MCP servers · by job

Security MCP servers

119 MCP servers that scan, test and investigate security issues. 31 are SAFE, 21 CAUTION and 67 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Security MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/security/page/5

Verdicts · 119 servers

✓SAFE31!CAUTION21✕BLOCK67

Transports

A server can list more than one transport.

Tool risk

26

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 14 tools.

Servers with no destructive tools →

119 security servers

97–119 of 119 · ranked by trust score, then stars

mcp-observatory

KryptosAI/mcp-observatory

✕BLOCK F

CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.

★ 1403 destructivestdio

Conarium

dogrucanemek-alt/conarium

✕BLOCK F

Self-hosted governance layer between AI assistants and your real data. Deterministic PII masking, allow/deny policy, hash-chained audit, offline-verifiable Ed25519 receipts per access when a receipt sink is configured, coverage reconciliation against the DB's own query counters to surface gateway by

★ 324 readstdio

Qu1cksc0pe

cyb3rmx/qu1cksc0pe

✕BLOCK F

All-in-One malware analysis tool.

★ 2,0603 writestreamable-http

HexStrike AI Community Edition

commonhuman-lab/hexstrike-ai-community-edition

✕BLOCK F

AI Powered penetration testing Platform for offensive security research

★ 1571 write

q-ring

I4cTime/q-ring

✕BLOCK F

OS keychain secrets for AI coding agents, over MCP. Native vault storage (macOS Keychain, Linux Secret Service, Windows Credential Vault), policy-governed access, audit log — CLI + 44 MCP tools.

★ 44 destructivestdio

mcp-writ

strumbyte/mcp-writ

✕BLOCK F

Policy enforcement, OS sandboxing, and JSON-RPC auditing for MCP servers

★ 02 write

ecc-agentshield

affaan-m/agentshield

✕BLOCK F

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

★ 1,27411 writestreamable-http

AI for the Win

depalmar/ai_for_the_win

✕BLOCK F

Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.

★ 1631 writestdio

Mythos Agent

mythos-agent/mythos-agent

✕BLOCK F

The AI security agent guards your code.

★ 4419 readstdio

mcp-gateway

MikkoParkkola/mcp-gateway

✕BLOCK F

Unlimited MCP servers, tools and APIs. One fixed context cost. Plug every tool you own into Claude, Cursor, Codex or any MCP client: your agent sees a handful, finds the rest on demand, and never drowns in tool definitions. Self-hosted MCP gateway and proxy in one Rust binary, 100+ API integrations

★ 799 writestdio

Pentest

dmontgomery40/pentest-mcp

✕BLOCK F

NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.

★ 14719 readsse

Agent Security Harness

msaleme/red-team-blue-team-agent-fabric

✕BLOCK F

AI agent security harness, adversarial testing: 640 executable tests in the v4.26.1 release, across MCP, A2A, x402/L402, decision governance, benchmark integrity, human-in-the-loop, skill supply chain. Four target shapes: a verdict must be able to be wrong AND to be right. OWASP Agentic v1.1 T1-T17,

★ 326 readstdio

darktrace-mcp

nuoframework/darktrace-mcp

✕BLOCK F

Unofficial Darktrace MCP server for SOC investigations and incident response in Claude, Cursor, Codex and VS Code.

★ 1Not listed in sourcestdio

shieldcortex

Drakon-Systems-Ltd/ShieldCortex

✕BLOCK F

Memory security for AI agents. Scan native memory writes, gate tools on bound hosts, inspect what was stored. Not a second brain.

★ 255 destructivestdio

ReverseLab

ling71671/open-reverselab

✕BLOCK F

Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.

★ 1,1826 destructive

open-reverselab

LING71671/open-reverselab

✕BLOCK F

Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.

★ 1,1486 destructive

Shellward

jnmetacode/shellward

✕BLOCK F

AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」(网安法·PIPL·等保2.0·数据出境·AI标识),并给出境内模型替代建议;可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源

★ 1401 destructivestdio

hackmyagent

opena2a-org/hackmyagent

✕BLOCK F

Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.

★ 831 writestdio

cli

getmcpm/cli

✕BLOCK F

MCP security guard + package manager. Block prompt injection, tool poisoning and rug-pulls in Model Context Protocol servers at runtime; trust-scored installs with Sigstore provenance for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and Gemini CLI. Local, deterministic, no LLM in the loop.

★ 31 destructivestdio

exceptd Security

blamejs/exceptd-skills

✕BLOCK F

AI security skills grounded in mid-2026 threat reality, not stale framework documentation

★ 011 read

bv-mcp

MadaBurns/bv-mcp

✕BLOCK F

Open-source DNS & email security scanner. One MCP endpoint, 57 checks, zero install. Cloudflare Workers.

★ 99 readstreamable-http

BreachPilot

braydos-h/BreachPilot

✕BLOCK F

Autonomous Offensive Security Agent for Red Team Operations

★ 48 writestdio

aishield

lm203688/aishield

✕BLOCK F

🛡️ Agent-native AI tool security scanner. Scan MCP/Skill/GPT/Prompt for security risks. 4-dimensional scoring. Certified badges. Guardrail MCP for auto-protection.

★ 21 destructivestdio

Other jobs

By risk

Questions

How do you decide which servers are security servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which security MCP servers rank highest on trust?
Agentic Radar (splx-ai/agentic-radar), Kali Connector (wh0am123/mcp-kali-server) and Security Hub (fuzzinglabs/mcp-security-hub), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many security servers only read?
35 of the 119 declare tools that all only read; 26 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.