Submit / Feature

Best MCP servers for security testing

20 matching servers. This shortlist is generated from data: stale repos and apps that only carry an MCP tag are ranked lower, verified installs are ranked higher, then GitHub stars. No paid placement in this ranking. Methodology

  1. hexstrike-ai

    Community Install unverified

    HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

    Securityβ˜… 12,785PythonUpdated 2026-08-03
  2. mcp-router

    Community Install unverified

    MCP Router β€” development, support and security updates ended 2026-09-18. Historical source and final release for existing users.

    Securityβ˜… 2,137TypeScriptUpdated 2026-09-18
  3. OpenOSINT

    Community Install unverified

    AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

    Securityβ˜… 1,753PythonUpdated 2026-10-13
  4. wassette

    Community Install unverified

    Wassette: A security-oriented runtime that runs WebAssembly Components via MCP

    Securityβ˜… 965RustUpdated 2026-10-14
  5. sonarqube-mcp-server

    Community Install unverified

    Official SonarQube MCP Server for code quality and security in AI agents

    Securityβ˜… 664JavaUpdated 2026-10-14
  6. cti-expert

    Community Install unverified

    CTI Expert β€” Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.

    Securityβ˜… 611PythonUpdated 2026-09-21
  7. ai-security-tool

    Community Install unverified

    πŸ›‘οΈ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.

    Securityβ˜… 582HTMLUpdated 2026-10-13
  8. mcp-security

    Community Install unverified

    Securityβ˜… 532PythonUpdated 2026-10-06
  9. awesome-osint-mcp-servers

    Community Install unverified

    πŸ”Œ A curated list of OSINT MCP servers. Pull requests are welcomed!

    Securityβ˜… 510Updated 2026-10-10
  10. blitzstrike

    Community Install unverified

    Blitz Strike β€” a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

    Securityβ˜… 508TypeScriptUpdated 2026-10-12

More options

lunar

Community Install unverified

lunar.dev: Agent native MCP Gateway for governance and security

Securityβ˜… 504TypeScriptUpdated 2026-10-14

cross-code-organizer

Community Install unverified

Cross-Code Organizer (formerly Claude Code Organizer): cross-harness config dashboard for Claude Code, Codex CLI, MCP servers, skills, memories, agents, sessions, security scanning, context budget, and backups.

Coding Agents & Code Contextβ˜… 383JavaScriptUpdated 2026-10-14

ai.aliengiraffe/spotdb

Official registry

Ephemeral data sandbox for AI workflows with guardrails and security

SecurityUpdated 2025-10-09

Ankra

Official registry

Deploy and operate Kubernetes: clusters, stacks, apps, logs, metrics and security, with OAuth.

Cloud & DevOpsUpdated 2026-10-10

Arketo

Official registry

Draw your app's architecture on a live canvas and flag the bottlenecks and security gaps.

SecurityUpdated 2026-08-05

Cybret findings

Official registry

Validated API and app vulnerability findings with remediation guidance.

SecurityUpdated 2026-10-08

awesome-mcp-security

Community Stale Install unverified

πŸ”₯πŸ”’ Awesome MCP (Model Context Protocol) Security πŸ–₯️

Securityβ˜… 743Updated 2026-03-03

mcpcan

Community Stale Install unverified

MCPCAN is a centralized management platform for MCP services. It deploys each MCP service using a container deployment method. The platform supports container monitoring and MCP service token verification, solving security risks and enabling rapid deployment of MCP services. It uses SSE, STDIO, and STREAMABLEHTTP access protocols to deploy MCP。

Securityβ˜… 728GoUpdated 2026-04-03

BloodHound-MCP-AI

Community Stale Install unverified

BloodHound-MCP-AI is integration that connects BloodHound with AI through Model Context Protocol, allowing security professionals to analyze Active Directory attack paths using natural language instead of complex Cypher queries.

Securityβ˜… 381PythonUpdated 2025-06-02

agentic-radar

Community App with MCP feature Stale Install unverified

A security scanner for your LLM agentic workflows

AI, Memory & RAGβ˜… 1,061PythonUpdated 2025-11-27

Built an MCP server? Submit or feature it

Free listing via the submission form. Need it fast or want more developers to see it?

Express review, 48h Β· $49Featured Β· $29/moPro Β· $99/moSubmit freeGet your badge

MCP Weekly

The new and trending MCP servers of the week, with install configs. One email a week, free.

We never sell or share your email. Privacy note.