MCP servers · by job
Security MCP servers
119 MCP servers that scan, test and investigate security issues. 31 are SAFE, 21 CAUTION and 67 BLOCK. Ranked by trust score; each card opens the full audit.
Cite
Cite this page
ModelsAtlas. “Security MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/security/page/5
Verdicts · 119 servers
Transports
- stdio, runs locally89
- Streamable HTTP, remote49
- SSE, legacy remote9
- Not declared18
A server can list more than one transport.
Tool risk
26
servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 14 tools.
Servers with no destructive tools →119 security servers
97–119 of 119 · ranked by trust score, then stars
mcp-observatory
KryptosAI/mcp-observatory
CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.
Conarium
dogrucanemek-alt/conarium
Self-hosted governance layer between AI assistants and your real data. Deterministic PII masking, allow/deny policy, hash-chained audit, offline-verifiable Ed25519 receipts per access when a receipt sink is configured, coverage reconciliation against the DB's own query counters to surface gateway by
Qu1cksc0pe
cyb3rmx/qu1cksc0pe
All-in-One malware analysis tool.
HexStrike AI Community Edition
commonhuman-lab/hexstrike-ai-community-edition
AI Powered penetration testing Platform for offensive security research
q-ring
I4cTime/q-ring
OS keychain secrets for AI coding agents, over MCP. Native vault storage (macOS Keychain, Linux Secret Service, Windows Credential Vault), policy-governed access, audit log — CLI + 44 MCP tools.
mcp-writ
strumbyte/mcp-writ
Policy enforcement, OS sandboxing, and JSON-RPC auditing for MCP servers
ecc-agentshield
affaan-m/agentshield
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️
AI for the Win
depalmar/ai_for_the_win
Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.
Mythos Agent
mythos-agent/mythos-agent
The AI security agent guards your code.
mcp-gateway
MikkoParkkola/mcp-gateway
Unlimited MCP servers, tools and APIs. One fixed context cost. Plug every tool you own into Claude, Cursor, Codex or any MCP client: your agent sees a handful, finds the rest on demand, and never drowns in tool definitions. Self-hosted MCP gateway and proxy in one Rust binary, 100+ API integrations
Pentest
dmontgomery40/pentest-mcp
NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.
Agent Security Harness
msaleme/red-team-blue-team-agent-fabric
AI agent security harness, adversarial testing: 640 executable tests in the v4.26.1 release, across MCP, A2A, x402/L402, decision governance, benchmark integrity, human-in-the-loop, skill supply chain. Four target shapes: a verdict must be able to be wrong AND to be right. OWASP Agentic v1.1 T1-T17,
darktrace-mcp
nuoframework/darktrace-mcp
Unofficial Darktrace MCP server for SOC investigations and incident response in Claude, Cursor, Codex and VS Code.
shieldcortex
Drakon-Systems-Ltd/ShieldCortex
Memory security for AI agents. Scan native memory writes, gate tools on bound hosts, inspect what was stored. Not a second brain.
ReverseLab
ling71671/open-reverselab
Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.
open-reverselab
LING71671/open-reverselab
Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.
Shellward
jnmetacode/shellward
AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」(网安法·PIPL·等保2.0·数据出境·AI标识),并给出境内模型替代建议;可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源
hackmyagent
opena2a-org/hackmyagent
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
cli
getmcpm/cli
MCP security guard + package manager. Block prompt injection, tool poisoning and rug-pulls in Model Context Protocol servers at runtime; trust-scored installs with Sigstore provenance for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and Gemini CLI. Local, deterministic, no LLM in the loop.
exceptd Security
blamejs/exceptd-skills
AI security skills grounded in mid-2026 threat reality, not stale framework documentation
bv-mcp
MadaBurns/bv-mcp
Open-source DNS & email security scanner. One MCP endpoint, 57 checks, zero install. Cloudflare Workers.
BreachPilot
braydos-h/BreachPilot
Autonomous Offensive Security Agent for Red Team Operations
aishield
lm203688/aishield
🛡️ Agent-native AI tool security scanner. Scan MCP/Skill/GPT/Prompt for security risks. 4-dimensional scoring. Certified badges. Guardrail MCP for auto-protection.
Other jobs
By risk
Questions
How do you decide which servers are security servers?
Which security MCP servers rank highest on trust?
How many security servers only read?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- How do you decide which servers are security servers?
- Which security MCP servers rank highest on trust?
- How many security servers only read?