200+ pentesting tools via the Model Context Protocol (MCP) using a secure Docker sandbox.

★ 55311 write

Cortex

gambletan/cortex

✕BLOCK D

Memory for AI agents that never leaves your device. Local-first, end-to-end-encrypted, zero-telemetry memory engine (Rust, MCP) — gives Claude & any MCP client persistent cross-session memory.

★ 35Not listed in sourcestdio

rustjunosmcp

fastrevmd-lab/rustjunosmcp

✕BLOCK D

MCP server for Juniper Junos devices, built on rustnetconf.

★ 3Not listed in sourcestdio

rustjunosmcp

mechubsec/rustjunosmcp

✕BLOCK D

MCP server for Juniper Junos devices, built on rustnetconf.

★ 3Not listed in sourcestdio

aga-mcp-server

attestedintelligence/aga-mcp-server

✕BLOCK D

Signed decision records for agent vendors facing customer evidence reviews. Public reference gateway and static verifier; pre-pilot, with documented limits.

★ 011 readstdio

armadoc-cli

waimun/armadoc-cli

✕BLOCK D

Local MCP server and CLI for Armadoc. Lets your AI agent send and read end-to-end encrypted documents; your private key and plaintext never leave your machine.

★ 01 writestdio

awesome-ai-red-teaming-jp

Ajay77187718/awesome-ai-red-teaming-jp

✕BLOCK D

整理された日本語のAIレッドチーミング情報集。攻撃手法、ツール、規制、防御、論文をまとめて学べるリソース集

★ 04 readstdio

mcprobe

Amalleheavy908/mcprobe

✕BLOCK D

Validate MCP servers by inspecting tools, schemas, and resource URIs to identify security risks before connection.

★ 01 write

ratchet

suhui-organization/ratchet

✕BLOCK D

Compile a least-privilege policy from what your AI agents can actually reach - then hand over evidence the recipient verifies without trusting you.

★ 0Not listed in sourcestdio

Compartment

maxfreedompollard/compartment

✕BLOCK D

Encrypted, fully offline agentic memory. One click install, GUI w/ memory map, all OS and agents. Superior memory creation, storage and retrieval.

★ 578Not listed in sourcestdio

Zettelforge

rolandpg/zettelforge

✕BLOCK D

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

★ 64Not listed in sourcestdio

ZettelForge

threatrecall/zettelforge

✕BLOCK D

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

★ 64Not listed in sourcestdio

rustsdcmcp

mechubsec/rustsdcmcp

✕BLOCK D

Async Rust MCP server for HPE Juniper Security Director Cloud — a mechub project

★ 1Not listed in sourcestdio

MindForge

opok-ops/MindForge

✕BLOCK D

Production-grade lifelong memory for AI agents — 4-tier memory, knowledge graph, E2EE, federated P2P, MCP server.

★ 31 destructive

Hammer

praetorian-inc/mcphammer

✕BLOCK D

MCP security testing framework for evaluating Model Context Protocol server vulnerabilities

★ 352 readstdio

yorishiro-proxy

usk6666/yorishiro-proxy

✕BLOCK D

AI-native MITM proxy — MCP server for traffic interception, recording & replay

★ 171 writestreamable-http

Reverse Engineer Anything

morluto/rea

✕BLOCK D

Reverse engineer anything with agents, from app behavior down to native binaries.

★ 8,4701 writestdio

Other jobs

By risk

Questions

How do you decide which servers are security servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which security MCP servers rank highest on trust?
Agentic Radar (splx-ai/agentic-radar), Kali Connector (wh0am123/mcp-kali-server) and Security Hub (fuzzinglabs/mcp-security-hub), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many security servers only read?
35 of the 119 declare tools that all only read; 26 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.