MCP servers leaderboard.
Servers that expose tools, resources and prompts to any MCP client. Browse all of them at /servers.
| # | Listing | Category | Stars / day | Stars | Since |
|---|---|---|---|---|---|
| 1 | Ida Pro MCP AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP. | Security & identity | 22 | 12.5k | Mar 2025 |
| 2 | ai-security-tool 🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). | Security & identity | 16 | 409 | Sep 2026 |
| 3 | Semgrep MCP MCP server that lets AI coding assistants run Semgrep scans directly from Cursor, VS Code, Windsurf or Claude Desktop; started locally with `semgrep mcp`. | Security & identity | 6.8 | 16.9k | Dec 2019 |
| 4 | Jadx AI MCP JADX-AI-MCP is a plugin and MCP Server for the JADX decompiler that integrates directly with Model Context Protocol (MCP) to provide live reverse engineering support with LLMs like Claude. | Security & identity | 5.2 | 2.9k | Apr 2025 |
| 5 | Openworkproof Open protocol for AI agent work contracts and verifiable execution — authorization, evidence, and acceptance for multi-agent systems. | Security & identity | 4.2 | 288 | Jul 2026 |
| 6 | Emilia Protocol Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable. | Security & identity | 3.0 | 612 | Mar 2026 |
| 7 | mcp-security-hub Collection of dockerized MCP servers bringing offensive security tools such as Nmap, Nuclei, SQLMap and Ghidra to AI assistants. | Security & identity | 2.9 | 796 | Jan 2026 |
| 8 | MCP Server for Burp Burp Suite extension that integrates Burp with AI clients through the Model Context Protocol. | Security & identity | 2.2 | 1.2k | Apr 2025 |
| 9 | Ghidrassistmcp An native MCP server extension for Ghidra. | Security & identity | 1.7 | 760 | Jul 2025 |
| 10 | Skylos Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to. | Security & identity | 1.6 | 842 | Apr 2025 |
| 11 | Snyk CLI MCP Server MCP server built into the Snyk CLI for dependency, code and container vulnerability scans from agents. | Security & identity | 1.4 | 5.7k | Oct 2015 |
| 12 | Beelzebub A secure low code deception runtime framework, leveraging AI for System Virtualization. | Security & identity | 1.4 | 2.2k | May 2022 |
| 13 | SonarQube MCP Server SonarSource MCP server that exposes SonarQube Server and Cloud code quality and security analysis to agents. | Security & identity | 1.3 | 656 | Apr 2025 |
| 14 | Apktool MCP Server A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites). | Security & identity | 1.2 | 661 | Apr 2025 |
| 15 | Wireshark MCP Wireshark-MCP，Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data. | Security & identity | 1.2 | 284 | Feb 2026 |
| 16 | Google Security MCP Servers MCP servers from Google for its security products, including threat intelligence and security operations. | Security & identity | 1.0 | 531 | Apr 2025 |
| 17 | Vet Protect against malicious open source packages . | Security & identity | 0.8 | 1.1k | Dec 2022 |
| 18 | Binary Ninja MCP A Binary Ninja plugin containing an MCP server that enables seamless integration with your favorite LLM/MCP client. | Security & identity | 0.8 | 446 | Mar 2025 |
| 19 | Radare2 MCP MCP server for Radare2 disassembler. Provides AI with capability to disassemble and look into binaries for reverse engineering. | Security & identity | 0.6 | 313 | Mar 2025 |
| 20 | falcon-mcp MCP server that integrates AI agents with CrowdStrike Falcon for automated security analysis and threat hunting. | Security & identity | 0.5 | 264 | Jun 2025 |
| 21 | Bitwarden MCP Server Provides AI assistants secure access to Bitwarden password manager functionality via the Model Context Protocol. | Security & identity | 0.5 | 267 | May 2025 |
| 22 | MCP Server Wazuh A Rust-based MCP server bridging Wazuh SIEM with AI assistants, providing real-time security alerts and event data for enhanced contextual understanding. | Security & identity | 0.5 | 237 | May 2025 |
| 23 | MCP Maigret MCP server for maigret, a powerful OSINT tool that collects user account information from various public sources. | Security & identity | 0.4 | 267 | Dec 2024 |
| 24 | Secops MCP All-in-one security testing toolbox that brings together popular open source tools through a single MCP interface. | Security & identity | 0.4 | 216 | Mar 2025 |
| 25 | Socket MCP MCP server enabling AI assistants to query dependency vulnerability scores and security metadata from Socket. | Security & identity | 0.3 | 136 | May 2025 |
| 26 | MCP Shodan MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop. | Security & identity | 0.3 | 174 | Dec 2024 |
| 27 | Auth0 MCP Server Auth0 MCP server for managing applications, APIs, actions and logs in an Auth0 tenant. | Security & identity | 0.2 | 121 | Apr 2025 |
| 28 | Okta MCP Server Open-source MCP server enabling LLMs and AI agents to perform Okta management operations through natural-language commands. | Security & identity | 0.2 | 67 | Sep 2025 |
| 29 | Vault MCP Server HashiCorp MCP server for HashiCorp Vault secrets, policies and mounts. | Security & identity | 0.1 | 64 | Jun 2025 |
| 30 | Infisical MCP Server Official Infisical MCP server exposing secret management, environment and project operations to MCP clients. | Security & identity | 0.1 | 63 | Apr 2025 |
| 31 | Trivy MCP Server Plugin MCP server plugin that brings Trivy vulnerability and misconfiguration scanning into IDEs and AI tools. | Security & identity | 0.1 | 50 | Apr 2025 |
| 32 | GitGuardian MCP Server MCP server for detecting and remediating hardcoded secrets using GitGuardian's API. | Security & identity | 0.1 | 37 | May 2025 |
| 33 | Cycode Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning. | Security & identity | 0.1 | 99 | Jul 2022 |