Collection · updated 11 Aug 2026

Security MCP servers, ranked by security grade

Every security MCP server we've graded, ordered by security grade and then popularity. 13 of these 19 earned an A or better.

19 servers, ranked by grade then popularity

A+ 1. snyk/agent-scan Security scanner for AI agents, MCP servers and agent skills. 100/100 · 2,897★ · -1d since commit · 0 findings A+ 2. zinja-coder/jadx-mcp-server MCP server for JADX-AI Plugin 100/100 · 742★ · 3d since commit · 0 findings A+ 3. zinja-coder/apktool-mcp-server A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites) 100/100 · 625★ · 38d since commit · 0 findings A+ 4. burugo/one-mcp A centralized reverse-proxy platform for MCP servers — manage, group, and export as Skills from a single endpo 100/100 · 406★ · 7d since commit · 0 findings A+ 5. acuvity/minibridge Make your MCP servers secure and production ready 100/100 · 55★ · 82d since commit · 0 findings A 6. wgpsec/ENScan_GO 一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。支持MCP接入 100/100 · 4,615★ · 132d since commit · 0 findings A 7. zinja-coder/jadx-ai-mcp Plugin for JADX to integrate MCP server 95/100 · 2,625★ · 3d since commit · 1 finding A 8. OpenOSINT/OpenOSINT AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 19 tools. Works with Claude, GPT-4, or loca 95/100 · 1,380★ · 0d since commit · 1 finding A 9. mukul975/cve-mcp-server Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS sco 95/100 · 1,112★ · 4d since commit · 1 finding A 10. PortSwigger/mcp-server MCP Server for Burp 95/100 · 1,056★ · -1d since commit · 1 finding A 11. microsoft/wassette Wassette: A security-oriented runtime that runs WebAssembly Components via MCP 95/100 · 934★ · 4d since commit · 1 finding A 12. Wh0am123/MCP-Kali-Server MCP configuration to connect AI agent to a Linux machine. 95/100 · 795★ · 145d since commit · 1 finding A 13. getagentseal/agentseal Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply cha 92/100 · 341★ · 59d since commit · 1 finding B 14. 0x4m4/hexstrike-ai HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomousl 90/100 · 10,919★ · 6d since commit · 2 findings B 15. gbrigandi/mcp-server-wazuh MCP Server for Wazuh SIEM 88/100 · 232★ · 240d since commit · 2 findings B 16. highflame-ai/ramparts mcp & skill scanner that scans any mcp server or skills for indirect attack vectors and security or configurat 86/100 · 96★ · 2d since commit · 2 findings C 17. mrexodia/ida-pro-mcp AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP. 75/100 · 11,234★ · 0d since commit · 2 findings C 18. frishtik/osint-tools-mcp-server MCP server exposing multiple OSINT tools for AI assistants like Claude 80/100 · 229★ · 367d since commit · 2 findings F 19. firerpa/lamda Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one 30/100 · 8,129★ · 0d since commit · 5 findings

Grades come from static analysis of public source; no live endpoint was probed. A clean grade means our checks found nothing, which is weaker than "safe". Full method.